Virtual Law Practice

Category: Cloud Computing

  • Private Cloud for Lawyers? Slides from Presentation on Future of Legal Service Delivery

     

    Last week I was honored to give a keynote at the annual Canadian Discipline Administrators Conference in Toronto hosted by the Law Society of Upper Canada. The attendees were the discipline authorities of the different Canadian Bar jurisdictions. After speaking with several of them and based on the Q & A session, I can report that our neighbors to the north are grappling with some of the same issues as our State Bar ethics regulators regarding the use of SaaS in law practice management.

    An interesting idea was raised by a member of the group that the Canadian Bar might create a private cloud just for Canadian lawyers. I believe there was some mention of this as well in the cloud computing report published by the Law Society of British Columbia this summer.

    Would this address some of the concerns surrounding lawyers placing their data into the hands of third-party providers and hosting it in a public cloud?  It’s certainly something to think about. My initial reaction was that it would limit competition and because of the expense of creating and maintaining a private cloud, might take away many of the cost-savings associated with a public cloud as well as cause problems when a law firm wants to use another SaaS product that does not collaborate with the Canadian Bar to host a copy of the data on the private cloud. But there would be benefits, especially for Canadian lawyers who are subject to a more rigorous auditing process that requires immediate access by regulators to a law firm’s data.

    I still think the best approach to take would be to create guidelines for lawyers rather than restricting use of web-based technology to a private cloud or restricting technology use to a specific list of approved vendors, especially if that list of vendors might not be updated regularly.

    What do you think about the creation of a private cloud? What if your state bar proposed to create a private cloud just for its members? What about cross-border and multijurisdictional practices?

    The slides from the presentation are below. I’ve integrated several ethics slides that are specific to the Canadian Bar. For those of you familiar with my presentations, the first few slides may be familiar background information on cloud computing and virtual practice, so skip ahead to the interesting case studies and resources.

    Keynote on Future of Legal Services Delivery

  • Law Practice Magazine Covers Virtual Practice

    The September/October issue of the ABA Law Practice Magazine is devoted to virtual practice.  I co-authored an article in the publication entitled Popular Cloud Computing Services for Lawyers: Practice Management Online with Tom Mighell.  Other topics in this issue contain discussions of a variety of virtual practice structures and technologies for online delivery and practice management.  Here are titles and links to some of the other articles in the issue which would be instructive to any attorney or law firm considering adding a virtual law office or other virtual component to its practice management structure:

    Moving to a Virtual Practice Model – Do You Have the Right Stuff? By Jim Calloway

    The Next Five Years – Predictions for the Future of eLawyering By Richard S. Granat and Marc Lauritsen

    The Untethered Law Office – Tools and Tips for Getting It Done By Jay S. Fleischman

    Alternative Fee Arrangements By Mark A. Robertson

    The Virtual Pulse Highlights from the 2011 ABA Legal Technology Survey Report

     

  • New ABA Ethics Opinion on Electronic Communication

    The ABA Standing Committee on Ethics and Prof. Responsibility has published a new ethics opinion, Formal Opinion 11-459 “Duty to Protect the Confidentiality  of E-mail Communications with One’s Client”. I didn’t see this one coming, but I think it’s a move in the right direction.

    The situation described in the opinion relates to when an attorney has reason to believe that his or her client  is sending the attorney or anyone else confidential information via email and the client’s employer has keystroke logging on their system or some other way of monitoring the employee’s activities where there is a risk that the employer  could access that confidential information.

    However, the opinion is worded broadly and might expand to more than just email and to more than just these workplace situations. Check out the last paragraph of the opinion: (more…)

  • Speaking about Virtual Lawyering at SC Solo & Small Firm CLE

    If you will happen to be in or near Columbia, South Carolina on September 23rd, please consider joining me for the SC Bar’s 2011 Solo & Small Firm CLE and Annual Meeting entitled “Exploring the Business Side of Law Firms.”

    There will simultaneous tracks on law office technology and practice management, with sessions ranging from cloud computing and paperless law offices to handling court appointments. Two plenary sessions will bookend the day: “How Not to Commit Malpractice with Your Computer” and “60 Tips for Small Firm Lawyers in 60 Minutes.”

