{"id":110317,"date":"2025-03-12T15:25:51","date_gmt":"2025-03-12T23:25:51","guid":{"rendered":"https:\/\/xira.com\/p\/2025\/03\/12\/sxsw-privacy-discussion-the-rising-risks-lawyers-cant-ignore\/"},"modified":"2025-03-12T15:25:51","modified_gmt":"2025-03-12T23:25:51","slug":"sxsw-privacy-discussion-the-rising-risks-lawyers-cant-ignore","status":"publish","type":"post","link":"https:\/\/xira.com\/p\/2025\/03\/12\/sxsw-privacy-discussion-the-rising-risks-lawyers-cant-ignore\/","title":{"rendered":"SXSW Privacy Discussion: The Rising Risks Lawyers Can\u2019t Ignore"},"content":{"rendered":"<figure class=\"wp-block-image alignright is-resized\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/abovethelaw.com\/wp-content\/uploads\/sites\/4\/2025\/03\/SXSW-GettyImages-2201521857.jpg?w=1080&#038;ssl=1\" alt=\"\" title=\"\"><figcaption><\/figcaption><\/figure>\n<p>On Friday afternoon at <a href=\"https:\/\/www.sxsw.com\/\" rel=\"nofollow noopener\" target=\"_blank\">SXSW<\/a>, <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.linkedin.com\/in\/meredith-whittaker-760a40252&amp;ved=2ahUKEwiig-mBz_qLAxW1lYkEHY3ZDgkQFnoECEYQAQ&amp;usg=AOvVaw3LgNORLRo-teHcAFErTEI3\" rel=\"nofollow noopener\" target=\"_blank\">Meredith Whittaker<\/a>, CEO of <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/signal.org\/&amp;ved=2ahUKEwjxzoCXz_qLAxWjkokEHauZNREQFnoECAsQAQ&amp;usg=AOvVaw0p-dGBTi4P5pXJ9-z4T8oZ\" rel=\"nofollow noopener\" target=\"_blank\">Signal<\/a>, painted a sobering and downright alarming picture of the modern privacy landscape. Whittaker argued that the world today is more surveilled than ever before, with a handful of corporations and governments wielding unprecedented access to our personal data. Her comments highlighted the risks that everyone \u2014 but especially lawyers, given our duty of confidentiality \u2014 need to take seriously.<\/p>\n<p><strong>The Erosion of Privacy<\/strong><\/p>\n<p>Whittaker noted that privacy is not a luxury; it is a fundamental condition for free thought, secure relationships, and democratic engagement. Yet, we live in an era where every message, search query, and interaction is recorded, stored, and could potentially be weaponized against us. The sheer volume of data collected by companies like Google, Meta, and telecommunications providers creates vast vulnerabilities. Whether through government subpoenas, corporate data sales, or hacking incidents, this information is accessible in ways many of us just don\u2019t fully appreciate.<\/p>\n<p>To illustrate her point, Whittaker posed a chilling hypothetical that quieted the room:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Every single message you\u2019ve ever sent in your life is suddenly on a database and a link just got sent to everyone you know. That\u2019s your boss, that\u2019s your best friend, that\u2019s your dad\u2019s best friend, that\u2019s the weird guy who comes to your Thanksgiving. That\u2019s everyone you know, and they click on that link, and they can access that database. And there\u2019s a little AI bot that\u2019s like appended onto that database so they can quickly summarize everything in that database, search their name. Search that one time you told that weird lie because you hadn\u2019t had coffee, searched that time you taught shit on your best friend because you were in a weird place\u2026Search that message to your doctor? Search that thing you sent to your colleague that was really mean about your other colleagues, search your prescription information. Search the time you talk to a union organizer, search the time you reported corruption at your workplace with journalists, all of that is on there.<\/p>\n<\/blockquote>\n<p>As large language models and AI become more powerful, it will become even easier for an AI bot to summarize and search everything, exposing your personal, professional, and even legal conversations. Whittaker says this is not science fiction; it reflects today\u2019s reality.<\/p>\n<p><strong>Why Lawyers Should Care<\/strong><\/p>\n<p>For lawyers, the implications of these privacy risks are particularly critical. Attorney-client privilege and confidentiality are not just ethical obligations, they form the very basis of attorney client relationships. Lawyers need to be aware of and comply with their <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.americanbar.org\/groups\/professional_responsibility\/publications\/model_rules_of_professional_conduct\/rule_1_6_confidentiality_of_information\/&amp;ved=2ahUKEwiS6sa4z_qLAxVnpIkEHZvnHwUQFnoECAkQAQ&amp;usg=AOvVaw0J49Z6N5VVZaOTGzhAz-ti\" rel=\"nofollow noopener\" target=\"_blank\">ethical duty<\/a> to protect \u201cinformation relating to the representation of a client.