WoW: The Meaning of "eSIM" for Lawyers: What It Is, Why It Matters, and How to Switch Carriers Without Compromising Client Data 📱⚖️

eSIMs for Lawyers: Smarter Mobile Security and Client-Data Protection

eSIM is short for “embedded SIM.” It is the digital replacement for the small plastic SIM (subscriber identity module) card that once connected your phone to a wireless carrier.

For most lawyers, eSIM is not exciting because it is new. It matters because it changes how quickly you can activate a phone, change carriers, add a work line, travel internationally, and recover from a lost or damaged device. It also changes parts of your firm’s mobile-security workflow. 🔐

If you recently read my post, “MTC: Apple Upgrade Lease vs. Buying vs. Carrier Financing — Which iPhone 18 Pro Deal Actually Works for Solo and Small Firm Lawyers?,” you know that phone financing affects more than cash flow. It affects your ability to switch providers, control your device, and manage confidential information. eSIM sits at the center of each issue.

What an eSIM Does

Travel-Ready eSIMs for Lawyers: Stay Connected, Protect Client Data

A traditional SIM card is a physical chip. Your carrier activates it. You place it in your phone. The chip identifies your cellular account to the network.

An eSIM performs the same basic function. The key difference is that the SIM is built into the device. Your carrier sends a digital activation profile to the phone. In many situations, you can set up service through an app, a QR code, or the phone’s settings.

That can make a new-phone setup faster. It can also make a second line easier to manage.

For example, a solo lawyer might use:

  • One eSIM line for firm calls and text messages.

  • A second eSIM line for personal use.

  • A temporary travel eSIM for data outside the United States.

  • A replacement eSIM after a lost or stolen phone.

The technology is useful. It is not self-managing.

Why eSIM Matters to Law Practice

eSIM Security for Lawyers: Prevent SIM Swaps and Account Takeover

Your phone may be your camera, recorder, authenticator, document scanner, password-manager vault, email terminal, and client-communication device. The prior iPhone 18 Pro analysis described it accurately as a “filing cabinet, a camera, and a recorder for privileged material.”

eSIM does not itself store your client files. It does, however, control a critical part of your identity on the mobile network: your phone number.

That matters because many firms still use text-message codes as a multifactor-authentication method. A criminal who takes control of your mobile number may receive those codes. That risk is commonly known as a SIM-swap attack.

The attacker may persuade or manipulate a carrier into transferring your number to another device. With access to your number, the attacker may try to reset passwords for email, banking, cloud storage, practice-management software, or other accounts.

eSIM reduces the need to handle a physical SIM card. It does not eliminate account-takeover risk. A carrier can still transfer a number digitally. Your security must therefore extend beyond the phone itself. 🛡️

The ABA Ethics Connection

ABA Model Rule 1.1 requires competent representation. Comment 8 explains that competent lawyers should keep abreast of the benefits and risks associated with relevant technology. An eSIM is not a specialty topic anymore. It is part of ordinary smartphone use.

ABA Model Rule 1.6(c) requires lawyers to make reasonable efforts to prevent the unauthorized disclosure of, or unauthorized access to, client information. If a compromised phone number helps an attacker access your email, cloud account, or case-management platform, the consequences can extend far beyond a missed call.

The ABA Model Rules also identify Rule 5.3, concerning responsibilities regarding nonlawyer assistance. Your carrier, device-management provider, IT consultant, and cloud vendors all play roles in your technology environment. You remain responsible for making reasonable choices and supervising the systems on which your practice depends.

No ethics rule requires a particular carrier or authentication app. The rules do require reasonable safeguards that fit the sensitivity of the information you handle.

Five Practical eSIM Safeguards

Secure eSIM Strategies for Lawyers Protecting Confidential Client Information

  1. Set a carrier account PIN or passcode. Do not reuse your phone unlock code. Ask your carrier about number-port-out protection or transfer locks.

  2. Use an authenticator app or hardware security key when available. Avoid relying exclusively on text-message authentication for critical accounts. Text messages are convenient. They are not the strongest option.

  3. Separate firm and personal use thoughtfully. A dual-SIM setup can help. It does not substitute for a written mobile-device policy, strong passcodes, encryption, and remote-wipe capability.

  4. Treat carrier changes as security events. Confirm which accounts use your mobile number for recovery. Update authentication methods before moving a number to a new carrier or device.

