Statutes and Ethics Rules

Statutes and Ethics Rules

Courts cannot write a specific negligence rule for every kind of careless act, so a jury ordinarily measures a defendant against the general reasonable-person formula, using common sense, experience, and, where appropriate, expert testimony. Legislatures, by contrast, routinely enact standards of care for common situations, and a statute that fits the plaintiff's claim can do in advance the work the jury would otherwise do.¹ This section asks when that happens in a lawyer's malpractice case and what the lawyer's own rulebook adds.

Four questions organize the answer. Where may the standard of conduct come from, and in what order? When may a court borrow a statute or regulation that does not itself provide for civil liability? What does a violation of a rule of professional conduct prove? And what does compliance with a statute or rule prove? The answers pull in different directions. A statute that fits can supply the standard and, in many jurisdictions, make an unexcused violation conclusive proof of breach. An ethics rule supplies evidence and nothing more, because the rules were written to guide lawyers and to structure discipline, not to serve as a basis for civil liability.² Compliance with either leaves the reasonable-lawyer inquiry open.

Sources of the Standard

Restatement (Second) of Torts § 285 names four places the standard of conduct of a reasonable person may come from, and their order matters: a lower source applies only when the ones above it are silent.³ First comes an enactment or regulation that itself provides the standard.⁴ Second comes an enactment or regulation that a court adopts although it does not so provide.⁵ Third comes a judicial decision.⁶ Fourth, when none of those exists, the trial judge or the jury applies the reasonable-person standard to the facts of the case.⁷ The list runs from most specific to most general. An enactment tells the actor before the work begins what conduct is required and hands the fact-finder a fixed line to apply, while the formula at the bottom asks only that the actor behave as a prudent person would.

The bottom rung exists because the variety of circumstances that may cause injury is too great for courts to formulate a specific rule in advance for every careless act. Jurors apply the general formula instead and draw on their common sense, experience, and expert testimony where appropriate.⁸

The top rung is an enactment or regulation that itself says it sets the standard.⁹ A statute does this, for example, by providing that a suit for damages is one remedy for its violation, and the legislature has then decided both what care is owed and who may recover for its absence.¹⁰ Repeating that judgment case by case would duplicate the legislature's work, so the plaintiff receives a shortcut called negligence per se, meaning negligence in itself. In a majority of jurisdictions, an unexcused violation conclusively proves breach and ends the inquiry into the surrounding circumstances. A minority treats the violation as presumptive evidence of negligence, or as some evidence from which a jury may infer it, so the defendant can still rebut it.¹¹

The enactment need not be a state statute, though its force varies with its kind and with the state. Most federal courts sitting in diversity have assumed that a state court would apply negligence per se to a federal statute or regulation, most states treat municipal ordinances as they treat statutes, and some states give administrative regulations only the weight of evidence of negligence.¹² The word unexcused matters everywhere, because a violation the defendant can justify does not show unreasonable conduct. On an exam, ask what effect the governing jurisdiction gives a violation before assuming that breach follows.

The second rung reaches an enactment or regulation that does not say it sets a civil standard.¹³ Silence about civil liability does not end the inquiry. If the enactment was meant to protect the class of persons to which the plaintiff belongs from the type of harm that occurred, a court may treat it as the standard of a reasonably prudent person unless a good reason points the other way.¹⁴ Good reasons to decline include an enactment that is obsolete or vague, one whose legislature intended criminal or administrative penalties to be the exclusive remedy, and one whose legislature intended that a violation would not by itself trigger negligence liability.¹⁵ The difference from the first rung lies in who decides. Under the first, the enactment answers the question; under the second, the court borrows a rule written for another purpose and must justify the fit. The next two subsections take up that fit.

The enactments written for lawyers, the ones a student would expect to supply the standard in a malpractice case, rarely reach either of the top two rungs. The Model Rules of Professional Conduct state that a violation should not itself give rise to a cause of action against a lawyer or create any presumption that a legal duty has been breached, and that language tells a court the drafters did not intend a negligence per se argument.¹⁶ The rules the Securities and Exchange Commission adopted under the Sarbanes-Oxley Act likewise state that they create no private right of action against a lawyer or law firm.¹⁷ Neither set of rules drops out of a malpractice case, because a plaintiff may still argue negligence under the usual totality-of-the-circumstances test and an expert may rely on the rules in describing the standard.¹⁸ But neither offers a shortcut to breach. The usual exam error is to treat an ethics-rule violation as negligence per se, and a later subsection shows how such a violation does figure in the claim.