\u201d They also need to understand and satisfy the <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.americanbar.org\/groups\/professional_responsibility\/publications\/model_rules_of_professional_conduct\/rule_1_1_competence\/comment_on_rule_1_1\/&amp;ved=2ahUKEwjNpKHXz_qLAxWOCnkGHTPoFQwQFnoECAkQAQ&amp;usg=AOvVaw32H-K-xms9Iv-Q1_E084P4\" rel=\"nofollow noopener\" target=\"_blank\">ethical obligation<\/a> to understand the risks and benefits of technology under the rules of professional responsibility. At a minimum, these duties require lawyers to be informed of the threats technology poses to client confidentiality.<\/p>\n<p>Moreover, both lawyers and clients need to be secure in the knowledge that their conversations are protected and not easily accessible to others. Lawyers also need to be prepared to advise clients on privacy risks and how to mitigate them.<\/p>\n<p><strong>The Threats<\/strong><\/p>\n<p>Legal professionals need to be informed of the vulnerabilities presented by modern communication tools. Here are some examples:<\/p>\n<ul class=\"wp-block-list\">\n<li><strong>Law Enforcement and Legal Requests:<\/strong>\u00a0Whittaker pointed out that law enforcement has been able to obtain Facebook messages as evidence in a criminal cases. If privileged attorney-client communications exist on platforms that comply with such requests, legal confidentiality is at risk.<\/li>\n<li><strong>Hacking and Cybersecurity Threats:<\/strong>\u00a0The recent <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/wtop.com\/j-j-green-national\/2024\/12\/the-worst-telecommunications-hack-in-us-history-chinese-cyber-group-salt-typhoon-intrusions-likely-started-years-ago\/&amp;ved=2ahUKEwi2ndz4z_qLAxXqvokEHcFbCkAQFnoECBkQAQ&amp;usg=AOvVaw1w94HWiYUm9xGIUfoMqBJi\" rel=\"nofollow noopener\" target=\"_blank\">Solar Typhoon hack<\/a> exposed how a foreign government infiltrated U.S. telecom networks, potentially accessing call logs, text messages, and metadata. If a law firm or in-house legal department relies on insecure channels, adversaries \u2014 whether state actors, opposing parties or cybercriminals \u2014 could gain access to confidential materials.<\/li>\n<li><strong>Metadata Matters:<\/strong>\u00a0Even when message content is encrypted, metadata \u2014 who you talk to, when, and how often \u2014 can reveal critical details. As Whittaker noted, metadata to can be used to track relationships, map influence networks, and uncover confidential activities. In legal matters, this could expose privileged consultations, witness communications, or legal strategies.<\/li>\n<\/ul>\n<p><strong>The Need for Stronger Protections<\/strong><\/p>\n<p>Given these risks, lawyers and legal professionals should think through their approach to digital communications. Steps to consider include:<\/p>\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Limiting the Use of Commercial Messaging Apps:<\/strong>\u00a0Mainstream platforms like WhatsApp, iMessage, and Telegram may offer some encryption, but they still collect metadata and, in some cases, retain message content. Lawyers should avoid discussing sensitive matters on these apps.<\/li>\n<li><strong>Implementing Secure Communication Protocols:<\/strong>\u00a0Law firms and legal departments should prioritize end-to-end encryption tools that minimize data collection and do not store metadata.<\/li>\n<li><strong>Educating Clients on Privacy Risks:<\/strong>\u00a0Confidentiality doesn\u2019t just depend on lawyers; clients also need to understand the risks of discussing legal matters on insecure channels both when talking to their lawyers and in their day-to-day business activities.<\/li>\n<li><strong>Challenging Data Retention Policies:<\/strong>\u00a0Many tech companies store years\u2019 worth of messages, call logs, and search history. Lawyers should advocate for stricter data retention limits and ensure their own firms do not store unnecessary digital records that could later be subpoenaed or hacked.