Why Attorney Email Ethics Still Matter - and Matter More Than Ever

Email communications remain the backbone of the practice of law. Attorneys rely on email messages to correspond with opposing counsel, update clients, exchange documents, and coordinate across law firms - all while managing dockets that rarely slow down. It is efficient, convenient, and produces a written record that can prove invaluable in litigation.

But that same written record is also a liability. Attorney-client communications sent by email carry significant risks that many lawyers underestimate or, over time, simply stop thinking about. Professional responsibility and professional ethics obligations do not pause when you open your inbox. The rules of professional conduct apply to every email you draft, every attachment you send, and every reply all you click without thinking.

The American Bar Association, state bar associations, and ethics committees across jurisdictions have issued formal opinions and ethics opinions addressing the ethical obligations attorneys carry into their electronic communications. Model Rule 1.6, Model Rule 1.4, and related provisions establish the foundational duties of confidentiality, competence, and communication that govern attorney-client relationships - including when those relationships play out over email.

And now, with artificial intelligence tools entering the picture, the landscape has become more complex still. Attorneys using AI-assisted drafting tools, smart email platforms, or automated practice management systems must understand how those technologies interact with their duty of confidentiality, informed consent requirements, and the expectation of privacy their clients reasonably hold.

This article covers the most common - and most consequential - email mistakes attorneys make, updated for the realities of modern legal practice.

Mistake 1: Forwarding or Clicking Reply All Without Thinking

It is one of the most familiar cautionary tales in the legal profession, and it still happens every day. Attorneys working through high-volume inboxes forward an email to the wrong recipient, or hit reply all on a chain that includes opposing counsel, a client, or someone who was never meant to see the message.

These features exist for good reasons. In large matters involving multiple parties, law firms, and counsel's clients, reply all and forwarding can streamline communication considerably. But the efficiency gain evaporates instantly when a message lands in the wrong inbox. An inadvertent disclosure of legal strategy, confidential client information, or privileged work product can compromise a case, damage the attorney-client relationship, and expose a firm to a malpractice claim.

The ABA and various state bar ethics committees have addressed this issue in formal opinions, and the guidance is consistent: attorneys have an ethical obligation to exercise care before sending any electronic communication that could result in unauthorized disclosure. Before forwarding any email chain, review the entire thread - not just the most recent message. Before hitting reply all, confirm every name on the recipient list. A few seconds of review can prevent consequences that take months to address.

The BCC field deserves mention here as well. While BCC can be used appropriately to keep supervising attorneys or staff informed without cluttering a reply chain, it can also be misused - or misunderstood - in ways that create ethical complications. Attorneys should ensure that their use of BCC in client email and opposing counsel correspondence is consistent with their ethical rules and their firm's practice management policies.

Mistake 2: Sending Attachments Without Considering Security or Privilege

Attorneys routinely use email to send documents to clients, opposing counsel, and colleagues. It is fast, familiar, and feels low-stakes. It often is not.

One underappreciated risk involves the relationship between a privileged email and its attachments. Even when an email qualifies as a confidential communication protected by attorney-client privilege, the attached document may be treated separately - and may not carry the same protections. This distinction has real consequences in discovery, and attorneys who assume that attaching a document to a privileged email automatically shields that document from production may find themselves on the wrong side of a waiver argument.

Security is an equally serious concern. Sending confidential client information - bank account numbers, social security numbers, medical records, litigation strategy documents - through standard email without encryption is a practice management risk that the ABA and state bar associations have addressed directly in formal opinions. Model Rule 1.6 requires lawyers to make reasonable efforts to prevent the unauthorized disclosure of information related to the representation of a client. In many cases, that means using a secure portal rather than a standard email attachment.

HIPAA adds another layer of compliance for attorneys who handle health information. The duty of confidentiality under professional responsibility rules and the regulatory obligations under HIPAA may both apply - and both must be satisfied. Attorneys practicing in jurisdictions like North Carolina, New York City, and others with active ethics committee guidance on electronic communication should familiarize themselves with any local formal opinion that addresses these issues specifically. NBI's course on HIPAA Compliance for Attorneys covers this intersection in depth.

Mistake 3: Letting Tone or Content Undermine Professionalism

Every email an attorney sends is a professional document. That standard applies whether the recipient is a client, a colleague down the hall, opposing counsel across the country, or a court-adjacent contact. It applies at 9 a.m. on a Monday and at 11 p.m. on a Friday before a deadline.