    There will be six ABA TECHSHOW speakers on the faculty, including three from South Carolina. Other faculty include lawyers from across South Carolina. Just like TECHSHOW, there will be social events and exhibits. 15 vendors in law office technology and related products will fill the exhibit space.

    I will be speaking at two sessions entitled “Take to the Cloud: Virtual Law Offices and Cloud Computing” and “Marketing Tips: From Analog to Digital.” If you are interested in joining us, you can register and get the full schedule here.

  • Using the iPad with My Virtual Law Office

    After co-presenting a cloud computing session at ABA TECHSHOW with Tom Mighell, author of iPad for Lawyers, I was finally convinced to integrate a tablet into my virtual law practice.

    Most of my hardware is mobile except for a larger monitor in my home office which I hook up to my laptop when I work at night. (Dual monitors are awesome for multitasking.) I have a little 4G Verizon hotspot that I carry around to keep me online wherever I go and for backup Internet when the DSL is down.

    I still type faster on a traditional, solid keyboard so I’m not at the point where I can generate a lot of written content using my iPad and the touch screen. Most of the keyboards I’ve seen that work with it are too flimsy for what I would put them through daily. So I’m using the iPad primarily for the portability and the applications.

    Security on mobile devices is still a concern of mine. I’m probably more conservative in my use of the iPad than most, but then again, the majority of my communications with my clients online are handled through a system with end-to-end encryption of the data. I’m striving here to find the
    responsible balance between security and cost and time savings. It’s that risk/benefit analysis that constantly changes as the technology and software evolves.

    After several months of working the iPad into my daily grind, here are the apps I’m currently using:

    SignMyPad Pro (by Autriv Software Development) –  I was really impressed with this app. It allows me to sign any document from my iPad.  For example, if someone emails me a form, I save it as a PDF and open it up in SignMyPad.  I can then add text, signatures, fill in a check box, add radio buttons or add the date.  The Pro version of the app tags the GPS location and date/time stamp in the metadata of the PDF when it’s saved. So if I need to collect someone’s signature, I will also have where he or she signed it and at what time and date. When you add a signature you can use either a stylus or your finger to sign in black, blue or red. The signed and locked document can then be uploaded to the virtual law office or otherwise sent where it needs to go.

    QuickOffice – This has turned out to be a necessity for getting any work done with an iPad.  A lot of my work involving writing so I need to be able to jot down ideas or notes and I prefer to do that in this app.  Then I can email it to myself or send to DropBox (if it does not contain confidential information). (more…)

  • LSBC Cloud Computing Working Group Recommendations

    Last week The Law Society of British Columbia’s Cloud Computing Working Group published online a report with recommendations regarding the use of cloud computing by legal professionals.

    Recommendations included in the report include:

    1)      Guidelines to help lawyers conduct due diligence in researching a technology providers and cloud-based solution.  (The report refers to “third party service providers” which includes cloud computing but is much broader in scope.)

    2)       Review of potential changes in the Law Society Rules to ensure that its regulatory functions are kept up to date with the changes in technology.  (Canadian legal professionals are subject to audits of law office records by their governing body whereas most state bars in the United States do not have this investigatory function.)

    3)      Methods that lawyers and law students might be educated to improve understanding of their responsibilities when using technology.

    The report advocates that clear guidelines are needed to assist lawyers in making the decision about what type of technology to use and which providers to trust.  Here is a brief overview of what the Report recommends. Even if you are not practicing law in Canada, these are good recommendations to consider as you conduct your “due diligence” in researching any tech-related practice management decision. (more…)

  • Proposed NC Ethics Opinion on Cloud Computing Returned to Subcommittee

    The Ethics Committee at the North Carolina State Bar voted to send the proposed formal ethics opinion 6 (FEO 6), entitled “Subscribing to Software as a Service While Fulfilling the Duties of Confidentiality and Preservation of Client Property” back to the subcommittee to reconsider responses they received to inquiries #1 and #2.