<\/li>\n<\/ol>\n<p><strong>The Signal Platform<\/strong><\/p>\n<p>To be fair, Whittaker\u2019s keynote also highlighted the potential role of the Signal tools in addressing the risks to privacy. Signal is a nonprofit, open-source messaging platform that Whitaker says was designed to provide secure and private communications. Unlike commercial platforms that collect metadata and comply with government requests, Whittaker told us that Signal was built to collect and retain as little data as possible. Because it is open source, she argued that its security protocols can be independently audited, ensuring transparency and trust. If all this is correct (I haven\u2019t investigated Signal or used it), for lawyers seeking to protect attorney-client privilege, adopting tools like Signal could be a useful step to protect confidentiality.<\/p>\n<p><strong>The Bottom Line<\/strong><\/p>\n<p>The risks Whittaker described aren\u2019t hypothetical \u2014 they are unfolding now. Sensitive legal information is potentially more exposed today than ever. Yet, many lawyers and legal professionals remain unaware of the real nature of these threats.<\/p>\n<p>Safeguarding attorney-client privilege and protecting client confidences requires more than lip service to ethical commitments. It demands ongoing education, awareness of evolving risks, and concrete steps to mitigate threats before they compromise the very foundation of the legal profession.<\/p>\n<hr class=\"wp-block-separator has-alpha-channel-opacity\">\n<p><em><strong>Stephen Embry is a lawyer, speaker, blogger and writer. He publishes\u00a0<a href=\"https:\/\/www.techlawcrossroads.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">TechLaw Crossroads<\/a>, a blog devoted to the examination of the tension between technology, the law, and the practice of law.<\/strong><\/em><\/p>\n<p>The post <a href=\"https:\/\/abovethelaw.com\/2025\/03\/sxsw-privacy-discussion-the-rising-risks-lawyers-cant-ignore\/\" rel=\"nofollow noopener\" target=\"_blank\">SXSW Privacy Discussion: The Rising Risks Lawyers Can\u2019t Ignore<\/a> appeared first on <a href=\"https:\/\/abovethelaw.com\/\" rel=\"nofollow noopener\" target=\"_blank\">Above the Law<\/a>.<\/p>\n<figure class=\"wp-block-image alignright is-resized\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/abovethelaw.com\/wp-content\/uploads\/sites\/4\/2025\/03\/SXSW-GettyImages-2201521857.jpg?w=1080&#038;ssl=1\" alt=\"\" title=\"\"><figcaption><\/figcaption><\/figure>\n<p>On Friday afternoon at <a href=\"https:\/\/www.sxsw.com\" rel=\"nofollow noopener\" target=\"_blank\">SXSW<\/a>, <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.linkedin.com\/in\/meredith-whittaker-760a40252&amp;ved=2ahUKEwiig-mBz_qLAxW1lYkEHY3ZDgkQFnoECEYQAQ&amp;usg=AOvVaw3LgNORLRo-teHcAFErTEI3\" rel=\"nofollow noopener\" target=\"_blank\">Meredith Whittaker<\/a>, CEO of <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/signal.org\/&amp;ved=2ahUKEwjxzoCXz_qLAxWjkokEHauZNREQFnoECAsQAQ&amp;usg=AOvVaw0p-dGBTi4P5pXJ9-z4T8oZ\" rel=\"nofollow noopener\" target=\"_blank\">Signal<\/a>, painted a sobering and downright alarming picture of the modern privacy landscape. Whittaker argued that the world today is more surveilled than ever before, with a handful of corporations and governments wielding unprecedented access to our personal data. Her comments highlighted the risks that everyone \u2014 but especially lawyers, given our duty of confidentiality \u2014 need to take seriously.<\/p>\n<p><strong>The Erosion of Privacy<\/strong><\/p>\n<p>Whittaker noted that privacy is not a luxury; it is a fundamental condition for free thought, secure relationships, and democratic engagement. Yet, we live in an era where every message, search query, and interaction is recorded, stored, and could potentially be weaponized against us. The sheer volume of data collected by companies like Google, Meta, and telecommunications providers creates vast vulnerabilities. Whether through government subpoenas, corporate data sales, or hacking incidents, this information is accessible in ways many of us just don\u2019t fully appreciate.