Yes. Lawyers do have to keep confidentiality, and the duty is broader than most people realize: under the American Bar Association’s Model Rule 1.6, which nearly every state has adopted in some form, a lawyer cannot reveal information relating to your representation without your informed consent, unless the disclosure is impliedly authorized to handle your case or falls within a specific exception.1American Bar Association. Rule 1.6: Confidentiality of Information The obligation attaches the first time you speak with a lawyer about hiring them and continues indefinitely, even after your case ends and even after you die.
What the Duty Covers
The rule protects “information relating to the representation of a client,” and that phrase is deliberately wide. It covers facts you tell your lawyer in a meeting, details they uncover through their own investigation, things learned from witnesses or opposing parties, and observations the lawyer makes on their own. If it touches your case, it is covered. The point is that you should be able to tell your lawyer everything, including facts that are embarrassing or damaging, so they can actually represent you.
Some sharing is built into the job. A lawyer is impliedly authorized to discuss your matter with colleagues at the firm, to present relevant facts to the court during proceedings, and to reveal information that cannot reasonably be disputed.2American Bar Association. Model Rules of Professional Conduct – Rule 1.6 Confidentiality of Information – Comment If you want something withheld from other lawyers in the firm or from specific people, say so explicitly. Otherwise, routine sharing within the bounds of representation is the default.
When the Duty Starts and Ends
Confidentiality begins earlier than people think. Under Model Rule 1.18, information you share with a lawyer as a prospective client is protected even if you never hire them, so an initial phone call or free consultation counts.3American Bar Association. Rule 1.18: Duties to Prospective Client You can shop around without worrying that a lawyer you didn’t pick will use your secrets against you.
It also lasts longer than people think. The duty does not end when your case ends, and it does not end when you die. In Swidler & Berlin v. United States, the Supreme Court confirmed that attorney-client privilege survives the death of the client, calling that principle “generally, if not universally, accepted, for well over a century.”4Justia Law. Swidler and Berlin v. United States, 524 U.S. 399 (1998) The ethical duty of confidentiality follows the same logic in most jurisdictions.
Confidentiality Is Not the Same as Attorney-Client Privilege
People use these terms interchangeably, but they are different, and the distinction matters because one is much easier to lose than the other.
The ethical duty of confidentiality is the broader protection. It covers all information related to your representation, from any source, and it prohibits your lawyer from disclosing that information to anyone unless an exception applies.
Attorney-client privilege is a narrower rule of evidence. It protects confidential communications between you and your lawyer made to get legal advice, and its practical effect is that no one can force your lawyer to reveal those communications in court, at a deposition, or in response to a subpoena. It only applies when the communication was genuinely confidential to begin with; if a third party was present who was not essential to the legal consultation, such as a friend who sat in on the meeting, the privilege may never have attached.5Legal Information Institute. Attorney-Client Privilege
The ethical duty belongs to your lawyer, so only your lawyer can violate it. Privilege belongs to you, so you can destroy it without meaning to. Forwarding your lawyer’s strategy email to a friend for a second opinion, posting about your lawyer’s advice on social media, or giving an oral summary of that advice to someone outside the relationship can all waive the privilege on that communication. Treat everything your lawyer sends you as something only you should see.
The Exceptions
The duty is strong but not absolute. Model Rule 1.6(b) lists specific situations in which a lawyer is permitted, and occasionally required, to disclose confidential information.1American Bar Association. Rule 1.6: Confidentiality of Information
Your Consent
The simplest exception. Your lawyer can share information if you give informed consent after understanding the risks and alternatives. This is what happens when your lawyer brings in an expert witness, works with co-counsel, or negotiates a settlement.
Preventing Death or Serious Bodily Harm
A lawyer may reveal information they reasonably believe is necessary to prevent “reasonably certain death or substantial bodily harm.” The classic case is a client who tells the lawyer they intend to hurt someone. Under the ABA’s model, disclosure is permitted rather than required, though some states have made it mandatory.
