Home / Solutions / Legal Services
LEGAL INDUSTRY

Law Firm SMS Compliance

TCR compliance infrastructure for law firms, legal services, and attorneys navigating TCPA regulations + attorney-client privilege protection

TCPA
Strict Enforcement
A-C Priv
Confidentiality
Bar Rules
State Requirements
Multi-State
Jurisdiction Issues

Attorney-Client Privilege Protection via SMS

Understanding Privilege Risk in SMS Communications

Attorney-client privilege protects confidential communications made for the purpose of obtaining legal advice. SMS messages face unique risks: (1) unencrypted transmission, (2) potential interception, (3) storage on third-party servers (carrier infrastructure), (4) visibility to anyone with access to recipient's phone. Courts have held that failure to maintain confidentiality can waive privilege protection.

Privilege-Safe SMS Practices

  • Generic appointment confirmations ("Your consultation is scheduled for [Date]")
  • Document request notifications ("Please upload requested documents to secure portal")
  • Payment reminders ("Invoice due [Date]. Pay via portal: [URL]")
  • Court date reminders ("Hearing scheduled [Date] at [Time]. Call with questions.")
  • Secure portal notifications ("New message from your attorney. Login to view.")

Privilege-Risk SMS Content

  • Legal advice or strategy discussions (use secure portal)
  • Case-specific details (settlement amounts, liability assessments)
  • Discovery information or evidence details
  • Opposing party information or negotiation positions
  • Client confidences disclosed during representation

Client Consent & Privilege Waiver Acknowledgment

Best practice: Obtain written client acknowledgment that SMS is insecure and may waive privilege. Include in engagement letter or separate technology consent form.

Sample Language:
"I understand that text messaging is not a secure form of communication and may not maintain attorney-client privilege. I acknowledge that text messages may be intercepted, accessed by third parties, or stored on carrier servers. I agree that [Firm Name] may send me appointment reminders, document requests, and administrative updates via SMS, but substantive legal communications will occur via secure client portal or encrypted email. I will not transmit confidential case information via text message."

Practice Area-Specific Compliance Considerations

Personal Injury / Plaintiff's Litigation

Highest Regulatory Scrutiny
State Bar Restrictions:
  • • Florida: 30-day post-accident solicitation ban
  • • Texas: "Barratry" prohibition on direct solicitation
  • • California: Targeted restrictions on accident victims
  • • Many states: Written disclosure requirements for PI ads
Compliant Approaches:
  • • Client referrals only (no purchased lead lists)
  • • General advertising (not targeted at specific incidents)
  • • Past client reactivation (statute of limitations reminders)
  • • Co-counsel referral networks (attorney-to-attorney)

Family Law / Divorce

Privacy & Sensitivity Concerns
Privacy Considerations:
  • • Spouse may have access to client's phone
  • • Court proceedings discoverable (texts as evidence)
  • • Domestic violence context requires extra caution
  • • Child custody details highly sensitive
Best Practices:
  • • Verify phone number is client-controlled only
  • • Generic appointment reminders (no case details)
  • • Encourage secure portal for all case communications
  • • Document client preference for SMS (engagement letter)

Criminal Defense

Privilege Protection Critical
Unique Risks:
  • • Law enforcement may subpoena carrier records
  • • Defense strategy communications discoverable if not privileged
  • • Witness coordination via SMS creates evidence trail
  • • Incarcerated clients often use monitored phones
Recommended Protocols:
  • • Court date reminders only (no case discussions)
  • • Assume all SMS is subject to subpoena
  • • In-person or privileged phone calls for strategy
  • • Educate clients on SMS discovery risks

Business & Corporate Law

Transactional Focus
Appropriate SMS Uses:
  • • Closing date/deadline reminders
  • • Document execution status updates
  • • Meeting confirmations (board, negotiation)
  • • Signature request notifications (DocuSign alerts)
Corporate Client Considerations:
  • • Multiple stakeholders may need updates
  • • Separate campaigns for different business units
  • • Retainer client communications = transactional
  • • New business development = marketing (TCPA)

Immigration Law

Multi-Lingual & USCIS Coordination
Client Communication Challenges:
  • • Multi-lingual messaging requirements
  • • International phone numbers (non-US carriers)
  • • USCIS deadline tracking critical
  • • Document production time-sensitive
Compliance Solutions:
  • • Appointment reminders in client's language
  • • Filing deadline alerts (I-485, I-130, naturalization)
  • • Interview preparation notifications
  • • Status change updates (case approved/pending)

Legal Services TCR Use Cases

Client Appointment Reminders

TCR Use Case: Customer Care

Consultation confirmations, court date reminders, mediation scheduling, deposition notifications. Existing attorney-client relationship enables transactional messaging.