    Both of these inquiries contained worrisome minimum requirements for the use of cloud computing that many of the technology providers and attorneys using cloud computing are not certain can be practically implemented without resulting in severe restrictions on the use of a wide number of cloud-based applications.

    The Ethics Committee received responses from groups such as ILTSO and the LCCA as well as from individual attorneys both licensed in NC and across the country.  You may read the LCCA’s detailed response on their website. Some of the responses from individuals included:

    – Nicole Black, author of the soon-to-be published by the ABA/LPM Cloud Computing for Lawyers, provided this response;

    – Erik Mazzone, Director of the Center for Practice Management at the North Carolina Bar Association, wrote about the opinion on his Law Practice Matters blog;

    – Richard Granat, co-chair of the ABA eLawyering Task Force, wrote critically of the proposed opinion on his elawyering blog; and

    – I posted the comments that I submitted to the Committee on this blog a few months ago.

    We should have some idea by the end of October about the revisions, if any, that will be made to the proposed opinion by the subcommittee.

     

  • Top Ten Basic Security Practices for a Virtual Law Office

    I love SaaS.  I depend on SaaS to operate my virtual law office.  I support an attorney’s right to choose their own practice management tools and make their own business decisions whether it’s in the cloud or in a filing cabinet.  But there are responsibilities that come along with choosing any practice management system and that means sticking to your own security policies and best practices.

    I’m a solo virtual lawyer, so the burden is on me alone.  Larger practices can designate an associate or hire an IT consultant to keep them up to date and to make any necessary security policies and safeguards.  Regardless of where you are engaging in virtual law practice, it’s always good be reminded of some basic security practices for delivering legal services online.  Here is my list of the top ten basic security practices for a virtual law office:

    1) Keep up to date on the security issues. Read Lifehacker, Slashdot, TechCrunch, etc.

    2)  If you use wireless networking, ensure that all wireless traffic is encrypted with WPA2.

    3)  Keep antivirus software and all software patches updated and turn on the software firewall for the computer.

    4) Use a safer browser, such as Mozilla with the NoScript add-on installed.  Or use another pop-up blocker. Do not use free Wi-Fi hotspots when using any cloud computing application remotely.  Use a cellular phone modem adapter instead.  I just got the 4G wireless hotspot which I highly recommend.  This also serves as backup internet access in my home office as well.

    5)  Never write down usernames and passwords.  Create strong passwords and change them regularly.  Use Keepass or other password management tool and generator.

    6) Go straight to privacy/account settings in any cloud-based application immediately after you register for and change the defaults for better protection.  Then check back occasionally to make sure they haven’t changed their privacy setting options again.

    7) Watch your back when you work in a public place to make sure the person behind you isn’t able to watch your screen as you enter your username and password or your client’s social security number.

    8) Encrypt your hard drive with Truecrypt, free open source encryption software.  Easy to use, free, protects you if your laptop is stolen.  Backup daily with an external hard drive with Truecrypt on it in addition to regular cloud-based backups.

    9) Make sure that the applications you are using to store and transmit confidential law office data are encrypted.  Look for HTTPS in the URL before proceeding.  Don’t enter data unless you know it will be encrypted.

    10) This isn’t going to be a popular one, but be wary of doing a lot of confidential work on your iPad with just any app.  With my virtual law office, I can open the browser and work in https, but other apps, especially iPad and other mobile device apps, do not have this level of security.  Unencrypted email is permitted by the state bars as exercising reasonable care, but most of us know better.  Text messaging your client is not a wise idea for a lot of reasons.

     

  • Feedback on SaaS Ethics Opinion

    Below is the text from my letter to the NC Bar Ethics Committee regarding their proposed ethics opinion on the use of Software as a Service (SaaS) in law practice management.  The Committee has received only two comments so far.  This is an important issue that will have a big impact on attorneys in NC and potentially elsewhere if other state bars follow this example.

    If you are an attorney or IT consultant in NC or even outside the state who uses cloud-based applications, please consider providing the committee with your comments and feedback on the way this opinion should be worded. (more…)

  • Should a SaaS Vendor’s Data Center be an Agent of the Virtual Law Firm?

