Confidentiality: What Triggers Discipline and How to Defend It
California imposes one of the strictest confidentiality duties in the nation: an attorney must preserve a client’s confidences “at every peril” to the attorney (Bus. & Prof. Code §6068(e)(1)). At the same time, the law recognizes limited exceptions in the ethics rules and Evidence Code. This page is written for attorneys already facing an OCTC inquiry. It maps the rules (including Cal. Rules of Prof. Conduct rules 1.6, 1.9, and 1.18; Evidence Code §§950–962) to the allegations we most often see—and outlines defensible strategies. It is educational, not a remediation plan.
In California, confidentiality is broader than the attorney–client privilege. The privilege protects communications between lawyer and client from compelled disclosure (Evid. Code §§952, 954), while the duty of confidentiality covers nearly any information relating to the representation, whatever its source (Cal. Rules of Prof. Conduct, rule 1.6 cmt. [2]; Bus. & Prof. Code §6068(e)(1)). Violations are charged under rule 1.6 and §6068(e), often paired with honesty provisions (e.g., Bus. & Prof. Code §6106) when the disclosure is misleading or weaponized in litigation.
Privilege rules and exceptions matter in investigations. The Supreme Court has emphasized the strength of the privilege—e.g., barring judicial “in camera” review of attorney–client communications to test privilege in most circumstances (Costco Wholesale Corp. v. Superior Court (2009) 47 Cal.4th 725, 739–744). Yet California also recognizes exceptions, including the crime–fraud exception (Evid. Code §956), the client–lawyer controversy exception for fee disputes or malpractice (Evid. Code §958), and implied waiver by voluntary disclosure (Evid. Code §912).
Contents
Governing Framework: Rules, Statutes, and Privilege
Core duty. An attorney must “maintain inviolate the confidence, and at every peril to himself or herself to preserve the secrets” of the client (Bus. & Prof. Code §6068(e)(1)). Rule 1.6 prohibits a lawyer from revealing information protected by §6068(e)(1) unless the client gives informed consent, disclosure is impliedly authorized to carry out the representation, or a specific exception applies (Cal. Rules of Prof. Conduct, rule 1.6(a)-(b)).
Exceptions. California permits limited disclosures under rule 1.6(b), including to prevent a criminal act likely to result in death or substantial bodily harm (rule 1.6(b)(1)); to prevent a criminal act or fraud in certain narrow contexts recognized by law; to secure legal advice about compliance with the lawyer’s duties; to establish a claim or defense in a controversy between the lawyer and the client; and to comply with a court order or other law (see rule 1.6(b) & cmt.). Any disclosure must be no more than reasonably necessary and, where feasible, preceded by efforts to persuade the client not to engage in the act and/or by notice to the client (see rule 1.6(c) & cmts.).
Former and prospective clients. Rule 1.9(c) bars use or disclosure of a former client’s confidential information to the former client’s disadvantage, subject to exceptions and with the same breadth as rule 1.6. Rule 1.18 extends confidentiality to prospective clients as to information learned in consultations, even if no attorney–client relationship is formed (Cal. Rules of Prof. Conduct, rules 1.9 & 1.18).
Privilege overlay. The attorney–client privilege is codified at Evidence Code §§950–962. It protects confidential communications between client and lawyer for the purpose of legal advice (§§952, 954). Exceptions include the client–lawyer controversy (§958), crime–fraud (§956), and joint-client disclosures (§962). Privilege is distinct from the ethical duty but informs whether OCTC or a court can compel production; inadvertent or compelled production raises separate waiver issues under §912 and case law (see Rico v. Mitsubishi Motors Corp. (2007) 42 Cal.4th 807, 817–819).
Technology and reasonable safeguards. Competence includes maintaining reasonable cybersecurity and e-discovery practices (Cal. Rules of Prof. Conduct, rule 1.1 & cmt.; State Bar of California Formal Opn. 2010-179 (cloud computing); 2015-193 (e-discovery competence)). California ethics guidance expects “reasonable” measures calibrated to sensitivity, including encryption at rest/in transit, access controls, vendor due diligence, and litigation-hold discipline.