Sample Message (Compliant):
[Law Firm]: Your consultation is scheduled for [Date] at [Time]. Our office is located at [Address]. Please bring [requested documents]. Questions? Call [Phone]. Reply STOP to opt out.
Compliance Requirements:
  • • Client relationship established (engagement letter)
  • • No confidential case details in message
  • • Generic appointment info only
  • • Firm identification clear
Timing Best Practices:
  • • Initial confirmation: Within 24 hours of scheduling
  • • Reminder: 24-48 hours before appointment
  • • Court dates: 7 days + 24 hours prior
  • • Avoid early morning/late evening messages

Document Production Reminders

TCR Use Case: Customer Care

Discovery deadlines, client questionnaire completion, document upload requests, signature requirements (engagement letters, settlement agreements).

Sample Message (Compliant):
[Law Firm]: Reminder to upload requested documents to your secure client portal by [Deadline]. Login at [URL] or call [Phone] for assistance. Reply STOP to opt out.
Privilege Protection:
  • • No specific document names (generic "documents")
  • • Secure portal link (not direct file transmission)
  • • No case details revealing confidential info
  • • Client responsibility to maintain phone security
Deadline Management:
  • • Initial request: Via phone/email (documented)
  • • SMS follow-up: 7 days before deadline
  • • Final reminder: 24-48 hours before deadline
  • • No more than 2 SMS reminders per request

Invoice & Payment Reminders

TCR Use Case: Account Notifications

Retainer replenishment notices, invoice due dates, payment plan reminders, trust account disbursement notifications.

Sample Message (Compliant):
[Law Firm]: Your invoice for legal services is due [Date]. Pay online at [SecurePaymentURL] or call [Phone]. Thank you for your business. Reply STOP to opt out.
Financial Communication Rules:
  • • Invoice amount optional (privacy preference)
  • • Secure payment link (encrypted portal)
  • • No case references in billing messages
  • • Alternative payment methods mentioned
State Bar Considerations:
  • • Fee dispute risk (document all communications)
  • • Trust accounting rules (IOLTA compliance)
  • • Written fee agreements required (supplement, not replace)
  • • Billing ethics (reasonable fees, itemization)

Case Milestone Notifications

TCR Use Case: Customer Care

Filing confirmations, settlement offer received (no details), court ruling notifications (direct to portal), status change alerts (discovery, trial scheduling).

Sample Message (Compliant):
[Law Firm]: Important case update available. Please check your secure client portal at [URL] or call [Phone] to discuss. Reply STOP to opt out of case alerts.
What NOT to Include:
  • • Settlement amounts or offer details
  • • Liability assessments or case strength
  • • Opposing counsel communications
  • • Discovery content or evidence details
  • • Legal advice or strategy recommendations
Privilege-Safe Alternatives:
  • • Generic "update available" notification
  • • Portal link for detailed information
  • • Request to call office for discussion
  • • Schedule appointment for strategy meeting

Prospective Client Follow-Up (Marketing)

TCR Use Case: Mixed Marketing

Website inquiry follow-up, free consultation scheduling, attorney availability notifications, practice area information. Requires express written TCPA consent.

Sample Message (Compliant - With Prior Consent):
[Law Firm]: Thank you for your inquiry about [Practice Area]. We'd like to schedule a free consultation to discuss your case. Reply YES to confirm interest or call [Phone]. Reply STOP to opt out. Msg&data rates may apply.
TCPA Marketing Requirements:
  • • Express written consent (web form checkbox)
  • • Separate from email consent (dedicated SMS opt-in)
  • • Clear disclosure of marketing purpose
  • • Voluntary (not required for free consultation)
  • • Opt-out language in every message
State Bar Advertising Rules:
  • • Many states require "Attorney Advertising" label
  • • No misleading success rate claims
  • • Truthful, non-deceptive content only
  • • Some states require written disclaimers
  • • Personal injury solicitation restrictions

Compliant vs. Non-Compliant Message Templates

Consultation Confirmation (Existing Client)

COMPLIANT
[Smith & Associates]: Your legal consultation is confirmed for Tuesday, March 15 at 2:00 PM. Office: 123 Main St, Suite 500. Parking validated. Call 555-0123 with questions. Reply STOP to opt out.
Compliance Score: 98/100
Character Count: 171 (2 segments)
Why Compliant:
  • ✓ Existing client relationship (transactional use case)
  • ✓ No confidential case information
  • ✓ Clear firm identification
  • ✓ Opt-out language present
  • ✓ Contact method for questions

