What Reasonable Efforts Require

Rule 5.3 asks for effort, and both of its supervisory duties say so in the same words. Managers must “make reasonable efforts to ensure that the firm has in effect measures giving reasonable assurance” that a nonlawyer's conduct is compatible with the lawyers' obligations, and the lawyer with direct supervisory authority must “make reasonable efforts to ensure that the person's conduct is compatible with the professional obligations of the lawyer.”¹ Neither subsection says what the efforts are. As with Rule 5.1, Rule 5.3 and its comments set out no specific measures that every firm must take, so a lawyer cannot work through a checklist and call the duty discharged.²

Reasonableness is therefore measured against the facts: the firm's size and structure, the assistant's role, and the sensitivity of the information the assistant handles. A fixed menu of measures would burden a two-lawyer office with programs it has no use for and leave a firm of hundreds under-protected. A guarantee of good behavior would be worse, because it would punish lawyers for results they cannot control.

Context shapes the measures; it does not lower the floor. The expected level of instruction and supervision for a nonlawyer is higher than for another lawyer in the firm, because nonlawyers lack a lawyer's professional training and cannot themselves be disciplined.³ A lawyer who gives a paralegal the light touch suited to a junior lawyer has misjudged the duty. Because discipline cannot reach assistants, the lawyer's own effort is the main way the profession's norms reach them.

That effort has three practical parts, and each applies under both subsections. Instruction and training tell assistants what is expected. Ongoing supervision and review show the lawyer whether the expectation is met. Attention to outside vendors and contractors extends both to people whose work leaves the office but whose conduct remains the lawyer's concern. The rule promises no flawless result, and it gives no credit for effort never made.

Instruction and Training

Instruction comes first because an assistant cannot follow obligations that no one has explained. Subsections (a) and (b) speak only of reasonable efforts and measures; the commentary supplies the content. A lawyer should give assistants “appropriate instruction and supervision concerning the ethical aspect of their employment, particularly regarding the obligation not to disclose information relating to representation of the client,” and the measures used “should take account of the fact that they do not have legal training and are not subject to professional discipline.”⁴

Confidentiality leads that instruction because assistants handle client files, telephone calls, and email every day, and because the protected category is broad. Information relating to the representation is broadly protected as confidential, so every lawyer must institute appropriate measures within the practice to safeguard it, and Rule 1.6(c) expressly requires “reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.”⁵ Comment 2 to Rule 5.3 emphasizes the same obligation.⁶ An assistant who believes that only damaging facts are confidential will repeat harmless-looking ones freely, so instruction must convey how far the duty reaches.

The instruction has to come from the lawyer because of how lawyers themselves learn their duties. A lawyer reaches the confidentiality rule through legal training and the prospect of discipline; an assistant has had neither. A new secretary who overhears a client's telephone call has only ordinary social habits to draw on, and in ordinary life describing a hard day at work to friends does no harm. A lawyer therefore may not simply hope that the right course will be obvious to nonlawyers, or that assistants will absorb ethical expectations through osmosis because they work in a law office.⁷

What the lawyer owes is “a deliberate and considered plan of instruction and supervision,” with particular attention to the duty not to disclose confidential information.⁸ A plan for the start of an assistant's work commonly draws on three tools, each doing a different job:

An orientation at the outset, in which a lawyer or manager explains what counts as confidential, who inside the firm may hear it, and what the assistant may say outside the office.
A written office policy the assistant can consult later, which states the firm's expectations the same way every time and does not depend on any lawyer's memory of what was said.
A signed confidentiality agreement, which reminds the assistant that confidentiality is a continuing obligation and gives the firm a direct means of enforcement if someone discloses information after leaving.⁹

The agreement complements orientation and does not replace it. A signature records a promise; it does not teach an assistant which facts are protected, and its enforcement value appears only late, after the assistant has gone. Continuing education from bar associations and from associations of legal administrators and legal assistants can help assistants appreciate professional standards, but it is no substitute for substantial instruction within the firm.¹⁰ Responsibility divides as the earlier sections described. Managers build the firm-wide program under Rule 5.3(a), and the lawyer who directs a particular assistant tailors the instruction under Rule 5.3(b) to what that person actually handles. A paralegal who speaks with clients needs more specific guidance than a courier who delivers sealed envelopes.

An exam stem on this component describes what happened at the start of an assistant's employment and then shows a disclosure. The question to ask is what the lawyer said before the disclosure occurred.

The tempting answer blames the secretary alone. But a nonlawyer who was never told the rule is not subject to professional discipline for breaking it, which leaves the lawyer as the only person the system can hold to account.

The lapse at the second firm shows only that instruction cannot guarantee perfect conduct, a result the standard of reasonable efforts accepts. It does not show that the lawyers were finished, because instruction at the start reveals nothing about whether the rules are being followed. That question belongs to ongoing supervision.

