Confidentiality, Privilege Overlaps & Required/Justified Disclosure

Confidentiality, Privilege Overlaps & Required/Justified Disclosure

Quick Answer: Rule 3.03 requires a paralegal to hold all client information in strict confidence indefinitely, subject only to the client's authorization, legal requirement, Law Society requirement, or the specific exceptions the rule sets out. Confidentiality is a broad ethical duty covering everything a paralegal learns about a client; privilege is a narrower evidentiary concept that protects certain communications from being forced into evidence. Disclosure is mandatory when the law or a tribunal orders it, and merely justified — never required — when it prevents imminent death or serious bodily harm, defends the paralegal against allegations, collects fees, or secures legal advice about the paralegal's own conduct.

Scope and Duration of the Duty (Rule 3.03(1)–(2))

Rule 3.03(1) requires a paralegal to hold in strict confidence all information concerning the business and affairs of a client acquired in the course of the professional relationship. This is deliberately broad: it covers information whether or not it is relevant to the matter for which the paralegal was retained, regardless of its source (from the client or from anyone else), and regardless of its form — spoken words, paper, computer records, e-mails, or audio and video recordings. The duty also covers the client's papers and property, the client's identity, and even the bare fact that the client consulted or retained the paralegal.

Critically, subrule (2) makes clear the duty continues indefinitely after the paralegal stops acting for the client, whether or not the paralegal and client ended on good terms. A dispute with a former client, or the passage of many years, does not release the paralegal from the duty.

Disclosure is only permitted where it is:

• Expressly or impliedly authorized by the client;
• Required by law or by order of a tribunal of competent jurisdiction;
• Required to provide information to the Law Society; or
• Otherwise permitted under the specific exceptions built into Rule 3.03.

Confidentiality vs. Privilege: Where They Overlap and Where They Differ

The exam frequently tests whether a candidate can distinguish the ethical duty of confidentiality from the evidentiary doctrine of privilege, because the two overlap heavily but are not the same thing.

In practice, almost everything protected by privilege is also covered by the broader duty of confidentiality, but not everything confidential is privileged. A client's home address, the fact of retainer, or a non-legal business detail the client mentioned may be strictly confidential under Rule 3.03 without ever being privileged, because privilege only attaches to communications made for the purpose of legal advice or created for litigation. A paralegal who correctly identifies that a piece of information is "confidential but not privileged" understands that it still cannot be voluntarily disclosed without authorization, even though a court could potentially compel its production if privilege does not apply to block that compulsion.

Mandatory Disclosure

Rule 3.03(4) removes discretion entirely: a paralegal shall disclose confidential information when required by law or by order of a tribunal of competent jurisdiction. If a valid court order, subpoena backed by law, or statutory reporting obligation applies, the paralegal must comply — refusing to disclose in that situation is itself a rule violation, not an exercise of client loyalty.

Justified or Permitted Disclosure (Discretionary)

The remaining exceptions in Rule 3.03 are permissive — the paralegal may disclose, but is never obligated to:

• Imminent risk of death or serious bodily harm (subrule 5): disclosure is permitted where the paralegal believes, on reasonable grounds, that there is an imminent risk of death or serious bodily harm (including psychological harm) and disclosure is necessary to prevent it. This exception does not extend to disclosing past criminal conduct or preventing future illegal conduct that does not involve death or serious bodily harm — the risk must specifically threaten death or serious bodily harm and be imminent.
• Defending against allegations (subrule 6): if it is alleged that the paralegal or the paralegal's employees committed a criminal offence involving the client's affairs, are civilly liable in a matter involving the client's affairs, committed professional negligence, or engaged in professional misconduct or conduct unbecoming, the paralegal may disclose confidential information to defend against those allegations.
• Establishing or collecting fees (subrule 7): a paralegal may disclose confidential information as needed to establish or collect fees owed by the client.
• Securing legal advice about one's own conduct (subrule 8): a paralegal may disclose confidential information to a lawyer or another paralegal in order to get advice about the paralegal's own proposed conduct.
• Detecting and resolving conflicts on a firm change (subrule 10): a paralegal may disclose confidential information to the extent reasonably necessary to detect and resolve conflicts arising from the paralegal's change of employment or from changes in the ownership or composition of a firm, but only where the disclosure does not compromise client confidentiality or otherwise prejudice the client — this is the practical mechanism that makes the Rule 3.05 transfer-conflict checks possible without breaching confidentiality itself.

The Minimization Requirement

Rule 3.03(9) applies across every required or permitted disclosure under subrules (4) through (7): a paralegal shall not disclose more information than is necessary. Even where disclosure is fully justified — say, to defend against a negligence allegation — the paralegal must limit what is revealed to what the specific purpose actually requires, rather than opening the entire client file. Best practice, reinforced by Law Society guidance, is to document the circumstances of any discretionary disclosure as soon as possible after it occurs, including the reasoning applied and the scope of information released, so the paralegal can later demonstrate the disclosure was necessary and proportionate.