Friday, March 20, 2009

Protecting Client Confidentialy through Personnel Management

We've discussed the tangible, hard-wired aspects of protecting client confidentiality through data security -- the systems an LPO needs to have in place to control data collection, as well as access and utilization.

The other aspect of protecting client confidentiality is a bit, well, squishier. It's not the binary, flow-chart dictated, password protected black and white of data systems. Instead, it is the softer science of personnel management and all that it entails -- personalities, histories, and motivations.

Softer, yes, but no less demanding and integral to the ethical obligation of ensuring confidentiality. So, to fully realize the duty of confidentiality, an LPO needs to compliment data integrity with a multi-faceted approach to personnel management.

Employee Vetting - The first step, clearly, is the completion of a thorough background and reference checks, as well as confirmation of professional standing.

Contractual Provisions - Each employee - onshore and offshore - must be subject to Confidentiality and Non-Disclosure Agreements.

Education and Training - Admission to the Bar in most jurisdictions is contingent on passing the Multistate Professional Responsibility Examination, so it reasons to follow that offshore attorneys should be proficient in the same model rules.

Business to Business - An additional mechanism that can be employed is an individual confidentiality agreement between the LPO and counsel.The ABA strongly advises these agreements, and the Association of the Bar of the City of New York (Ethics Opinion 2006-3) recommends “contractual provisions addressing confidentiality and remedies in the event of breach, and periodic reminders regarding confidentiality.”

Corporate Culture - Another consideration for an LPO is cultivating a corporate culture that puts a premium on low attrition. A stable work force to some degree reflects company loyalty, and it can mitigate confidentiality risks by minimizing the number of former employees in circulation


Just like data systems need ongoing QA efforts, personnel protocols also need periodic reinforcement to be maximized. Personnel management within an LPO -- in the service of protecting client confidentiality -- must be understood to be an continual process.

No comments: