Download - Informed consent and cloud computing
![Page 1: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/1.jpg)
Informed Consent & Cloud ComputingJoshua Lenon, esq.Clio – Practice Management Simplified
![Page 2: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/2.jpg)
Cloud Computing Ethics Opinions
![Page 3: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/3.jpg)
Traditional Computing Model
The Internet Local Area Network
![Page 4: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/4.jpg)
Software-as-a-Service Model
The Internet Local Area Network
![Page 5: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/5.jpg)
MODEL RULES OF PROFESSIONAL CONDUCT
![Page 6: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/6.jpg)
6
Lawyers’Duties• Communication
• Respond to or acknowledge client communications• Diligence
• On behalf of your client• Competence
• Awareness of changes in the law & practice• Benefits and of relevant technology
• Continuity• Records retention
• Confidentiality
6
![Page 7: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/7.jpg)
R. 1.6 - Confidentiality• Lawyers must make reasonable efforts to prevent the
inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.
• Exemptions exist• Disclosure is impliedly authorized in order to carry out
representation of the client’s interests• Duty extends to the use of nonlawyers assisting the lawyer• R. 5.3
![Page 8: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/8.jpg)
Rules specifically allow lawyers to disclose confidential client
information with informed consent.
![Page 9: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/9.jpg)
Informed Consent• “The agreement by a person to a proposed course of conduct
after the lawyer has communicated adequate information and explanation about the material risks of and reasonably available alternatives to the proposed course of conduct.”
• Affirmative Response is Required
• Written Affirmation NOT Required on Disclosing Confidential
Information
![Page 10: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/10.jpg)
Informed Consent• Requirements• Lawyer must make reasonable efforts to inform• Client possesses information reasonably adequate to make an
informed decision • Reasonable Standard• Reasonably prudent and competent lawyer
• R. 1.0(H)
![Page 11: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/11.jpg)
Reasonable and Cloud Computing
• Basic understanding of electronic protections afforded by technology
• Consultation with experts• Use providers that have • Reasonable security procedures • Understanding of lawyers’ professional obligations
![Page 12: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/12.jpg)
Security Procedures• explicitly agrees that it has no ownership or security interest in the data;
• has an enforceable obligation to preserve security;
• will notify the lawyer if requested to produce data to a third party, and provide the lawyer with the ability to respond to the request before the provider produces the requested information;
• has technology built to withstand a reasonably foreseeable attempt to infiltrate data, including penetration testing;
• includes in its “Terms of Service” or “Service Level Agreement” an agreement about how confidential client information will be handled;
• provides the firm with right to audit the provider’s security procedures and to obtain copies of any security audits performed;
• will host the firm’s data only within a specified geographic area. If by agreement, the data are hosted outside of the United States, the law firm must determine that the hosting jurisdiction has privacy laws, data security laws, and protections against unlawful search and seizure that are as rigorous as those of the United States and Pennsylvania;
• provides a method of retrieving data if the lawyer terminates use of the SaaS product, the SaaS vendor goes out of business, or the service otherwise has a break in continuity; and,
• provides the ability for the law firm to get data “off” of the vendor’s or third party data hosting company’s servers for the firm’s own use or in-house backup offline.
![Page 13: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/13.jpg)
Server Security
![Page 14: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/14.jpg)
• How is sensitive information being handled?
TRUSTe – Privacy Policy
“TRUSTe’s program requirements are based
upon the Fair Information Principles and OCED
Guidelines around notice, choice, access,
security, and redress - the core foundations of
privacy and building trust. Sealholders are
required to undergo a rigorous review process
to assess the accuracy of privacy disclosures and
compliance with TRUSTe’s requirements in order
to obtain certification.”
![Page 15: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/15.jpg)
Data Escrow
saas provider escrow provider
saas user
![Page 16: Informed consent and cloud computing](https://reader036.vdocuments.mx/reader036/viewer/2022062419/557d79a9d8b42a2c428b4d35/html5/thumbnails/16.jpg)
Conclusion
• Lawyers’ duty of confidentiality can be a mine field
• Reasonable efforts on the part of the lawyer are required to use any tool that may risk disclosure – including cloud computing
• Informed consent protect lawyers from misconduct claims