Document Request Reminder

COMPLIANT
[Davis Law]: Reminder: Please upload requested documents to your secure portal by Friday, March 17. Login at clientportal.davislaw.com or call 555-0199 for help. Reply STOP to opt out.
Compliance Score: 96/100
Character Count: 178 (2 segments)
Why Compliant:
  • ✓ No specific document names (privilege protected)
  • ✓ Secure portal reference (not direct transmission)
  • ✓ Time-sensitive administrative reminder
  • ✓ Alternative contact method

Court Date Reminder

COMPLIANT
[Thompson Legal]: IMPORTANT: Your court hearing is scheduled for Monday, March 20 at 9:00 AM. Location: County Courthouse, Courtroom 4B. Arrive 30 min early. Questions? Call 555-0177. Reply STOP to opt out.
Compliance Score: 97/100
Character Count: 192 (2 segments)
Why Compliant:
  • ✓ Time-critical client service notification
  • ✓ Public information (court date/location)
  • ✓ No case strategy or confidential details
  • ✓ Professional tone appropriate for legal context

❌ Privilege Violation - Case Strategy Discussion

VIOLATION
Hi John! Great news - the plaintiff's attorney offered $75,000 to settle. I think we should counter at $90K based on your medical bills. What do you think? Let me know and I'll respond to their counsel.
Attorney-Client Privilege Violations:
  • ✗ Settlement amount disclosed (confidential negotiation)
  • ✗ Legal strategy recommendation in unsecured channel
  • ✗ Medical information referenced (privacy violation)
  • ✗ Attorney work product revealed (negotiation position)
  • ✗ Risk of interception = privilege waiver
Additional Issues:
  • ✗ No opt-out language (TCPA violation)
  • ✗ No firm identification
  • ✗ Informal tone inappropriate for legal advice
Correct Approach: "Hi John, we have an important case update to discuss. Please call the office at your earliest convenience to review settlement developments. 555-0123."

❌ Personal Injury Solicitation Violation

VIOLATION
Were you injured in the I-95 accident on March 10th? You may be entitled to significant compensation! Free consultation. We've recovered millions for accident victims. Call now: 555-INJURY
State Bar Violations:
  • ✗ Direct solicitation of accident victim (Florida 30-day ban, Texas barratry prohibition)
  • ✗ Targeted at specific incident (vs. general advertising)
  • ✗ Potentially misleading success claims ("millions recovered")
  • ✗ No required disclosures (Attorney Advertising label in many states)
  • ✗ May violate solicitation ethics rules (ABA Model Rule 7.3)
TCPA Violations:
  • ✗ No express written consent (purchased lead list)
  • ✗ No opt-out mechanism
  • ✗ Marketing to non-consenting recipient
Penalty Exposure: TCPA ($500-1,500 per message) + State Bar Discipline (suspension, disbarment) + Potential criminal charges (Texas barratry = felony)

❌ Misleading Marketing Claims

VIOLATION
[Law Firm]: WE WIN 99% OF CASES! Guaranteed results or you don't pay. Best attorneys in the state. Don't settle for less - you deserve maximum compensation! Text YES for free case evaluation.
Attorney Advertising Violations:
  • ✗ Unsubstantiated success rate claim ("99%")
  • ✗ Guarantee of results (prohibited in most states)
  • ✗ Unverifiable superlative ("best attorneys")
  • ✗ Creates unjustified expectations ("maximum compensation")
  • ✗ Missing required disclaimers (past results don't guarantee future)
Model Rule 7.1 Violations:
  • ✗ False or misleading statements about services
  • ✗ Omission of material facts making statement misleading
  • ✗ Comparison to other attorneys without factual foundation
Compliant Alternative: "[Law Firm]: Experienced in [Practice Area]. Free consultation to evaluate your case. We work on contingency - no fees unless we recover compensation for you. Reply YES to schedule. Reply STOP to opt out. Terms: [URL]"

State Bar Advertising Requirements

SMS Messages = Attorney Advertising

Under ABA Model Rule 7.2 and state variations, attorney communications about legal services constitute "advertising" regardless of medium. SMS messages promoting legal services or soliciting clients trigger advertising rules, even if transactional (appointment reminders from firm = advertising the firm's services).