Jokes sent to co-workers can be taken out of context, forwarded, and produced in litigation. Angry emails to clients or adversaries have a way of surfacing at precisely the wrong moment. Sloppy grammar, careless spelling, or an unprofessional subject line can subtly undermine an attorney's credibility - with clients who are already anxious, and with opposing counsel who is paying attention.

Professionalism in email messages should extend to every visible element: the subject line, the signature block (including phone number and firm affiliation), the font, and the sending address itself. Attorneys should avoid conducting legal business from personal accounts. An email address that does not reflect the attorney's name or firm affiliation creates confusion and may raise questions about the attorney-client relationship and whether communications were made in a professional capacity.

As AI-assisted drafting tools become more common in law firms, attorneys should also be cautious about relying too heavily on AI-generated email content without careful review. An AI tool may produce prose that is grammatically clean but factually inaccurate, tonally mismatched, or legally imprecise. The professional responsibility obligation for competent communication rests with the attorney - not the tool.

Mistake 4: Inadvertently Disclosing Client Confidences

The duty of confidentiality is foundational to the attorney-client relationship. Under Model Rule 1.6 and its state-level equivalents across jurisdictions, attorneys have a professional obligation to take reasonable measures to safeguard client confidences - and that obligation extends fully to electronic communications.

The ABA has issued formal opinions and ethics opinions addressing how this duty applies in the email context. Depending on the sensitivity of the information being transmitted, attorneys may be required to use encryption, obtain informed consent before using particular communication channels, and advise clients on the security risks associated with email, electronic devices, and shared Wi-Fi networks. Some clients assume that email carries an expectation of privacy equivalent to a sealed letter. In many circumstances, that assumption is not warranted - and the attorney has an obligation to say so.

Attorneys should obtain permission from a client before transmitting case-related information by email, and should confirm that the client is the sole individual with access to the receiving account. Shared email accounts - common in family law matters, business disputes, or situations involving elderly clients and their caregivers - present particular risks. When in doubt, it is often better to send a brief message scheduling a call than to include sensitive details in an email that may be seen by unintended eyes.

Inadvertent disclosure through email is one of the most frequent sources of ethics committee complaints against attorneys. The standing committee on ethics and professional responsibility at both the national and state bar level has addressed this issue repeatedly. Attorneys who have not reviewed applicable formal opinion guidance on email confidentiality in their jurisdiction should do so.

The rise of AI tools creates a new dimension of this risk. Attorneys who use AI platforms to draft, summarize, or analyze emails containing confidential client information must understand how that data is handled by the service provider. Uploading privileged communications or confidential client information into a third-party AI tool without appropriate safeguards or client informed consent may constitute an unauthorized disclosure in violation of the duty of confidentiality. The ethics opinion landscape on this issue is evolving rapidly, and attorneys should monitor ABA formal opinion guidance and their state bar's ethics committee output closely.

Mistake 5: Failing to Communicate Effectively - or at All

Effective communication is not just a courtesy in the practice of law. It is an ethical obligation. Model Rule 1.4 requires attorneys to maintain reasonable and effective communication with their clients - keeping them informed, explaining matters in a way they can understand, and responding to their inquiries in a timely manner. Failure to communicate is consistently among the most common sources of malpractice claims and bar association complaints nationwide.

Email is often the right tool for client communication - but not always. When a matter involves complex legal advice, nuanced strategy, or emotionally charged circumstances, an in-person meeting or phone call may serve the attorney-client relationship far better than a written email exchange. Legalese in an email does not become clearer simply because it is in writing. If a client misunderstands the steps they are supposed to take based on an unclear email message, the downstream consequences can affect the outcome of their case - and the attorney's professional responsibility standing.

Equally common is the failure to respond at all. Attorneys juggling large caseloads sometimes let client emails accumulate unanswered, particularly when the matter does not feel urgent. The client's experience is different. Silence from counsel is anxiety-inducing at best and relationship-damaging at worst. Timely, clear, appropriately detailed responses to client email are not optional - they are part of what representation of a client actually means.

Practice management systems can help attorneys manage communication obligations more consistently, including automated acknowledgment of client emails, task-based follow-up reminders, and integration with client portals. Attorneys who struggle with email volume should explore whether their firm's tools are being used to their full potential - and whether an AI-assisted inbox management tool might help, with appropriate confidentiality safeguards in place.