What remains are enactments that bind lawyers along with everyone else. A few jurisdictions have laws expressly requiring lawyers, among others, to reveal confidential information to prevent child abuse, and many states have security breach notification laws requiring database possessors, law firms included, to protect the personal information of present and former clients and to notify them when it is compromised.¹⁹ Some breach laws expressly provide civil damages, which puts them on the first rung. Others are silent about civil liability, and in those states a court might conclude that a lawyer who violated the obligation without excuse was negligent per se, which is the second rung at work.²⁰ Such a statute protects people in a particular position, such as clients whose data is exposed, from the kind of harm that follows an undisclosed breach, and that match is what makes borrowing it plausible.

Reyes & Holt is held to the statute because the legislature, not a jury, decided that prompt notice is required, and because the statute's purpose matches Ortiz's injury. A disciplinary rule would give her no such argument. The breach statute binds every data holder and does not depend on any rule of legal practice. A finding of breach still leaves the claim unfinished, because Ortiz must prove that the delay caused a loss, a requirement taken up in the sections on causation and damages.

The third rung is a standard established by judicial decision.²¹ A decision resembles an enactment in that it announces in advance what conduct is expected, so once a court has said what a situation requires, later fact-finders apply that ruling instead of deciding the question afresh. When none of the upper sources speaks, the fourth rung governs, and the judge or jury applies the reasonable-person standard to the facts.²² Most legal malpractice claims land on these last two rungs. Legal work is too varied for a legislature to prescribe, and the best-known rules written for lawyers disclaim civil effect, so the reasonable-lawyer standard from the preceding subsections does most of the work. Jurors normally have no specialized knowledge about lawyers' responsibilities, so expert testimony is generally necessary to guide them in applying the standard to the facts, and the expert becomes the practical substitute for the specific rule that no legislature wrote.²³

Set beside the data-breach scene, this one shows that the deciding fact is whether some rule written before the dispute speaks to the conduct. The gravity of the lapse does not move a claim up the ladder. A single firm could face both claims in one lawsuit, each resting on a different rung.

Class and Interest Protected

Restatement (Second) of Torts § 286 governs the second rung. When an enactment does not say that it sets a civil standard, a court may still adopt its requirements as the standard of a reasonable person, but only if the enactment's purpose is found, exclusively or in part, to fit the plaintiff's claim.²⁵ The section lists four fit conditions, and this subsection takes the first two: the enactment must be meant to protect a class of persons that includes the plaintiff, and it must be meant to protect the particular interest that was invaded.²⁶ The words in part mean that a statute with several aims qualifies if one of them matches. A court looks for the purpose the lawmakers actually had, so a plaintiff cannot manufacture a fit by pointing to a rule that happens to cover the lawyer's lapse.

The class requirement comes first because of how legislation is made. A legislature typically writes a requirement with an identifiable group in mind and weighs what compliance will cost the people regulated against what it will give that group. Borrowing the requirement for a plaintiff outside the group charges the defendant with a standard whose costs nobody weighed against that plaintiff's benefit. The court therefore asks whether the enactment was intended to protect the class to which the plaintiff belongs, and the answer comes from what the enactment says about whom it serves.²⁷ Foreseeability does not answer the question, since a lawyer's carelessness can foreseeably hurt many people the enactment never had in view.

A plaintiff inside the protected class may still fail the second condition. Every enactment protects some particular interest, such as bodily safety, privacy, or money held for another, and a court will not borrow it to measure the care owed for a different one. The first condition asks who was meant to be protected; the second asks what was meant to be protected for them. In malpractice the interest invaded is ordinarily the client's economic stake in competent representation, or the client's confidential information. A negligence action can reach that purely economic loss because the lawyer owes the client a duty by reason of the undertaking and the special relationship.²⁸ The court must still be able to say that the enactment aimed at protecting that stake or that information, and a general aim of regulating the profession will not do.

