Legal Answering Service: Confidentiality and Intake Rules
Short answer
Law firms can use an outside answering service, but the lawyer stays responsible for confidentiality. In the US, ABA Model Rules 1.6(c) and 5.3 require reasonable safeguards and supervision of non-lawyer providers; in England and Wales the SRA Code requires client affairs to be kept confidential. That means a written confidentiality agreement, minimal intake and clear escalation rules.
The mere fact that someone called a law firm can be confidential. Think of a spouse quietly asking about divorce, or a company director calling the morning a search warrant was executed. Whoever answers those calls for you learns protected information before any engagement exists.
That’s why law firms hesitate over outside answering services, and why the rules are stricter than for a plumber or a dental clinic. The good news: in the US and the UK, using one is clearly allowed. The responsibility, though, never leaves the firm.
What the professional rules actually require
Three ABA Model Rules do the work in the US, as adopted in some form by most states.
Rule 1.6(c) requires a lawyer to make reasonable efforts to prevent unauthorised disclosure of, or access to, information relating to a client’s representation. Rule 5.3 makes lawyers with managerial authority responsible for ensuring that non-lawyers working for the firm, including outside vendors, act compatibly with the lawyer’s own obligations. ABA Formal Opinion 08-451 applied this to outsourcing and stressed vetting and supervision of providers.
For England and Wales, paragraph 6.3 of the SRA Code of Conduct for Solicitors requires you to keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents. On top sits the UK GDPR, which means a written processing agreement with the service.
Practically, that boils down to a handful of contract terms.
- Written confidentiality obligation for the company and every agent on your line
- Access limited to what call handling requires, nothing more
- Whether subcontractors or overflow centres are used, and where
- Where call recordings, transcripts and messages are stored, and for how long
- Breach notification: how fast they tell you if something goes wrong
- Data processing agreement if you hold EU or UK client data (GDPR Article 28)
- Right to audit or receive security documentation
Germany, for comparison, spells this out in statute: lawyers must bind service providers to secrecy in text form, with an explicit warning about criminal liability. The idea is the same everywhere. Supervision you can prove.
The calls that cannot wait until Monday
The contract is half the job. The script decides whether the service protects you or creates risk, and the biggest risk is a caller whose problem has a short deadline attached that the agent doesn’t recognise.
| Criterion | Deadline | Source |
|---|---|---|
| "I've been served with a lawsuit" (US federal court) | 21 days to answer after service | FRCP 12(a)(1)(A)(i) |
| "I was arrested" or "police are at my office" | immediate | firm emergency policy |
| "I got a claim form" (England and Wales) | 14 days to respond after service of particulars | CPR Part 10 and 15 |
| "There's a hearing tomorrow" | same day | court notice |
Agents should never calculate deadlines. That would be dangerous. They should recognise trigger words and flag the call: served, summons, claim form, court, hearing, arrest, warrant, police. Arrests and searches go straight to the on-call lawyer’s mobile.
One simple rule improves every message: for each new caller, the agent asks for the date on the document and the date it was received or served, and writes both down. Your team can judge at a glance how much time is left.
Conflict checks start on the phone
Under Rule 1.7 a lawyer can’t take on a matter that is directly adverse to an existing client without informed consent. Before any consultation, someone has to know who sits on the other side.
The service can prepare that without giving advice. Name and contact details of the caller, the name of the opposing person or company, and the area of law in two or three words. That’s it. What agents should not capture is a narrative of the facts. Less detail in the message means less exposure and keeps access limited to what’s necessary. You’ll find a field layout in the phone message template.
A message that follows those rules is short. Something like this is all the firm needs from a first call:
New enquiry, 14:12. Jane Doe, mobile 07700 900123. Opposing party: Acme Lettings Ltd. Area: landlord and tenant. Document: possession claim, dated 3 October, received 9 October. Wants a call back today after 5 pm. Flag: court document.
Everything a lawyer needs to decide who calls back and how urgently is in there. Nothing that would hurt if the message went to the wrong inbox. That balance is worth testing in the trial period: ask a colleague to call in with a realistic scenario and read what lands in your inbox.
Three things the agent must never say
Some friendly answers are already a disclosure. Put these on the script as hard prohibitions.
Never confirm that someone is a client. If the opposing side, a journalist or a relative asks whether the firm represents Mr X, the only answer is an offer to take a message. Even “let me check” gives something away.
Never offer an opinion on the merits. “That sounds like a clear case” lands with the caller as the firm’s view, and giving legal advice is reserved to lawyers. An agent has neither the authority nor the file.
Never share calendars or whereabouts. That the partner “is in court all day” can be useful intelligence for an opponent in a live dispute.
These cost the provider nothing. Ask them to confirm in writing that agents on your line are trained on all three.
Live agents or AI for a law firm?
Human services with legal experience are better at spotting deadline calls and handling distressed callers. AI receptionists are cheaper and never put anyone on hold, but bring two specific issues here.
ABA Formal Opinion 512, published in July 2024, says lawyers using generative AI must understand its capabilities and risks, protect client information and supervise the output. Audio recordings and transcripts are client information in their own right, often processed by large US cloud providers. If you also serve EU clients, that touches data transfer rules too. The details are in AI receptionists and the GDPR.
AI isn’t off the table. You just need to know exactly where voice and text are processed and who can access them. Firms that want an assistant hosted on infrastructure they choose can have a custom phone or chat agent built instead of renting a shared one.
Costs and setup
Legal answering services price like the rest of the market: minute bundles in the US, per-minute or per-call rates in Europe. Specialists sit at the higher end because their agents are trained and their messages longer. There’s a worked comparison in what a virtual receptionist costs.
Your number stays the same. You forward on no-answer or all the time, usually with one setting in the phone system, as described in the guide on forwarding calls to an answering service.
Start with the contract, not the price. Ask the provider for its confidentiality agreement and data processing terms, lay them next to the checklist above and fill the gaps before the first call is forwarded.
Questions people ask
Do I need client consent to use an answering service?
Generally not for routine message-taking, since the service is a form of non-lawyer assistance the rules anticipate. ABA guidance on outsourcing says consent may be needed when confidential information is shared more deeply, so keep intake minimal and check your state's ethics opinions.
Can the answering service run conflict checks?
It can collect what you need for one: caller name, the opposing party and the type of matter. The actual check stays with the firm. Make sure agents don't record a detailed account of the facts at this stage.
Is an AI receptionist acceptable for a law firm?
ABA Formal Opinion 512 from July 2024 doesn't ban generative AI, but it expects lawyers to understand the tool, protect client information and supervise its output. Voice recordings and transcripts are confidential material, so you need to know where they are stored and who can access them.
What about offshore call centres?
Outsourcing abroad isn't prohibited in the US, but supervision and data security get harder. If you serve EU or UK clients, transfers of their personal data outside those regions also need a lawful transfer mechanism under data protection law.
