When must an in-house lawyer report suspected fraud up the corporate chain, and when may they disclose it outside the company?

Plain-English summary

The lawyer is in-house counsel to a not-for-profit corporation. An employee reported conduct that could be fraud against state and federal governments; the matter was investigated by outside counsel, presented to the board, and the board chose not to act or self-report, then the reporting employee was terminated. The lawyer later encountered further similar conduct, reported it to the general counsel and chief compliance officer, and asked what Rule 1.13 requires.

The committee frames the entity as the client: the lawyer represents the organization, not its constituents, and owes the entity the usual confidentiality duties under Rules 1.6 and 1.9 (communications with constituents acting in their organizational capacity are confidential). Rule 1.13(b) requires reporting up the chain only when the lawyer "knows" (actual knowledge, Rule 1.0(f)) that a person associated with the entity is engaged in conduct that violates a legal obligation to the entity or is a crime or violation that "reasonably might be imputed" to the entity and is "likely to result in substantial injury to the organization." Every element is, in the committee's words, heavily fact-specific. Even when the duty is triggered, what is "reasonably necessary in the best interest of the organization" (Comment 4 factors: seriousness, the actor's role and motivation, entity policy) determines the steps, which may run up to the board or independent directors.

On outside disclosure, the committee explains that Rule 1.13(c) supplements Rule 1.6. After the lawyer has reported up under 1.13(b) and the highest authority insists on or fails to address conduct that is "clearly" a crime or fraud, and the lawyer reasonably believes the crime or fraud is reasonably certain to cause substantial injury to the organization, the lawyer "may" (not must) reveal information to the minimum extent necessary to prevent that injury. The committee stresses the asymmetry: 1.13(c) is narrower than 1.13(b) (it requires conduct that is clearly crime or fraud and injury to the entity, not to a third party), and where disclosure would harm rather than protect the entity, only the Rule 1.6(b)/(c) exceptions can justify it. The committee declines to opine on whether the lawyer may bring a False Claims Act or civil claim against the employer, treating those as beyond the scope of the opinion.

In practice

Under this opinion, the in-house lawyer's reporting obligation up the chain arises only on actual knowledge of conduct meeting all of Rule 1.13(b)'s elements, and whether the lawyer has already satisfied it (here, by reporting to internal audit, the general counsel, and the compliance officer) depends on facts the committee says it cannot resolve, such as whether the board was fully informed. The opinion treats outside disclosure as permissive and tightly bounded by Rule 1.13(c) and Rule 1.6, available only after reporting up has failed on conduct clearly criminal or fraudulent and reasonably certain to injure the entity, and then only to the minimum extent necessary.

Common questions

Q: When must in-house counsel report misconduct up the corporate ladder?

A: Per Rule 1.13(b), only when the lawyer actually knows that a person associated with the entity is engaged in conduct that may be imputed to the entity (or breaches a legal obligation to it) and is likely to cause the entity substantial injury. The committee describes the analysis as heavily fact-specific.

Q: Does the lawyer have to report to the board?

A: Not automatically. Rule 1.13(b) requires steps "reasonably necessary in the best interest of the organization," which under Comment 4 may stop short of, or escalate to, the highest authority depending on the misconduct's seriousness, the actor's role, and entity policy.

Q: Can in-house counsel report the company's fraud to the government?

A: Only as permitted. Rule 1.13(c) allows, but does not require, outside disclosure after reporting up has failed, where the conduct is clearly a crime or fraud reasonably certain to cause substantial injury to the entity, and then only to the minimum extent necessary. Rule 1.6's exceptions otherwise control.

Q: Did the opinion address suing the employer under the False Claims Act?

A: No. The committee expressly declined to opine on whether the lawyer may bring a False Claims Act or other civil claim against the employer, treating it as beyond the opinion's scope.

Background and rules framework

The opinion interprets Illinois Rule of Professional Conduct 1.13 (organization as client), reading its report-up duty in 1.13(b) and its permissive outside-disclosure provision in 1.13(c) together with Rule 1.6 (confidentiality and its crime/fraud exceptions) and Rule 1.9 (duties to former clients, including the entity). These track Model Rules 1.6, 1.9, and 1.13. The committee relies on the rules' comments (1.13 Comments 2-6) and on the actual-knowledge definition in Rule 1.0(f), and cites Illinois case law that an entity's lawyer owes duties to the entity rather than its individual constituents.

Citations and references

Rules of Professional Conduct:

• MR 1.13 / IL RPC 1.13 (organization as client; report-up and outside-disclosure)
• MR 1.6 / IL RPC 1.6 (confidentiality; crime/fraud exceptions)
• MR 1.9 / IL RPC 1.9 (duties to former clients)
• IL RPC 1.0(f) ("knows" / actual knowledge)

Cases:

• Majumdar v. Lurie, 274 Ill. App. 3d 267 (1st Dist. 1995), entity lawyer owes duties to the entity, not its officers or shareholders
• Reynolds v. Henderson & Lyman, 903 F.3d 693 (7th Cir. 2018), the entity is the client, not the owner or manager

See also

• ISBA Ethics Op. 14-03: In-House Lawyer May Not Serve the Company's Customers
• ISBA Ethics Op. 20-05: Client Fraud Discovered in a Nonlitigation Matter
• ABA Formal Op. 514: Advising an Organization on Constituent Legal Risk
• NY State Bar Op. 1191: Municipal Corporation Counsel Reporting Employee Wrongdoing

Source

• Landing page: https://www.isba.org/ethics/opinions/2002