TX 2016-12-01

What must a Texas lawyer do to keep confidential metadata out of documents they send, and what may a lawyer do with metadata they receive from opposing counsel?

Short answer: Per the Committee, a lawyer's duty of competence and confidentiality (Rules 1.01 and 1.05) requires reasonable measures to remove confidential metadata before sending documents; on the receiving side Texas has no rule barring searching for or using metadata or requiring notice, but the lawyer may not use what is learned to convey false or misleading information (Rules 8.04(a)(3) and 3.03(a)(1)).
Currency note: this opinion is from 2016
Subsequent statutory amendments, court decisions, or later opinions or rule amendments may have changed the analysis. Treat this page as historical context, not current legal advice. Verify current law before relying on any specific rule, deadline, or remedy mentioned here.
Disclaimer: Advisory only. Not binding precedent.
About this page: The plain-English summary, reader guidance, and Q&A below were written by Ezel based on the official ethics opinion. The original opinion (linked at the bottom of this page, or PDF in the sidebar) is the authoritative source for any reliance.
View original ethics opinion (PDF)

Texas Ethics Opinion 665: Metadata, Scrubbing Before Sending, and Handling What You Receive

Short answer: Per the Committee, a lawyer's duties of competence and confidentiality require reasonable measures to remove confidential metadata before sending electronic documents; Texas has no rule barring a recipient from searching for or using metadata or requiring notice, but the lawyer may not use what was learned to convey false or misleading information.

Disclaimer: This is an advisory ethics opinion. Advisory opinions are not binding; they interpret the Texas Disciplinary Rules of Professional Conduct and are persuasive authority. This summary is for research purposes only and is not legal advice. Verify current rules before acting on any specific guidance.

About this page: The plain-English summary and Q&A below were written by Ezel based on the official opinion. The opinion text is reproduced at the bottom; the official source (linked) controls.

View original opinion

Plain-English summary

The opinion addresses metadata, the embedded data (document history, tracked changes, comments, authorship) that travels with electronic documents and is not visible on the face of the document. Lawyer A emails opposing counsel Lawyer B a draft settlement agreement whose metadata reveals confidential information about ongoing negotiations, and Lawyer B has no reason to think Lawyer A meant to include it. The opinion answers two questions: a sending lawyer's duty to prevent inadvertent transmission, and a receiving lawyer's duties.

On the sending side, the Committee grounds the duty in Rule 1.01 (competence) and Rule 1.05 (confidentiality). A lawyer's duty of competence requires understanding that electronic documents carry metadata, that it may include confidential information, that recipients can access it, and that steps can be taken to prevent its transmission. Lawyers therefore must take reasonable measures to avoid transmitting confidential information embedded in documents, including using reasonably available technical means to remove metadata before sending. The opinion lists common methods: software to "scrub" metadata, converting to a format that does not preserve it, or sending by fax or hard copy. Whether the measures were reasonable is fact-specific (the steps taken, the sensitivity of the metadata, the intended recipient), and not every inadvertent disclosure violates Rule 1.05.

On the receiving side, the Committee, consistent with Opinion 664, finds no specific Texas rule requiring or forbidding any particular action. The rules that apply are Rule 8.04(a)(3) (no dishonesty, fraud, deceit, or misrepresentation) and Rule 3.03(a)(1) (no false statement of material fact or law to a tribunal). So while Texas does not bar searching for, extracting, or using metadata, and does not require notice, a lawyer who has reviewed metadata may not, by action or inaction, convey information that is misleading or false because it ignores what the lawyer learned. The opinion notes other jurisdictions follow approaches like Model Rule 4.4(b) (prompt notice of inadvertently sent material), which may bind a Texas lawyer subject to those rules, and cautions that conduct can have material consequences for the client, including procedural disqualification under In re Meador; under Rule 1.03(b) the lawyer should discuss material risks with the client. The opinion applies only to voluntary transmission outside discovery; discovery is governed by court rules such as Tex. R. Civ. P. 193.3(d).

