Continuing with Cybersecurity Awareness Month, good security practices need to take into account where many lawyers now do a good share of their work: home.
A home network is generally safer than a coffee shop’s public Wi-Fi, but “safer” is not the same as “secure.” Most home networks are set up by an internet provider’s technician or by the homeowner, with default settings that were never reviewed. Routers often run outdated firmware, retain factory passwords, and share a single network with smart TVs, doorbells, gaming consoles, and family devices of unknown security. Any one of those can become an entry point to the laptop that holds your client files.
While working from home may have become more the norm in a post-COVID world, a lawyer’s obligation to ensure the security of a client’s data when working remotely is nothing new. In 2010, the State Bar of California issued Formal Opinion No. 2010-179, which discussed firms’ obligation to ensure that remote access to client data is adequately secured. Take time this month to ensure you have taken the necessary steps to protect client data when working from home.
If you have not done so already:
1. Change the router’s default administrator name and password.
2. Use WPA3 encryption if available, or WPA2 at minimum, with a long, unique Wi-Fi password.
3. Install router firmware updates promptly, or enable automatic updates.
4. Place smart devices and guests on a separate guest network.
5. Disable remote administration and WPS on the router.
6. Use a VPN or your firm’s secure connection for client work.
7. Enable multi-factor authentication and device encryption.
8. Keep work devices for work, and do not let family members use them.
As attorneys, we have an ethical obligation as part of the practice of law to secure client data and minimize the risk of unauthorized access. Your home network is part of your practice, so treat it that way.
This publication is provided by Greenspoon Marder LLP is issued for informational purposes only and is not intended to be construed or used as general legal advice nor a solicitation of any type. Please contact the author(s) or your Greenspoon Marder LLP contact if you have any questions regarding the currency of this information. The hiring of a lawyer is an important decision. Before you decide, ask for written information about the lawyer’s legal qualifications and experience.