Common OCTC Allegations We See
- Unredacted or over-disclosed filings. Attaching exhibits that reveal client financials, health information, settlement amounts, or strategy when a narrowly tailored filing or protective order was feasible (charged under rule 1.6 and §6068(e)(1)).
- Weaponizing confidences in fee/lien disputes. Over-disclosing client communications in MFAA or fee collection proceedings beyond what is “reasonably necessary” to establish a claim or defense (rule 1.6(b); Evid. Code §958).
- Prospective client leaks. Using intake details against a non-retained prospective client in later adverse work (rule 1.18).
- Email/metadata mishaps. Misaddressed emails, failure to scrub metadata, or forwarding threads that expose strategy (see State Bar Formal Opn. 2015-193 on e-discovery competence).
- Cloud/vendor lapses. Storing case files with third-party vendors lacking confidentiality clauses, MFA, or encryption (2010-179), followed by breach-driven disclosure.
- Joint-client and former-client confusion. Disclosing one co-client’s communications to another where the joint-client relationship has ended without addressing §962 and rule 1.9 constraints.
- “Self-defense” overreach. Citing Evid. Code §958 to reveal entire communications log in response to a narrow client accusation or Yelp review; OCTC often alleges the response exceeded what was “reasonably necessary.”
- Physical evidence issues. Mishandling tangible evidence supplied by a client or third party, confusing confidentiality with privilege; California draws a line between communications and physical evidence (People v. Meredith (1981) 29 Cal.3d 682, 689–695).
Defense Themes That Actually Matter
- Start with scope: Was it confidential “information relating to the representation”? Point to public-record status, third-party possession, or prior client disclosure (rule 1.6 cmt. [2]; Evid. Code §912 (waiver by disclosure)).
- Show informed consent or implied authorization. Documented consent (email or signed writing) or necessity to carry out the representation (rule 1.6(a)).
- Fit a narrow exception and show minimality. If relying on an exception (e.g., §958 self-defense; rule 1.6(b) safety or legal-advice exception), demonstrate that the disclosure was no more than reasonably necessary and that less-intrusive alternatives were considered.
- Privilege remains intact. Where OCTC seeks compelled production, cite Costco to resist in camera merits review of communications and maintain categorical privilege (Costco, 47 Cal.4th at 739–744).
- Reasonable safeguards. Provide your written data-security baseline, vendor due-diligence files, encryption/MFA policies, and incident-response documentation (2010-179; 2015-193) to show competence even if an incident occurred.
- No harm / mitigation. Immediate clawback notices, sequester agreements, and motion practice under the California Arbitration Act or protective-order regime (see Rico, 42 Cal.4th at 817–819 for misdelivered privileged documents and disqualification standards).
- Joint-client clarity. Establish the existence and terms of a joint-client arrangement and the boundaries of §962 (e.g., that communications are not confidential between joint clients).
This section is educational; strategy should be tailored to the charge letter and file.
Key California Cases
- Costco Wholesale Corp. v. Superior Court (2009) 47 Cal.4th 725, 739–744 — The Supreme Court held courts may not examine attorney–client communications in camera to decide privilege where the communication itself is claimed privileged; privilege protects the communication regardless of whether legal advice “predominates.”
- Mitchell v. Superior Court (1984) 37 Cal.3d 591, 599–606 — Privilege is strictly enforced; compelling disclosure of attorney–client communications requires a recognized exception; necessity arguments are disfavored absent statutory basis.
- Rico v. Mitsubishi Motors Corp. (2007) 42 Cal.4th 807, 817–819 — Receiving counsel who recognizes a writing as privileged must stop reading, notify the sender, and refrain from use; misuse can warrant disqualification and sanctions.
- Solin v. O’Melveny & Myers LLP (2001) 89 Cal.App.4th 451, 457–466 — Complaint by lawyer against client may be barred if it cannot be litigated without revealing client confidences; courts balance privilege with ability to maintain the action.