Security breach notification laws show a fit on both counts. They require those who hold personal information, law firms included, to protect it and to notify data subjects, among them present and former clients, when it is compromised.²⁹ A former client whose information is exposed is one of the people such a statute names, and the personal information is the interest it guards. Where the statute provides for civil damages, the first rung supplies the standard directly. Where it is silent, a court may find the fit and treat an unexcused violation as negligence per se.³⁰

Two facts moved the answer in that pair, who was hurt and what was taken, and they matter separately because a plaintiff can clear one condition and miss the other. Ortiz, though she is in the protected class, gains nothing from the statute if she argues that the firm's advice on a lease was careless, because the statute guards identifying numbers and says nothing about the quality of advice. A client who cannot satisfy the fit is not out of court. The claim proceeds under the reasonable-lawyer standard, with expert testimony to guide the jury.³¹

An exam stem that has a client invoke a violated ethics rule as the standard of care is asking whether the rule fits under § 286. The Model Rules state that a violation should not itself give rise to a cause of action or create a presumption of breach, and that they are not designed to be a basis for civil liability.³² Because § 286 turns on an enactment's purpose, a rule that announces its own purpose in this way is poor material for borrowing. Such rules guide lawyers and regulate the profession through discipline, and a client who belongs to the public is not thereby within a class for whom the rule sets a civil measure of care for a money loss. A rule violation can still count as evidence, a lighter use that a later subsection takes up. The harm and hazard conditions of § 286 come next.

Harm and Hazard Covered

Two conditions of Restatement (Second) of Torts § 286 remain, and both concern the loss. The enactment must protect the plaintiff's interest against the kind of harm that resulted, and against the particular hazard from which the harm results.³⁴ Because every condition must be met, a client who belongs to the protected class and holds the protected interest can still find that the enactment sets no standard for the loss actually suffered.

The two conditions ask different questions. Harm is the kind of injury the plaintiff ended up with, such as bodily injury, a stolen identity, or a lost lawsuit. Hazard is the danger from which that injury came, meaning the risk the enactment was written to control. A legislature that targets one danger has weighed what compliance costs against what it gives the people protected from that danger, and nothing in that judgment speaks to the care owed against some other danger. If a rule could be borrowed for any loss that befalls a person in the protected class, every violation would become proof of breach for every unrelated injury. The harm and hazard conditions keep the negligence per se shortcut, which lets a plaintiff skip the inquiry into all the circumstances, tied to the situation the lawmakers had in view.³⁵

A client who proves that a firm violated a data-breach notification statute has shown only that the firm broke a rule. The further question is which losses the rule was written to prevent, and the same violation can produce two claims that come out differently depending on the loss claimed.

Another client of the same firm stands differently.

Both clients are in the protected class and the firm's violation is identical, so the type of loss alone moved the answer. The reason follows from how legislation works. The lawmakers who required prompt notice weighed what it costs a business to give it against what it gives the people whose information is exposed, and the benefit they counted was protection from misuse of that information. They did not weigh that cost against the value of timely court filings, so borrowing the statute to prove breach for a lapsed claim would charge the firm with a standard whose benefits no one measured for that loss. The same reasoning explains Ortiz's result, since the statute reaches the harms the lawmakers priced into it.

The hazard condition filters further, even within the right kind of harm. A few jurisdictions have laws expressly requiring lawyers, among others, to reveal confidential information to prevent child abuse, and a victim has a persuasive argument that such a statute was intended to prevent that type of harm to a class that includes the victim.³⁶ A reporting statute written to let authorities interrupt abuse that a lawyer has learned about targets one source of danger, and the hazard condition asks whether the loss came from that source.