Attorney Email Ethics in the Age of AI

No modernization of attorney email ethics guidance would be complete without addressing artificial intelligence directly. AI tools are now available that can draft email responses, summarize long email chains, flag potential privilege issues, and even suggest replies based on prior communication patterns.

These tools offer genuine efficiency benefits for busy attorneys. They also raise ethical questions that the legal profession is still working through. At the ABA level and across state bar associations and ethics committees, formal opinion guidance on attorney use of AI is beginning to emerge - and email is squarely within scope.

The key questions attorneys should be asking: Does using this AI tool to process client email constitute a disclosure of confidential information under Model Rule 1.6? Has the client provided informed consent for their communications to be processed by a third-party AI platform? Does the jurisdiction's expectation of privacy analysis apply differently when AI is involved in generating or routing attorney-client communications?

Attorneys who have begun integrating AI into their email workflows should document their practice management policies around these tools, ensure that any AI platform they use has appropriate data handling agreements in place, and monitor the ethics opinion output from their state bar and the ABA's standing committee on ethics and professional responsibility. The rules of professional conduct were written before these tools existed, but the underlying ethical obligations - competence, confidentiality, communication - apply in full.

Frequently Asked Questions About Attorney Email Ethics

What Are an Attorney's Ethical Obligations When Using Email?

Attorneys must comply with the rules of professional conduct in their jurisdiction when using email, including the duty of confidentiality under Model Rule 1.6, the duty of communication under Model Rule 1.4, and related ethical rules governing the handling of confidential client information. These obligations apply to all electronic communications, including email messages and text messages.

What Is Inadvertent Disclosure and How Can Attorneys Avoid It?

Inadvertent disclosure occurs when confidential client information or privileged communications are sent to an unintended recipient - through a forwarding error, a reply all mistake, or an incorrectly addressed email. Attorneys can reduce this risk by reviewing recipient lists carefully before sending, using secure portals for sensitive documents, and following their firm's practice management protocols for electronic communication.

Does Attorney-Client Privilege Apply to Email Communications?

Yes, attorney-client privilege can apply to email communications, provided the communication is made in confidence for the purpose of obtaining legal advice and is not shared with third parties. However, attachments to privileged emails may be treated separately and may not carry the same protections. Attorneys should consult formal opinion guidance from their state bar or ethics committee for jurisdiction-specific analysis.

What Does the ABA Say About Attorney Email Ethics?

The American Bar Association has issued multiple formal opinions addressing attorney email ethics, including guidance on encryption, confidentiality obligations, the use of electronic communication with clients, and more recently, the use of AI tools in legal practice. Attorneys should review applicable ABA formal opinion guidance and their state bar's ethics opinions to ensure compliance with current standards.

Are Attorneys Required to Encrypt Client Emails?

Encryption requirements depend on the sensitivity of the information being transmitted and the rules of professional conduct in the attorney's jurisdiction. The ABA and various state bar associations have issued ethics opinions indicating that, in some circumstances, attorneys must use encryption or obtain informed consent from a client before transmitting sensitive information via standard email. When in doubt, using a secure portal is the more defensible practice.

How Does AI Affect Attorney Email Ethics?

AI tools that process, draft, or analyze attorney-client email communications raise significant ethical questions related to confidentiality, informed consent, and unauthorized disclosure. Attorneys using AI platforms must ensure that client confidences are protected, that clients have provided appropriate consent, and that the tools they use comply with applicable ethical rules. State bar ethics committees and the ABA standing committee on ethics and professional responsibility are actively developing formal opinion guidance on this issue.

Where Can Attorneys Learn More About Email Ethics and Professional Responsibility?

Attorneys can access continuing legal education resources through NBI's course catalog, including programs on legal ethics, attorney email mistakes, HIPAA compliance, and professional responsibility. State bar associations and the American Bar Association also offer CLE programming and ethics opinion libraries that address electronic communication, attorney-client privilege, and related topics.

This article was prepared for educational purposes by the NBI editorial team.

Disclaimer: Nothing in this article constitutes legal advice. Attorneys should consult the rules of professional conduct in their jurisdiction and seek guidance from their state bar or ethics committee regarding specific situations.