    Below is a short and to-the-point article that I drafted for the NC Bar Association’s Technical Advisory Committee after our last meeting discussing the proposed NC Ethics Opinion on SaaS.  I wasn’t critical of the opinion at first, until I spoke with a few SaaS vendors and others who explained their positions in greater detail to me.

    If you are licensed in NC and operate a virtual law office, you might want to read the below and consider providing your comments and feedback.  More than one legal SaaS vendor has already indicated that if the ethics opinion is published in its current version, that they will simply pull out of serving the NC legal marketplace.

    Harsh consequences for attorneys practicing here, but also potentially harmful for the public who receive assistance delivered online or from attorneys who use the cost benefits of cloud-computing to make their prices for legal services more affordable.

    _____________________________________________

    The North Carolina State Bar published the revised version of its proposed ethics opinion on the use of SaaS in law practice management on April 21st, entitled, “Formal Ethics Opinion 6: Subscribing to Software as a Service While Fulfilling the Duties of Confidentiality and Preservation of Client Property”.

    Your firm will be in violation of this ethics opinion if it is published as written and your firm uses any of the following products:

    Google (any of their applications or services)

    Yahoo/Hotmail or any other email service attached to a internet service provider, such as Earthlink, Bellsouth, Roadrunner, etc

    Verizon, AT&T, Sprint, T-Mobile

    Lexis or Westlaw for online research and almost all of their other services

    Mozy

    DropBox

    Clio

    Total Attorneys

    Rocket Lawyer

    DirectLaw

    Any other practice management system with a cloud-based component

    Or if your firm engages in the following tasks:

    Email

    Voicemail (Per Erik Mazzone, Director for the Center for Practice Management at the NCBA, “Voicemail on a mobile phone is data hosted on servers owned or contracted by the mobile carrier. The software that enables us to call a number and listen to voicemail is SaaS.”)

    Digital phone’s voicemail services as well as original phone services many of which use voicemail accessible via SaaS.

    Text messaging or SMS

    Online backup or storage

    Online communication with other professionals or clients

    There are two requirements in proposed opinion which may result in the restriction of use by law firms of a majority of the technology software and services that they currently rely on. These provisions are:

    1) “An agreement on how confidential client information will be handled in keeping with the lawyer’s professional responsibilities must be included in the SaaS vendor’s Terms of Service or Service Level Agreement, or in a separate agreement that states that the employees at the vendor’s data center are agents of the law firm and have a fiduciary responsibility to protect confidential client information and client property.” [Emphasis added] ; and

    2) “The agreement with the vendor must specify that firm’s data will be hosted only within a specified geographic area. If by agreement the data is hosted outside of the United States, the law firm must determine that the hosting jurisdiction has privacy laws, data security laws, and protections against unlawful search and seizure that are as rigorous as those of the United States and the state of North Carolina.” [Emphasis added]

    Most software vendors will not sign an agreement assuming this level of liability and agency for client property. Most software vendors will also not restrict their server locations, many of which are georedundant to begin with, to hosting data centers located only in locations with laws as strict as the US and the state of North Carolina. The Legal Cloud Computing Association (LCCA), a group of vendors who provide services to lawyers, and the International Legal Technology Standards Organization (ILTSO) are in the process of writing comments to the NC Bar regarding the negative impact that this opinion will have on legal technology innovation as well as the negative impact that it will have on their customers who practice law in the state.

    There are more practical and realistic ways to address the confidentiality concerns raised in the use of software as a services. It is not practical to expect hundreds of NC practitioners to stop using cloud computing. It is not realistic to expect a technology provider or vendor to assume liability for client property. Minimum requirements should not be imposed on legal practitioners. Instead, this opinion should contain suggestions and guidance for performing due diligence in researching and implementing cloud-based solutions to comply with the rules of professional responsibility.

    There are hundreds of attorneys and law firms in North Carolina that rely on software as a service on a daily basis. If you are one of these firms, please consider writing to the NC Ethics Committee.

MENU