The harm and hazard conditions are decided before causation, because they ask what the enactment was meant to address, while causation asks whether this violation produced this injury. A client who clears every fit condition must therefore still prove legal cause. A client who fails either of these two conditions loses only the shortcut, and the claim goes forward on the usual footing, with the jury applying the reasonable-lawyer test under the guidance of expert testimony.³⁷

Ethics Rules as Evidence

Restatement (Second) of Torts § 285(a) lets an enactment or regulation establish the standard of conduct when it so provides, and the rules of professional conduct are the enactment-like source most likely to be invoked against a lawyer.³⁹ Their own introductory language withholds that effect. The Scope of the Model Rules states that a violation should not itself give rise to a cause of action against a lawyer, that it should not create any presumption that a legal duty has been breached, and that the Rules are not designed to be a basis for civil liability.⁴⁰ A plaintiff who proves that the lawyer broke a rule has therefore proved a rule violation and has no negligence per se shortcut. Courts still let the plaintiff use the violation in a weaker role, as evidence, and that role is what the exam tests.

The rules were designed to guide lawyers and to structure the regulation of conduct through disciplinary agencies.⁴¹ A rule that made every violation conclusive proof of negligence would turn a disciplinary lapse into civil liability even when nothing the lawyer did harmed the client, and a casual accusation of an ethics violation, such as the frequently raised charge of a conflict of interest, can prejudice the trier of fact when no actual harm traces to the supposed violation.⁴² Yet the Rules do establish standards of conduct by lawyers. Evidence is the compromise: the jury may weigh the violation, and the plaintiff must still prove every other element.

The Scope language says so itself: "Nevertheless, since the Rules do establish standards of conduct by lawyers, a lawyer's violation of a Rule may be evidence of breach of the applicable standard of conduct."⁴³ Scholars describe the logic as an inference. A reasonably prudent lawyer would not violate an ethical rule defining appropriate professional behavior, so a lawyer who falls below the minimal level of conduct the code mandates supports an inference that the professional standard of care was breached.⁴⁴ The Restatement of the Law Governing Lawyers draws a similar line. Proof of a violation gives rise to no implied cause of action, but the trier of fact may consider it as an aid in understanding and applying the standard of care, to the extent the rule was designed to protect persons in the claimant's position.⁴⁵ That condition echoes the class-and-interest inquiry in a lighter form, since a rule written to protect clients like the plaintiff carries weight while a rule aimed at something else carries little.

Jurisdictions differ on how much weight a violation carries. In Stender v. Blessum, the Iowa Supreme Court collected decisions from other jurisdictions on each possible treatment, and the range runs from strongest to weakest:⁴⁶

• Negligence per se, under which a violation would itself establish malpractice. No state adopts this treatment.
• A rebuttable presumption of malpractice, which at least one state attaches to a violation.
• Evidence of malpractice that the jury may weigh, which most jurisdictions follow.
• Exclusion of the violation from the jury's hearing, because the rules are guidelines for ethical conduct and not a basis for civil liability, which some jurisdictions apply.

Unless an exam stem names a different approach, apply the majority rule. It matches the general observation that courts do not give the professional conduct rules per se effect comparable to safety statutes in ordinary negligence cases.⁴⁷ A safety statute earns that effect because a legislature decided what care a protected class is owed, while the ethics rules were drafted for disciplinary agencies and say in their own text that they do not set a civil measure of care.

In practice the evidence reaches the jury through the plaintiff's expert. Most courts allow experts to refer to the ethics rules when opining on the standard of care, but the expert must relate the rules to the common law standard, because the rules do not normally set that standard.⁴⁸ Two decisions mark the boundary. In Lazy Seven Coal Sales, Inc. v. Stone & Hinds, P.C., the Tennessee Supreme Court held that a law professor's testimony resting solely on the professional responsibility code was inadequate to establish the standard. In Fishman v. Brooks, the Massachusetts high court allowed testimony about the ethics rules on the ground that a violation could be some evidence of negligence.⁴⁹ What separates them is the use made of the rules: offered as though they were the standard, they failed, and offered as one piece of evidence about what careful lawyers do, they were admitted.

The instinct on seeing a rule violation in a fact pattern is to treat it as the whole claim, and the exam rewards the student who resists that instinct.