Ongoing Supervision and Review

Instruction tells assistants what is expected; it cannot tell the lawyer whether the expectation is met, and assurance of compliance cannot rest on hope. The second component of reasonable efforts is therefore monitoring. Rule 5.3(a) requires measures “giving reasonable assurance” that nonlawyers' conduct is compatible with the lawyers' obligations, and Rule 5.3(b) puts the same duty on the lawyer who directs the assistant's work.¹² The lawyer must establish office policies and procedures designed to give reasonable assurance that assistants will continue to satisfy professional expectations and to detect problems at the earliest possible stage.¹³

Each half of that standard has its own logic. The word “continue” addresses time: an assistant oriented in the first week meets new tasks, new clients, and deadline pressure for years afterward, and a rule that was clear at orientation can erode without anyone deciding to break it. The phrase “earliest possible stage” addresses the cost of delay. An assistant with no legal training and no exposure to discipline is poorly placed to notice that a client call has drifted into legal advice or that a casual remark has disclosed a confidence, and the lawyer is the person best positioned to notice.¹⁴ A problem caught while the file is still on the lawyer's desk can be corrected; one that surfaces in a client's complaint has usually done its harm. Oversight must therefore generate real knowledge of the work.

How much oversight satisfies the rule depends on three variables: the assistant's role, the firm's size, and the stakes of the task. A paralegal who drafts documents and speaks with clients needs closer review than a courier who delivers sealed envelopes. A large firm needs procedures that work without any one partner watching. Work that touches client confidences warrants more checking than routine scheduling. The commentary builds this calibration into the standard by telling lawyers to account for assistants' lack of legal training and exposure to discipline.¹⁵

Decisions under Rule 5.1, the parallel rule on supervising lawyers, show how far calibration goes. They are analogies, not holdings under Rule 5.3. One court explained that supervising lawyers may use many different procedures, depending on the size of the firm, to review their subordinates' work, and that the rule does not make a supervisor answerable every time another lawyer violates the rules.¹⁶ Another court agreed that among experienced lawyers “informal supervision and periodic review” suffice. It held them inadequate for a lawyer who had recently acted in a substantially “aberrant” fashion and whom his partners believed to be suicidal and at risk, because the obligation varies with experience and with serious emotional impairment.¹⁷ Assistants begin with no legal training at all, so oversight should rise whenever risk rises: with a newly hired assistant, with unfamiliar and sensitive work, and with earlier lapses that have surfaced.

The floor appears in a disciplinary decision about nonlawyer assistants. The court found that the lawyer “utterly and completely failed to comply with his professional obligations” and “abdicated his professional responsibilities over the practice of law, allowing his non-lawyer assistants to run his practice with only token supervision.”¹⁸ His only significant “supervision” was a review of monthly graphs showing the number of cases settled and the income generated.¹⁹ Those numbers report on the office in aggregate and say nothing about any file. A graph can rise because settlements are going well or because staff are closing files cheaply, and it cannot show that a given client's circumstances called for something different. With only totals in hand, the lawyer had no way to detect a problem in a single matter before it reached the client, and detection is what oversight exists to do.

The Chapman decision shows the same defect from another angle. The court found by clear and convincing evidence that a consulting agreement, as the lawyer implemented it, violated MRPC 5.3, that jurisdiction's version of the rule.²⁰ It recognized that a firm may engage consultants and may delegate much of its file or case processing to paralegals and other paraprofessionals, but it held that the lawyer still has “an ethical obligation to oversee and manage the work delegated.”²¹ The flaw was that virtually all core case responsibility was ceded to the consultant.²² In both decisions the lawyer kept the title of supervisor and gave up the substance. Delegation is permitted and abdication of core responsibility is not, a line the next section develops.

Hypothetical Illustration

A litigation lawyer directs a paralegal who drafts discovery responses and speaks with clients. The lawyer reads each draft before it leaves the office, pulls a few of the paralegal's files every month to compare the file notes with the work done, and asks about particular conversations when a client's question suggests the paralegal may have said too much. The same firm's courier, who delivers sealed envelopes, works under a short written policy and an occasional reminder from the office manager. The paralegal once mentions a client's name to an outsider, and the next file check turns it up within weeks. The oversight of the paralegal gives the lawyer actual knowledge of the work, and the lighter oversight of the courier fits a job with almost no access to client information. Both satisfy the standard, and the paralegal's slip, caught early, does not establish a breach.