Strictest States

Florida:
  • • 30-day post-accident solicitation ban
  • • "Attorney Advertising" label required
  • • Written file required for all ads
  • • Dramatization disclaimers mandatory
Texas:
  • • Barratry criminal prohibition
  • • Direct solicitation 30-day ban
  • • "This is an advertisement" required
  • • Specialty certification restrictions
New York:
  • • 30-day post-incident restriction
  • • Prior results disclaimers required
  • • Written retention required (3 years)
  • • Testimonial restrictions

Moderate States

California:
  • • Truthfulness standard (no false/misleading)
  • • Targeted accident victim restrictions
  • • Fee advertising permitted with caveats
  • • Dramatization allowed with disclosure
Illinois:
  • • Solicitation within 30 days prohibited
  • • Advertisements must be truthful
  • • Specialty claims require certification
  • • Record retention 2 years
Pennsylvania:
  • • Written disclaimers for testimonials
  • • Factual accuracy required
  • • No comparative claims without basis
  • • Responsible attorney identification

Permissive States

Arizona:
  • • Broad advertising freedom
  • • Truthfulness primary requirement
  • • Comparative advertising allowed
  • • Minimal disclaimer requirements
Nevada:
  • • Advertising generally permitted
  • • False/misleading prohibited
  • • Testimonials allowed
  • • Specialty claims permitted
Colorado:
  • • Liberal advertising approach
  • • Truthfulness standard
  • • Prior results permitted (with context)
  • • Limited filing requirements

Universal Advertising Principles (ABA Model Rules)

Rule 7.1 - Communications Concerning Services:
  • • No false or misleading statements
  • • Material facts cannot be omitted if omission misleading
  • • Comparative statements require factual basis
  • • Specialization claims require certification
Rule 7.3 - Solicitation of Clients:
  • • Direct solicitation prohibited in many circumstances
  • • Accident/disaster victims = heightened restrictions
  • • "Advertising Material" disclosure required
  • • Harassment/coercion prohibited

Common TCR Rejection Issues for Law Firms

Sample Messages Contain Privileged Information

Submitted message templates include case-specific details, legal advice, settlement amounts, or client confidences. TCR reviewers flag potential attorney-client privilege concerns and privacy risks.

Fix: Rewrite samples using generic administrative notifications only. "Your appointment is confirmed" not "Your divorce hearing is scheduled." "Case update available in portal" not specific litigation developments. All confidential communications must occur via secure channels (encrypted email, client portal, phone consultation).

Marketing Campaign Registered as Transactional

Lead generation, client acquisition, or new business development campaigns registered as "Customer Care" when content is promotional. Free consultation offers, case evaluation invitations, and attorney availability notifications require marketing use case.

Fix: Separate campaigns for existing clients (transactional = Customer Care) vs. prospective clients (marketing = Mixed Marketing). Marketing campaigns require express written TCPA consent (website form checkbox). Existing client communications (appointment reminders, invoices) use transactional classification. When in doubt, use Marketing use case and obtain robust consent.

State Bar Compliance Not Demonstrated

Sample messages lack required state bar advertising disclosures. Florida/Texas/New York require "Attorney Advertising" labels; not present in TCR-submitted templates. Personal injury solicitation within 30-day prohibited period in multiple states.

Fix: Include state-required disclaimers in message templates: "[Law Firm] - Attorney Advertising" or "This is an advertisement" as required by jurisdiction. For multi-state firms, use most restrictive state's requirements. Personal injury campaigns: Exclude recent accident victims from target lists; use general advertising only (no specific incident targeting). Document bar compliance review in TCR registration notes.

Multi-State Practice Area Registration Confusion

Law firms licensed in multiple states register single brand but message content violates specific state advertising rules. California-based firm soliciting Texas accident victims within 30-day ban. New York attorney advertising to Florida clients without required disclosures.

Fix: Register campaigns by jurisdiction-specific compliance requirements. Separate campaigns for different states if advertising rules vary significantly. Brand registration: Multi-state license documentation (attorney bar numbers for each state). Message templates: Include jurisdiction-appropriate disclaimers. Geo-targeting: Restrict campaigns to states where attorney licensed and campaign compliant. Alternative: Register primary office state; disclaim licensed jurisdictions in first message.

Inadequate Consent Documentation for Marketing

Prospective client messaging without clear TCPA express written consent. Website inquiry forms lack dedicated SMS checkbox. Purchased lead lists without verified opt-in transfer documentation. Pre-checked consent boxes (prohibited).

Fix: Implement dedicated SMS consent checkbox on all website inquiry forms, separated from email consent. Checkbox must be unchecked by default (affirmative action required). Consent language clearly discloses marketing purpose: "Send me text messages about legal services offered by [Firm]." Include opt-out mechanism in disclosure. Third-party leads: Obtain written documentation of consent transfer including timestamp, IP address, consent language presented. Verify lead source compliance before purchasing.