The buyer fails for a reason that has nothing to do with admissibility. Evidence that a lawyer violated an ethical rule does not by itself establish liability, because the plaintiff must also prove the attorney-client relationship and damages proximately caused by the breach. In a malpractice suit, unlike a disciplinary proceeding, breach shown by a rule violation is only one of four required elements.⁵⁰ The lawyer's conduct must also be a legal cause of the invasion of the client's interest.⁵¹ The violation does not vanish, however. A judge hearing a malpractice case may refer the lawyer to disciplinary authorities even when the plaintiff recovers nothing, so the second system remains open after the first has closed.⁵² A clear and serious violation of a duty to a client can also cost the lawyer the right to compensation for that work, a consequence in addition to any damages.⁵³

The weight of a rule violation also depends on the theory pleaded. The conduct rules may be less relevant to ordinary negligence claims than to breaches of fiduciary and other special duties, and in Griva v. Davison the District of Columbia Court of Appeals recognized that a violation of an ethics rule can constitute a breach of the fiduciary duty to the client.⁵⁴ A rule on loyalty or confidentiality therefore does more work in a fiduciary count than a rule on diligence does in a claim for careless work.

Compliance Is Not Enough

Restatement (Second) of Torts § 288 C provides that compliance with a legislative enactment or an administrative regulation does not prevent a finding of negligence where a reasonable person would take additional precautions.⁵⁶ The preceding subsections asked what follows when a lawyer breaks a rule, and the answer was that a violation can help the plaintiff, sometimes as a shortcut to breach and, for the ethics rules, as evidence of it. Section 288 C asks the reverse question. A lawyer who did exactly what a statute or rule required may still be found negligent if the client shows that a reasonable lawyer would have gone further.

The rule makes sense once you see what an enactment can and cannot do. A legislature or rule-making body writes in advance and in general terms, for the typical situation. It cannot foresee every set of facts, so the requirement it states marks the least care it demands and says nothing about a particular danger the drafters never had in view. If compliance were a complete defense, that minimum would work as a ceiling, and a lawyer who saw an obvious risk could stop at the line the rule drew. The incentive would also run the wrong way, since lawyers would learn the least that counts as compliance and stop there. Keeping the reasonable-lawyer inquiry alive above the floor keeps the question where Restatement § 282 puts it, which is whether the conduct fell below the standard the law establishes for protecting others against unreasonable risk of harm.⁵⁷

The two directions are not symmetrical, and the reason shows why the rule exists. An unexcused violation proves that the actor did less than the lawmakers required, and that proof can carry real weight with a fact-finder. Compliance proves only that the actor did the least the lawmakers required, which says something about care but leaves open whether these circumstances called for more. The point matters most for lawyers with the rules of professional conduct, which describe a minimal level of conduct; falling below it supports an inference that the lawyer breached the standard of care.⁵⁸ The inference does not run the other way. A client whose lawyer obeyed every applicable rule may still argue negligence under the usual totality-of-the-circumstances test, with the lawyer's compliance as one circumstance among the rest.⁵⁹ Section 288 C speaks of enactments and regulations, but the ethics rules play the same floor-like role, so the same reasoning governs them.

The plaintiff carries the burden of showing that a reasonable lawyer would have done more, and that showing ordinarily requires the same expert testimony that proves any standard of care, because jurors have no specialized knowledge of what careful lawyers do beyond what the rules require.⁶⁰ The extra step here was also mechanical. Mailing a notice sooner involves no professional judgment about the law, and courts are more willing to find liability when a step of that kind is left undone.⁶¹

Both firms met the statutory deadline, so the deadline cannot separate the outcomes. What separates them is whether a further precaution was available and reasonable. Reyes & Holt held the information it needed and had a cheap, obvious step open, while Pruitt & Lane had nothing to do but wait for the investigation. Section 288 C does not turn the rule into a demand for perfection, because the additional precaution must be one a reasonable person would take, and a plaintiff who can only say that the lawyer might have done more has not shown breach. Compliance keeps its value for the defendant as evidence of care, and the value is greatest when nobody can name a step the lawyer skipped. An exam stem that recites that the lawyer complied with every applicable rule or statute is therefore asking whether a reasonable lawyer would have gone further, and treating the recital as a safe harbor is the usual error.