In practice

Under this opinion, and under the Texas rules as they stood at the time of the opinion, a lawyer must take reasonable, fact-dependent measures to remove confidential metadata before sending electronic documents to anyone other than the client. The opinion holds that a receiving lawyer is not required by the Texas rules to notify the sender or to refrain from reviewing metadata, but may not use what the metadata reveals to make or leave standing a false or misleading statement under Rules 8.04(a)(3) and 3.03(a)(1), and should weigh consequences (including disqualification) and discuss material risks with the client under Rule 1.03(b); other jurisdictions' rules and court discovery rules may impose more.

Common questions

Q: Do I have to scrub metadata before emailing documents to opposing counsel?

A: Per Opinion 665, yes; the duty of competence and confidentiality requires reasonable measures to remove confidential metadata, such as scrubbing software, format conversion, or sending by fax or hard copy, with reasonableness judged on the facts.

Q: If opposing counsel sends me a document with revealing metadata, can I look at it?

A: The opinion states the Texas rules do not bar searching for, extracting, or using metadata and do not require notifying the sender, though other jurisdictions' rules (like Model Rule 4.4(b)) or court rules may impose duties.

Q: Is there any limit on using metadata I find?

A: Yes. The opinion holds a lawyer who reviewed metadata may not, by action or inaction, convey false or misleading information that ignores what was learned, under Rules 8.04(a)(3) and 3.03(a)(1).

Background and rules framework

The opinion interprets Texas Disciplinary Rule 1.01 (competence; ABA Model Rule 1.1), Rule 1.05 (confidentiality; ABA Model Rule 1.6), Rule 8.04(a)(3) (dishonesty, fraud, deceit, or misrepresentation; ABA Model Rule 8.4(c)), and Rule 3.03(a)(1) (candor toward the tribunal; ABA Model Rule 3.3). It contrasts the absence of a Texas counterpart to ABA Model Rule 4.4(b).

Citations and references

Rules of Professional Conduct:

  • MR 1.1 (competence)
  • MR 1.6 (confidentiality of information)
  • MR 8.4(c) (dishonesty, fraud, deceit, or misrepresentation)
  • MR 3.3 (candor toward the tribunal)
  • Texas Disciplinary Rules 1.01, 1.05, 8.04(a)(3), 3.03(a)(1)

Court rules:

  • Tex. R. Civ. P. 193.3(d) (inadvertently produced privileged material in discovery)

Cases:

  • In re Meador, 968 S.W.2d 346 (Tex. 1998)

Other opinions cited:

  • Texas Professional Ethics Committee Opinion 664 (October 2016): receipt of an opposing party's confidential information

See also

Source

Original opinion text

Reproduced from the official source for research purposes. The linked source is authoritative.

QUESTION PRESENTED

What are a Texas lawyer's obligations under the Texas Disciplinary Rules of Professional Conduct to prevent the inadvertent transmission of metadata containing a client's confidential information?
What are a Texas lawyer's obligations under the Texas Disciplinary Rules of Professional Conduct when the lawyer receives from another lawyer a document that contains metadata that the receiving lawyer believes contains and inadvertently discloses confidential information of the other lawyer's client? For example, is the receiving lawyer permitted to search for, extract, and use the confidential information, and is the receiving lawyer required to notify the other lawyer of the receipt of the confidential information?

STATEMENT OF FACTS

Lawyer A represents a client in the settlement of a civil lawsuit. Lawyer A sends a draft settlement agreement to opposing counsel, Lawyer B, as an attachment to an email. The attachment includes embedded data, commonly called metadata. This metadata is digital data that is not immediately visible when the document is opened by the recipient of the email but can be read either through the use of certain commands available in word-processing software or through the use of specialized software. In this case, the metadata includes information revealing confidential information of the client of Lawyer A related to ongoing settlement negotiations. Lawyer B has no reason to believe that Lawyer A intended to include this metadata in the attachment.

DISCUSSION

In this opinion, "confidential information" refers to both privileged information and unprivileged client information, as defined in Rule 1.05(a) of the Texas Disciplinary Rules of Professional Conduct.

