ABA Formal Opinion 483 - Duty of Cybersecurity Competency
The American Bar Association's Formal Opinion 483, published in October 2018, addresses a lawyer's responsibilities in the event of data breach. It states that, ":just as lawyers must safeguard and monitor the security of paper files and actual client property, lawyers utilizing technology have the same obligation to safeguard and monitor the security of electronically stored client property and information."
Clients must receive prompt notification of any data breach.