<\/p>\n<p>To illustrate her point, Whittaker posed a chilling hypothetical that quieted the room:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>Every single message you\u2019ve ever sent in your life is suddenly on a database and a link just got sent to everyone you know. That\u2019s your boss, that\u2019s your best friend, that\u2019s your dad\u2019s best friend, that\u2019s the weird guy who comes to your Thanksgiving. That\u2019s everyone you know, and they click on that link, and they can access that database. And there\u2019s a little AI bot that\u2019s like appended onto that database so they can quickly summarize everything in that database, search their name. Search that one time you told that weird lie because you hadn\u2019t had coffee, searched that time you taught shit on your best friend because you were in a weird place\u2026Search that message to your doctor? Search that thing you sent to your colleague that was really mean about your other colleagues, search your prescription information. Search the time you talk to a union organizer, search the time you reported corruption at your workplace with journalists, all of that is on there.<\/p>\n<\/blockquote>\n<p>As large language models and AI become more powerful, it will become even easier for an AI bot to summarize and search everything, exposing your personal, professional, and even legal conversations. Whittaker says this is not science fiction; it reflects today\u2019s reality.<\/p>\n<p><strong>Why Lawyers Should Care<\/strong><\/p>\n<p>For lawyers, the implications of these privacy risks are particularly critical. Attorney-client privilege and confidentiality are not just ethical obligations, they form the very basis of attorney client relationships. Lawyers need to be aware of and comply with their <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.americanbar.org\/groups\/professional_responsibility\/publications\/model_rules_of_professional_conduct\/rule_1_6_confidentiality_of_information\/&amp;ved=2ahUKEwiS6sa4z_qLAxVnpIkEHZvnHwUQFnoECAkQAQ&amp;usg=AOvVaw0J49Z6N5VVZaOTGzhAz-ti\" rel=\"nofollow noopener\" target=\"_blank\">ethical duty<\/a> to protect \u201cinformation relating to the representation of a client.\u201d They also need to understand and satisfy the <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/www.americanbar.org\/groups\/professional_responsibility\/publications\/model_rules_of_professional_conduct\/rule_1_1_competence\/comment_on_rule_1_1\/&amp;ved=2ahUKEwjNpKHXz_qLAxWOCnkGHTPoFQwQFnoECAkQAQ&amp;usg=AOvVaw32H-K-xms9Iv-Q1_E084P4\" rel=\"nofollow noopener\" target=\"_blank\">ethical obligation<\/a> to understand the risks and benefits of technology under the rules of professional responsibility. At a minimum, these duties require lawyers to be informed of the threats technology poses to client confidentiality.<\/p>\n<p>Moreover, both lawyers and clients need to be secure in the knowledge that their conversations are protected and not easily accessible to others. Lawyers also need to be prepared to advise clients on privacy risks and how to mitigate them.<\/p>\n<p><strong>The Threats<\/strong><\/p>\n<p>Legal professionals need to be informed of the vulnerabilities presented by modern communication tools. Here are some examples:<\/p>\n<ul class=\"wp-block-list\">\n<li><strong>Law Enforcement and Legal Requests:<\/strong>\u00a0Whittaker pointed out that law enforcement has been able to obtain Facebook messages as evidence in a criminal cases. If privileged attorney-client communications exist on platforms that comply with such requests, legal confidentiality is at risk.<\/li>\n<li><strong>Hacking and Cybersecurity Threats:<\/strong>\u00a0The recent <a href=\"https:\/\/www.google.com\/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https:\/\/wtop.com\/j-j-green-national\/2024\/12\/the-worst-telecommunications-hack-in-us-history-chinese-cyber-group-salt-typhoon-intrusions-likely-started-years-ago\/&amp;ved=2ahUKEwi2ndz4z_qLAxXqvokEHcFbCkAQFnoECBkQAQ&amp;usg=AOvVaw1w94HWiYUm9xGIUfoMqBJi\" rel=\"nofollow noopener\" target=\"_blank\">Solar Typhoon hack<\/a> exposed how a foreign government infiltrated U.S. telecom networks, potentially accessing call logs, text messages, and metadata. If a law firm or in-house legal department relies on insecure channels, adversaries \u2014 whether state actors, opposing parties or cybercriminals \u2014 could gain access to confidential materials.<\/li>\n<li><strong>Metadata Matters:<\/strong>\u00a0Even when message content is encrypted, metadata \u2014 who you talk to, when, and how often \u2014 can reveal critical details. As Whittaker noted, metadata to can be used to track relationships, map influence networks, and uncover confidential activities. In legal matters, this could expose privileged consultations, witness communications, or legal strategies.