The exchange of electronic documents is an essential part of modern law practice. When an electronic document is created or edited, some computer programs will automatically embed information in the document. Embedded information that describes the history, tracking, or management of an electronic document is commonly known as "metadata." A common example of metadata is embedded information that describes the identity of the owner of the computer that created the document and the date and time of creation. Similarly, some computer programs use embedded metadata to track the changes made to a document as well as the comments of the various reviewers of the document.

Frequently the exchange of metadata between lawyers is either mutually beneficial or otherwise harmless, such as when a lawyer intentionally transmits a document containing tracked changes in order to facilitate the negotiating process. However, the inadvertent disclosure of metadata containing a client's confidential information could be harmful to the client. The risk of such inadvertent disclosure is heightened by the fact that metadata is generally not visible from the face of an electronic document unless the user takes some additional action.

The first question raised is whether the Texas Disciplinary Rules of Professional Conduct require lawyers to take steps to prevent the inadvertent transmission of metadata containing confidential information. The answer is governed by Rules 1.01 and 1.05.

With certain exceptions not relevant here, Rule 1.01 generally prohibits a lawyer from accepting or continuing "employment in a legal matter which the lawyer knows or should know is beyond the lawyer's competence." "Competence," as defined by the Terminology Section of the Texas Disciplinary Rules, "denotes possession or the ability to timely acquire the legal knowledge, skill, and training reasonably necessary for the representation of the client."

Rule 1.05 generally prohibits lawyers from knowingly revealing confidential information to a lawyer representing the opposing party, subject to limited exceptions set out in the Rule. Rule 1.05 reflects a lawyer's duty "to maintain confidentiality of information acquired by the lawyer during the course of or by reason of the representation of the client." Comment 2 to Rule 1.05. "Knowingly," as used in Rule 1.05, "denotes actual knowledge of the fact in question. A person's knowledge may be inferred from circumstances." Terminology Section of the Texas Disciplinary Rules.

In the opinion of the Committee, a lawyer's duty of competence requires that lawyers who use electronic documents understand that metadata is created in the generation of electronic documents, that transmission of electronic documents will include transmission of metadata, that the transmitted metadata may include confidential information, that recipients of the documents can access metadata, and that actions can be taken to prevent or minimize the transmission of metadata. Lawyers therefore have a duty to take reasonable measures to avoid the transmission of confidential information embedded in electronic documents, including the employment of reasonably available technical means to remove such metadata before sending such documents to persons to whom such confidential information is not to be revealed pursuant to the provisions of Rule 1.05. Commonly employed methods for avoiding the disclosure of confidential information in metadata include the use of software to remove or "scrub" metadata from the document before transmission, the conversion of the document into another format that does not preserve the original metadata, and transmission of the document by fax or hard copy.

Whether a lawyer has taken reasonable measures to avoid the disclosure of confidential information in metadata will depend on the factual circumstances. Relevant factors in determining reasonableness include the steps taken by the lawyer to prevent the disclosure of the confidential information in metadata, the sensitivity of the metadata revealed, the identity of the intended recipient, and other considerations appropriate to the facts. Not every inadvertent disclosure of confidential information in metadata will violate Rule 1.05.

The second question is whether the Texas Disciplinary Rules impose particular duties on a lawyer who receives an electronic document containing metadata that appears to include confidential information of another party. There is no specific provision in the Texas Disciplinary Rules requiring a lawyer to take or refrain from taking any particular action in such a situation. See Professional Ethics Committee Opinion 664 (October 2016) ("The Texas Disciplinary Rules of Professional Conduct do not prescribe a specific course of conduct a lawyer must follow upon the unauthorized or inadvertent receipt of another party's confidential information outside the normal course of discovery.").