- General Dynamics Corp. v. Superior Court (1994) 7 Cal.4th 1164, 1190–1192 — In-house counsel wrongful-termination claims may proceed subject to safeguards that prevent disclosure of privileged client information; courts fashion procedures to protect confidences.
- People v. Meredith (1981) 29 Cal.3d 682, 689–695 — Communications about the location of physical evidence are privileged, but the privilege does not protect the evidence itself; a lawyer who obtains or alters physical evidence may have disclosure duties and cannot obstruct justice.
- State Comp. Ins. Fund v. WPS, Inc. (1999) 70 Cal.App.4th 644, 656–657 — Inadvertent disclosure does not automatically waive privilege; context and fairness inform waiver analysis; prompt clawback supports preservation of privilege.
Legislative & Rule Notes
California comprehensively revised its Rules of Professional Conduct effective November 1, 2018, adopting a structure closer to the ABA Model Rules but retaining California’s stringent confidentiality policy. Rule 1.6 codifies the exceptions framework while preserving the “at every peril” language via §6068(e)(1). The Evidence Code (enacted in 1965 and amended over time) remains the definitive source on privilege (Evid. Code §§950–962, 912, 956, 958, 962). State Bar ethics opinions continue to guide technology and e-discovery practices (e.g., Formal Opns. 2010-179; 2015-193).
Intersections with other duties recur in discipline files: Candor to the tribunal can collide with confidentiality (Cal. Rules of Prof. Conduct, rule 3.3). Where disclosure is arguably compelled by law or court order, lawyers should seek in camera review of non-privileged factual proffers, narrowly tailored protective orders, and, if necessary, appellate relief—while avoiding unnecessary revelation of client communications (see Costco, 47 Cal.4th at 739–744).
Quick Issue-Spotting Checklist
- Classification: Is the information (a) privileged communication, (b) non-privileged but confidential client “information,” or (c) public/third-party data?
- Authority: Do you have informed consent or implied authorization (rule 1.6(a))?
- Exception: If invoking an exception (e.g., rule 1.6(b) or Evid. Code §958), is the disclosure no more than reasonably necessary?
- Privilege posture: Are you protecting communications categorically under Costco? Have you avoided inviting in camera review of privileged content?
- Safeguards: Encryption at rest/in transit, MFA, access controls, vetted vendors (2010-179), and an incident-response plan (2015-193).
- Clawback: If something was sent inadvertently, have you promptly demanded return/sequestration and stopped any further dissemination (Rico)?
- Prospective/former clients: Screen for rule 1.18 and 1.9 issues before using information learned in prior consultations.
- Protective measures in filings: Redactions, pseudonyms, sealing motions, and stipulations—before filing sensitive exhibits.
FAQ
What’s the difference between confidentiality and privilege?
Privilege (Evid. Code §§950–962) protects communications from compelled disclosure; confidentiality (rule 1.6; §6068(e)(1)) is broader and forbids voluntary disclosure of information relating to the representation, whatever the source, absent consent or a narrow exception.
Can I disclose confidences to defend myself in a fee dispute or grievance?
California recognizes a self-defense exception (Evid. Code §958; rule 1.6(b)), but any disclosure must be limited to what is reasonably necessary. Over-disclosure is a common OCTC charge.
Our intake spoke with someone we didn’t retain. Are we bound by confidentiality?
Yes, as to information received in a consultation with a prospective client (rule 1.18), subject to exceptions. Implement conflict screens and avoid using the information adversely.
What if the court orders me to disclose?
Seek to narrow or quash; request protective orders; avoid revealing privileged content and invoke Costco limits on in camera review of communications. If disclosure must occur, disclose no more than necessary (rule 1.6(b) & cmts.).
Is information already public still “confidential” under rule 1.6?
Public information is generally not protected as a client “secret,” but context matters. Avoid combining public items in a way that reveals strategy or non-public inferences; privilege may still attach to communications about public facts.
What about physical evidence?
The privilege protects communications, not physical evidence. Do not alter or suppress evidence; consult People v. Meredith (29 Cal.3d at 689–695