The litigation lawyer in that scene could say, for any file, what the paralegal had done and said, which is the knowledge that monthly graphs and a ceded caseload never supply. The paralegal and the courier receive different levels of attention and both pass, because the standard measures effort against the risk the role carries. An exam stem usually signals the answer through what the lawyer knew about the files. A lawyer who reviewed drafts, examined files, or discussed specific problems has made reasonable efforts; one who read totals, issued blanket guidelines, or ceded core responsibility has not. Two shortcuts mislead here. A lapse by a well-supervised assistant does not establish a breach, since the rule asks for reasonable effort and not a guarantee. A schedule of meetings does not establish compliance either, because regular contact says nothing about whether the lawyer's attention reaches the work itself.

Outside Vendors and Contractors

Neither subsection of Rule 5.3 confines the nonlawyer to the firm's payroll or office. The lawyer's duties of instruction and supervision reach independent contractors who offer services in or outside the office, and if a firm delegates word processing, duplication, or filing to them, its managerial and supervisory lawyers must adopt appropriate measures to ensure that these persons also understand and adhere to professional ethical standards.²⁴ The comments say the same of nonlawyers used within or outside the firm: the lawyer must take measures that assure their activities comply with the lawyer's professional obligations.²⁵ For technical services, the American Bar Association's ethics committee advises that a firm using an outside computer maintenance company must “ensure that the company has in place, or will establish, reasonable procedures to protect the confidentiality” of the firm's computer files.²⁶

Responsibility does not leave the office with the work. A vendor, like any assistant, lacks legal training and cannot be disciplined, so the lawyer is the only person the disciplinary system can reach. If sending a task to an outside company discharged the lawyer's duties, delegation would become an easy way around confidentiality, and client information would pass to people no one could sanction. A client file stored with or serviced by an outside company is still information relating to the representation, and the lawyer must still make reasonable efforts to prevent its inadvertent or unauthorized disclosure.²⁷ What changes with a vendor is the form of the effort. A lawyer cannot watch a vendor employee's screen as easily as an assistant's down the hall, so the effort moves toward choosing the vendor, telling it what is required, checking its safeguards, and settling who will monitor it.

The vendor's access sets the stakes, since a maintenance technician can see everything on the system and the firm's confidentiality therefore depends on how that company's people behave. The firm's breach lies in the absence of any effort beforehand; the technician's slip is the harm such effort exists to prevent.

The first move is instruction. When a lawyer retains or directs a nonlawyer vendor, Comment 3 requires the lawyer to communicate clear instructions so that the vendor's conduct is compatible with the lawyer's professional obligations.²⁸ A hosting or maintenance company serves many customers, and nothing in its routine tells its technicians that this customer's files carry professional obligations.

The second move is verification. Instructions cannot protect information held by a vendor whose own systems are careless, which is why the ethics committee's advice speaks of procedures the company has in place or will establish and does not rest on the lawyer's say-so.²⁹ The more of the file the vendor can reach, the more the firm must learn about its safeguards. Storing client files with a vendor calls for far more checking than handing a shredding company sealed boxes of public records.

The third move settles who watches once the engagement begins. Comment 4 calls for the lawyer and the client to agree on how responsibility for monitoring an outside vendor is divided between them.³⁰ Without that agreement each side can assume the other is checking, and no one does. The agreement allocates monitoring only; the lawyer's own instruction and verification remain in place.

An essay stem about a vendor engagement usually discloses its answer through what it says, or fails to say, about those steps, and a stem that describes all of them points toward compliance.

The two engagements differ in whether any effort preceded the lapse, and that fact decides the outcome, because the rule measures effort against risk and does not guarantee perfect vendor conduct. A signed contract or a vendor's assurance that it takes security seriously supplies neither instruction, verification, nor an allocation of monitoring. A lawyer who instructs the vendor but never checks its safeguards, or who vets the vendor but never settles who monitors it, has made only part of the effort.

The standard bends when a lawyer lacks control over the people involved, and the rule on prosecutors shows how. Rule 3.8(f) gives a prosecutor a duty to “exercise reasonable care” to prevent others from making prejudicial public statements. For persons who assist the prosecutor but are not employed by or subject to the disciplinary supervision of the prosecutor's office, that duty becomes a duty of clear notice and appropriate education.³¹ The guidance should not be perfunctory, and it should not suggest that the standards matter less because the rules cannot be enforced directly against nonlawyers outside the prosecutor's supervision.³² Federal law enforcement personnel, by contrast, ordinarily work under the unified authority of the Department of Justice and so are subject to direct control by lawyers.³³

A vendor sits between those poles. Like the outsiders in the prosecutor's setting, it works beyond the lawyer's daily view and cannot be disciplined, so clear notice and instruction are indispensable. Unlike them, it is chosen by the firm, which can write the engagement terms and ask about safeguards, so the lawyer's efforts reach further and include vetting. The prosecutor material is an analogy under a different rule and not a holding about vendors. It shows that reasonable efforts track the lawyer's control over the persons involved, and that where control is slight they consist of clear notice and appropriate education.