In the absence of specific provisions of the Texas Disciplinary Rules governing this situation, the Committee can offer only limited guidance for lawyers dealing with the receipt of documents containing metadata. In most circumstances, the provisions of the Texas Disciplinary Rules that must be considered by lawyers with respect to the receipt of documents containing metadata are Rule 8.04(a)(3), which requires that a lawyer shall not "engage in conduct involving dishonesty, fraud, deceit or misrepresentation," and Rule 3.03(a)(1), which requires that a lawyer shall not knowingly "make a false statement of material fact or law to a tribunal." Thus, although the Texas Disciplinary Rules do not prohibit a lawyer from searching for, extracting, or using metadata and do not require a lawyer to notify any person concerning metadata obtained from a document received, a lawyer who has reviewed metadata must not, through action or inaction, convey to any person or adjudicative body information that is misleading or false because the information conveyed does not take into account what the lawyer has learned from such metadata. For example, a Texas lawyer, in responding to a question, is not permitted to give an answer that would be truthful in the absence of metadata reviewed by the lawyer but that would be false or misleading when the lawyer's knowledge gained from the metadata is also considered.

The Committee notes that professional ethics standards in some other jurisdictions include specific requirements applicable to this situation. These specific requirements vary from state to state and may include a requirement to notify the sender of a document believed to contain inadvertently sent metadata and a requirement not to search for or read such metadata. For example, a number of jurisdictions have adopted part or all of the approach used in the current version of Rule 4.4(b) of the American Bar Association Model Rules of Professional Conduct, which provides:

"A lawyer who receives a document or electronically stored information relating to the representation of the lawyer's client and knows or reasonably should know that the document or electronically stored information was inadvertently sent shall promptly notify the sender."

To the extent a Texas lawyer becomes subject to the disciplinary rules of other jurisdictions, the lawyer may be subject to additional requirements concerning the treatment of metadata that would not be applicable if only the Texas Disciplinary Rules of Professional Conduct were considered.

The Committee also cautions that a lawyer's conduct upon receipt of an opponent's confidential information may have material consequences for the client, including the possibility of procedural disqualification. See In re Meador, 968 S.W.2d 346, 351-52 (Tex. 1998) (in a case not involving metadata, discussing factors to be considered in deciding whether to disqualify counsel who received the opposing party's privileged information outside of discovery, including the promptness with which the lawyer notified the opposing counsel of the circumstances). If in a given situation a client will be exposed to material risk by a lawyer's intended treatment of an opponent's inadvertently transmitted confidential information contained in metadata, the lawyer should discuss with the client the risks and benefits of the proposed course of action as well as other possible alternatives so that the client can make an informed decision. See Rule 1.03(b) ("A lawyer shall explain a matter to the extent reasonably necessary to permit the client to make informed decisions regarding the representation.").

This opinion applies only to the voluntary transmission of electronic documents outside the normal course of discovery. The production of electronic documents in discovery is governed by court rules and other law, which may prohibit the removal or alteration of metadata. Court rules may also govern the obligations of a lawyer who receives inadvertently transmitted privileged information in the course of discovery. See, e.g., Tex. R. Civ. P. 193.3(d).

CONCLUSION

The Texas Disciplinary Rules of Professional Conduct require lawyers to take reasonable measures to avoid the transmission of confidential information embedded in electronic documents, including the employment of reasonably available technical means to remove such metadata before sending such documents to persons other than the lawyer's client. Whether a lawyer has taken reasonable measures to avoid the disclosure of confidential information in metadata will depend on the factual circumstances.

While the Texas Disciplinary Rules of Professional Conduct do not prescribe a specific course of conduct for a lawyer who receives from another lawyer an electronic document containing confidential information in metadata that the receiving lawyer believes was not intended to be transmitted to the lawyer, court rules or other applicable rules of conduct may contain requirements that apply in particular situations. Regardless, a Texas lawyer is required by the Texas Disciplinary Rules to avoid misleading or fraudulent use of information the lawyer may obtain from the metadata. In the absence of specific governing provisions, a lawyer who is considering the proper course of action regarding confidential information in metadata contained in a document transmitted by opposing counsel should determine whether the possible course of action poses material risks to the lawyer's client. If so, the lawyer should explain the risks and potential benefits to the extent reasonably necessary to permit the client to make informed decisions regarding the matter.

Tex. Comm. On Professional Ethics, Op. 665 (2016)