  5. Document the offboarding process. Before returning, trading in, or replacing a phone, migrate data, transfer authentication access, remove the old device from firm accounts, and complete a secure wipe. That is especially important if you lease hardware or use annual-upgrade programs.

eSIM and Carrier Lock-In

eSIM makes changing service technically easier. Carrier financing can make it financially harder.

As discussed in the iPhone 18 Pro financing post, some promotions spread bill credits over 36 months. If you cancel, change carriers, or pay off the phone early, the remaining credits may disappear and the unpaid device balance may become due. The phone may be easy to activate elsewhere. The contract may not be easy to leave.

That distinction matters for solo and small-firm lawyers. Flexibility has value. A law practice may need to change carriers because of coverage, cost, travel, office relocation, client-service needs, or a security concern.

Do not let a “free phone” offer obscure a three-year commitment. Review the device agreement. Review the carrier’s transfer rules. Confirm what happens to your bill credits before you move your number. 💡

The Bottom Line

eSIM Flexibility vs. Carrier Lock-In for Modern Law Practices

eSIM is a useful technology. It supports faster activation, multiple lines, and more flexible service arrangements. Yet it also turns your phone number into an even more important security asset.

Treat your mobile number like a key to the firm. Protect it with a carrier PIN. Reduce dependence on text-message authentication. Plan carrier transitions. Include eSIM transfers in your device-replacement checklist.

Technology competence is not about chasing every new feature. It is about understanding how the technology you already carry affects client confidentiality, firm continuity, and professional judgment. 📲

MTC: Apple Upgrade Lease vs. Buying vs. Carrier Financing — Which iPhone 18 Pro Deal Actually Works for Solo and Small Firm Lawyers? 📱⚖️

Should Lawyers Lease, Finance, or Buy an iPhone?

Last week we compared the hardware. In MTC: iPhone 18 Pro vs. iPhone Duo vs. Samsung and Pixel Foldables: Which Smartphone Is Better for Lawyers?, the iPhone 18 Pro won on portability, evidence capture, and price. This week we answer the harder question. 💰

How should you pay for it?

That question got genuinely complicated in July, when Apple retired the iPhone Upgrade Program and launched Apple Upgrade. Leasing is not financing. The difference matters to your balance sheet — and to your ethical obligations.

The Four Paths Before You 🛤️

An iPhone 18 Pro 256GB lists at $1,199. Here is what each path actually costs.

Buy it outright. You own it. You control when it is wiped, when it is replaced, and who ever touches it. Apple Card Monthly Installments spreads that same $1,199 over 24 months at $49.95 per month, 0% APR.

Lease for 24 months. Apple Upgrade charges $34.99 per month, excluding taxes and trade-in credit. That is $839.76 over two years — and you own nothing at the end.

Lease for 12 months. Apple Upgrade charges $49.99 per month. Two consecutive one-year leases run roughly $1,200 across 24 months. You pay a premium of about $360 for the privilege of a new phone every September.

Finance through a carrier. Verizon puts the iPhone 18 Pro at $33.33 per month over 36 months at 0% APR. AT&T and T-Mobile run comparable installment plans.

The Buyout Math Nobody Advertises 🧮

iPhone 18 Pro Financing Options for Solo and Small-Firm Lawyers

Here is the detail that should shape your decision. Apple's buyout price equals the device's list price at signing, minus payments already made.

Run the numbers. Twenty-four payments of $34.99 total $839.76. Buy out at month 24 and you pay $359.24. Your total is $1,199 — exactly list price.

So Apple Upgrade is not a discount. It is a deferral. You pay the same amount either way. The lease simply lets you stop paying at month 24 and walk away with nothing.

That is fine if you upgrade religiously. It is expensive if you do not. Lawyers who keep a phone for four years should buy. 🔒

Trade-In Credit: Where Buying Wins Quietly 🔄

Apple Trade In pays $35 to $885 depending on your device. That credit applies instantly at checkout when you buy.

On a lease, the treatment is murkier. Apple's published lease prices explicitly exclude trade-in credit, and the credit applies only to the initial lease term. Let the lease roll into its month-to-month extension and your payment goes up.

Carriers dangle bigger numbers. AT&T advertises up to $1,200 off with an iPhone 14 or newer in any condition — delivered as $33.34 per month across 36 monthly bill credits. T-Mobile matches that $1,200 on Experience Beyond 2.0 or Go5G Next plans at $100 or more per month.