Preventing or Fixing Financial Harm From a Client’s Crime or Fraud
If a client is using the lawyer’s services to commit a crime or fraud that will cause substantial financial injury to someone else, the lawyer may disclose enough to prevent it, and may also disclose to mitigate or rectify financial damage already caused by that conduct. The client has to have used the lawyer’s services in the scheme. A confession to a fraud that had nothing to do with the lawyer’s work does not trigger this exception.
The Crime-Fraud Exception to Privilege
Related but distinct: attorney-client privilege itself falls away when a client uses a lawyer’s services to plan or carry out a crime or fraud. Communications about past wrongdoing stay protected. Communications used to further ongoing or future crimes do not, and a court can order them disclosed.5Legal Information Institute. Attorney-Client Privilege
The Lawyer’s Self-Defense
A lawyer facing accusations from a client can reveal confidential information to the extent necessary to defend themselves. This covers malpractice suits, fee disputes, and criminal or disciplinary proceedings connected to the representation. The disclosure has to be limited to what is actually needed. A fee dispute is not license to air the whole file.
Court Orders
When a court orders disclosure, the lawyer is not supposed to simply comply. Under the ABA’s guidance, the lawyer should first assert all reasonable arguments that the information is protected, discuss the possibility of an appeal with you if the court rules against them, and only then comply, limiting the disclosure to what is required and seeking protective orders where possible.2American Bar Association. Model Rules of Professional Conduct – Rule 1.6 Confidentiality of Information – Comment
Corporate Clients: Reporting Up and, if Necessary, Out
When the client is an organization rather than an individual, Model Rule 1.13 changes the picture. If a lawyer for a company discovers that an officer or employee is violating the law in a way that could seriously harm the organization, the lawyer must escalate up the chain, potentially to the board. If the highest authority in the company refuses to address a clear legal violation that threatens substantial harm, the lawyer may disclose information outside the organization to prevent that harm, even where Rule 1.6 would otherwise forbid it.6American Bar Association. Model Rule 1.13: Organization as Client
Staff, Vendors, and Digital Security Are Part of the Duty
Confidentiality does not stop at your lawyer’s desk. Under Model Rule 5.3, lawyers are responsible for the conduct of paralegals, secretaries, and outside vendors such as cloud storage providers and document review companies. Partners and managers must have policies giving reasonable assurance that non-lawyer staff will follow confidentiality rules, and any lawyer with direct supervision must actively ensure the staff member’s conduct meets professional standards.7American Bar Association. Rule 5.3: Responsibilities Regarding Nonlawyer Assistance
The digital piece has its own rule. Model Rule 1.6(c) requires a lawyer to “make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.” In practice, that means encrypted communications where appropriate, strong passwords and multi-factor authentication on case files, and avoiding unsecured file-sharing services for sensitive documents. If a breach exposes your information, your lawyer will generally have to tell you, particularly if it could affect your case or your decisions about the representation.
What Happens if a Lawyer Breaches Confidentiality
A lawyer who improperly discloses your information answers to the state bar that licenses them. Discipline scales with the severity of the breach and can include a private reprimand, a public censure that goes on the lawyer’s record, suspension for a defined period, or disbarment.
You can also sue in civil court for legal malpractice or breach of fiduciary duty. To win, you generally need to show that the breach caused you actual harm: a lost case, financial damage, or new legal exposure. Not every improper disclosure supports a viable lawsuit, but when the harm is real, the damages can be substantial.
What to Do if It Happens to You
You have two options, and they are not mutually exclusive.
The first is a disciplinary complaint filed with your state’s bar association or lawyer regulatory agency. You do not need to identify which ethical rule was broken. Describe what happened, attach any supporting documents, and give contact information for witnesses. In most jurisdictions you cannot withdraw the complaint once filed, because the bar has an independent duty to investigate.
The second is a civil malpractice claim. Talk to a legal malpractice attorney if the disclosure caused you measurable harm. You will need to show the lawyer owed you a duty of confidentiality, breached it, and that the breach caused you financial or legal damage. The closer the link between the disclosure and the harm, the stronger the case.
Move quickly on either path. Evidence is freshest early, and malpractice claims are subject to statutes of limitations that vary by state.