The Maine Professional Ethics Commission recently issued Opinion # 196, on October 21, 2008, that addresses two important questions concerning lawyers’ ethical obligations regarding metadata that may be found on electronic documents transmitted from one party to another:
first, whether it is ethical for an attorney receiving electronic documents (the “receiving attorney”) to make efforts to uncover embedded metadata that contains confidential information not intended to be communicated by the attorney transmitting the document (the “sending attorney”); and second, whether the sending attorney has an ethical duty to take reasonable measures to remove metadata containing confidential information before document transmission.
The commission reached the following conclusions:
1. Without authorization from a court, it is ethically impermissible for an attorney to seek to uncover metadata, embedded in an electronic document received from counsel for another party, in an effort to detect confidential information that should be reasonably known not to have been intentionally communicated.
2. A sending attorney has an ethical duty to use reasonable care when transmitting an electronic document to prevent the disclosure of metadata containing confidential information.
The commission noted that most lawyers today exchange documents with opposing counsel from time to time in electronic form, often via email. Those documents often contain metadata. Most people today are at least vaguely aware of that fact, but many may not know much more about what types of metadata might exist, or how to get rid of it. In light of the commission’s opinion, pleading ignorance isn’t likely to be well received in the future.
The commission provided a thorough, detailed discussion of the various approaches taken by the American Bar Association (“ABA”) and other states. Other jurisdictions have adopted inconsistent approaches “regarding the ethical duties of receiving attorneys in probing documents for metadata containing confidential information,” but “there is greater harmony among the jurisdictions with respect to the duties of sending attorneys to take reasonable measures to minimize the prospect that such data will be inadvertently transmitted.” The Maine commission strived to adopt “a balanced view, articulating reasonable ethical duties on both the receiving and sending attorneys.”
Duties of Receiving Attorneys
The commission first addressed the duties of attorneys who receive electronic documents, and whether they are free to probe the documents in search of hidden metadata. As with many things, New York addressed the issue first, and has advanced the approach (now followed in Maine) that recipients of electronic documents “have an obligation not to exploit an inadvertent or unauthorized transmission of client confidences or secrets.” A few other states, including Florida and Alabama, have followed New York’s lead.
Other jurisdictions, in contrast, have shifted the burden essentially entirely onto the sending party, absolving the recipient of the need to refrain from probing to see what metadata might be lurking behind the scenes. The ABA, for one, has said that its model rules “do not contain any specific prohibition against a lawyer’s reviewing and using embedded information in electronic documents,” and it’s up to the sending lawyer to scrub them first. Maryland and Colorado have followed the ABA’s position.
Still other jurisdictions, like Pennsylvania and the District of Columbia have adopted hybrids of the two extremes, but seem to be much closer to the ABA side of things.
The Maine commission found the New York rule to be the “better view” for several reasons. The commission concluded that “an attorney who purposefully seeks to unearth confidential information embedded in metadata attached to a document provided by counsel for another party, when the attorney knows or should know that the information involved was not intended to be disclosed, has acted outside of these broad ethical requirements.” Going further, the commission stated, “Not only is the attorney’s conduct dishonest in purposefully seeking by this method to uncover confidential information of another party, that conduct strikes at the foundational principles that protect attorney-client confidences, and in doing so it clearly prejudices the administration of justice.” By probing for hidden metadata, according to the commission, “the receiving attorney is making purposeful efforts to probe for information he or she knows or should know to be confidential and not to have been knowingly communicated by opposing counsel. That such conduct is dishonest and designed to prejudice the administration of justice seems beyond dispute.”
So as determined by the commission, “an attorney may not ethically take steps to uncover metadata, embedded in an electronic document sent by counsel for another party, in an effort to detect information that is legally confidential and is or should be reasonably known not to have been intentionally communicated.”
Duties of Sending Attorneys
But the responsibilities don’t lie just with recipients. Even though recipients are not supposed to look for hidden metadata, senders can’t simply send electronic versions of documents without giving the issue any thought.
The Maine commission noted that, unlike the dispute concerning the duties of recipients, “there has been relative unanimity in dealing with [the duties] of sending attorneys.” Under the New York rule, “sending attorneys have a duty to take reasonable measures to guard against improper disclosure of confidential information contained in metadata in documents transmitted to other parties.” Florida, Alabama, Maryland, Colorado and Pennsylvania have more or less said the same thing, although states that follow the ABA’s approach for recipients of electronic documents tend to place a heavier burden on the senders, some even suggesting that lawyers should employ computer consultants to help them scrub all of their documents.
The Maine commission did not go quite that far, instead adopting the familiar “reasonableness” standard that exists in so many areas of the law. The commission “agree[d] with the other jurisdictions that attorneys are ethically required to take reasonable measures to avoid the communication of confidential information, regardless of the mode of transmission.” What exactly those “reasonable” measures should be is left to a case-by-case analysis, although the commission did offer some suggestions.
If an attorney is in doubt, many documents can be readily converted to generic files (such as PDF) which retain little of the metadata contained in word processing documents, and of course resort can be made to paper copies where issues of metadata confidentiality are significant. Although we do not believe that an attorney’s ethical duties dictate, in routine work, the retention of a computer expert for these purposes, we also do not believe it reasonable for an attorney today to be ignorant of the standard features and capabilities of word processing and other software used by that attorney, including their reasonably known capacity for transmitting certain types of data that may be confidential.
The commission was careful to note that its pronouncement was “not intended to deal with the extent to which relevant information may be sought in litigation through proper discovery under the guidance of a court.”
So there is now another reason to be careful about what you send to opposing counsel.