<\/li>\n<\/ul>\n<p><strong>The Need for Stronger Protections<\/strong><\/p>\n<p>Given these risks, lawyers and legal professionals should think through their approach to digital communications. Steps to consider include:<\/p>\n<ol start=\"1\" class=\"wp-block-list\">\n<li><strong>Limiting the Use of Commercial Messaging Apps:<\/strong>\u00a0Mainstream platforms like WhatsApp, iMessage, and Telegram may offer some encryption, but they still collect metadata and, in some cases, retain message content. Lawyers should avoid discussing sensitive matters on these apps.<\/li>\n<li><strong>Implementing Secure Communication Protocols:<\/strong>\u00a0Law firms and legal departments should prioritize end-to-end encryption tools that minimize data collection and do not store metadata.<\/li>\n<li><strong>Educating Clients on Privacy Risks:<\/strong>\u00a0Confidentiality doesn\u2019t just depend on lawyers; clients also need to understand the risks of discussing legal matters on insecure channels both when talking to their lawyers and in their day-to-day business activities.<\/li>\n<li><strong>Challenging Data Retention Policies:<\/strong>\u00a0Many tech companies store years\u2019 worth of messages, call logs, and search history. Lawyers should advocate for stricter data retention limits and ensure their own firms do not store unnecessary digital records that could later be subpoenaed or hacked.<\/li>\n<\/ol>\n<p><strong>The Signal Platform<\/strong><\/p>\n<p>To be fair, Whittaker\u2019s keynote also highlighted the potential role of the Signal tools in addressing the risks to privacy. Signal is a nonprofit, open-source messaging platform that Whitaker says was designed to provide secure and private communications. Unlike commercial platforms that collect metadata and comply with government requests, Whittaker told us that Signal was built to collect and retain as little data as possible. Because it is open source, she argued that its security protocols can be independently audited, ensuring transparency and trust. If all this is correct (I haven\u2019t investigated Signal or used it), for lawyers seeking to protect attorney-client privilege, adopting tools like Signal could be a useful step to protect confidentiality.<\/p>\n<p><strong>The Bottom Line<\/strong><\/p>\n<p>The risks Whittaker described aren\u2019t hypothetical \u2014 they are unfolding now. Sensitive legal information is potentially more exposed today than ever. Yet, many lawyers and legal professionals remain unaware of the real nature of these threats.<\/p>\n<p>Safeguarding attorney-client privilege and protecting client confidences requires more than lip service to ethical commitments. It demands ongoing education, awareness of evolving risks, and concrete steps to mitigate threats before they compromise the very foundation of the legal profession.<\/p>\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n<p><em><strong>Stephen Embry is a lawyer, speaker, blogger and writer. He publishes\u00a0<a href=\"https:\/\/www.techlawcrossroads.com\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">TechLaw Crossroads<\/a>, a blog devoted to the examination of the tension between technology, the law, and the practice of law.<\/strong><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On Friday afternoon at SXSW, Meredith Whittaker, CEO of Signal, painted a sobering and downright alarming picture of the modern privacy landscape. Whittaker argued that the world today is more surveilled than ever before, with a handful of corporations and governments wielding unprecedented access to our personal data. Her comments highlighted the risks that everyone [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":110318,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[16],"tags":[],"class_list":["post-110317","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-above_the_law"],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/xira.com\/p\/wp-content\/uploads\/2025\/03\/SXSW-GettyImages-2201521857-09HOhj.jpeg?fit=1024%2C683&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts\/110317","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/comments?post=110317"}],"version-history":[{"count":0,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/posts\/110317\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/media\/110318"}],"wp:attachment":[{"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/media?parent=110317"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/categories?post=110317"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xira.com\/p\/wp-json\/wp\/v2\/tags?post=110317"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}