Read that again. Thirty-six months. Cancel service, switch carriers, or pay the device off early and the remaining credits vanish while the balance comes due immediately. A "free" iPhone is a three-year commitment to one carrier's pricing.

The Annual Upgrade Programs 📆

Should Lawyers Lease, Finance, or Buy when choosing between a flagship v. foldable smartphone?

If you want a new phone every year, three programs compete.

Apple Upgrade, 12-month term: $49.99 per month. No add-on fee. Return in good working condition.

AT&T Next Up Anytime: $10 per month on top of your installment plan. Upgrade after a single monthly payment, up to three times in twelve months, with a qualified turn-in. Note that the $10 never generates bill credits.

Verizon Simplicity Pro: $50 per month for phones priced $830.01 to $1,200. Upgrade twice in any rolling twelve months after one payment and after paying 33% of your 36-month agreement.

AT&T's $10 feature is the cheapest route to annual hardware. Verizon's $50 add-on, stacked on a device payment, is the most expensive. 💸

Android and Pixel: No True Lease Exists 🤖

Worth knowing before you assume the grass is greener. Neither Samsung nor Google offers an Apple Upgrade equivalent. Both rely on installments plus trade-in credits.

The credits are aggressive. AT&T offers up to $1,350 on the Pixel 11 Pro XL — $37.50 monthly over 36 months — and up to $1,100 on the Galaxy Z Fold8. T-Mobile goes to $1,900 off the Galaxy Z Fold 8 with a 24-month commitment on Experience Beyond or Go5G Next.

Bigger headline numbers, same leash.

Smartphone Leasing, Ethics, and Security for Legal Professionals

Considering the foldable iPhone? The iPhone Duo starts at $1,999, or $83.29 monthly over 24 months, and leases from $57.99 per month for 24 months. Pre-orders open October 16.

Your Ethical Obligations If You Lease 🛡️

This is where a payment decision becomes a professional responsibility decision.

ABA Model Rule 1.6(c) requires reasonable efforts to prevent unauthorized disclosure of client information. Rule 1.1, Comment 8 obligates you to understand the benefits and risks of the technology you use. Leasing means handing your device to a third party on a schedule someone else sets.

Verizon requires returned phones to power on, have no cracked screen, and have all password-protected security features turned off, including Find My iPhone. You are surrendering hardware that held privileged communications, with its protections disabled. Wipe it properly first — see Wednesday "How to...": Enable Remote Wipe Capabilities 🧹.

Three more rules deserve attention. Rule 5.3 extends your supervisory duty to nonlawyer assistance, and Klarna and your carrier now sit in that chain. Rule 1.15 governs safeguarding property in your possession. Rule 1.5 applies if you pass device costs to clients — a 36-month bill credit schedule is not obviously a reasonable expense to allocate to a single matter.

One practical trap: Apple Upgrade leases are unavailable through Apple at Work, the Employee Purchase Plan, and government or education programs. If your PLLC buys hardware in the firm's name, leasing may not be available to you at all. 📋

There is also a practical loss. Leased devices get returned before they can become a controlled archive. If your phone carries encrypted case notes or a local model like the one described in HOW TO: How Lawyers Can Run a Private Local LLM on a Smartphone, the migration is yours to manage, annually. Pair any plan with a real backup strategy — Ep. 104: The Importance of Data Backup & Cybersecurity w/ Curtis Preston remains essential listening. Make sure you transfer your data and wipe, i.e., delete the data on your "old" phone before returning/trading it in.!

My Take 🎯

Choosing and financing smartphones is just not a law practice opperation issues, its a legal ethics issue too!

Solo practitioners should buy. Pay cash or use 24-month installments at $49.95. You own the asset, you control the wipe, you keep the trade-in credit, and your CPA can discuss Section 179 treatment. Predictability beats novelty when you are the whole firm.

Small firms with a hardware refresh policy can justify Apple Upgrade's 24-month lease at $34.99 with a disciplined September return ritual and a written wipe protocol. The lower monthly is real. So is the discipline required.

Litigators who depend on current camera hardware should consider AT&T's $10 Next Up Anytime over any 12-month lease. Same annual cadence, meaningfully less money.

Avoid the 36-month carrier bill-credit deals unless you are genuinely happy with that carrier through 2029. As I argued in MTC: AI Won't Replace Solo and Small-Firm Lawyers, our advantage is agility. Do not finance it away. ⚡

Your phone is a filing cabinet, a camera, and a recorder for privileged material. Own the filing cabinet. 🗄️

MTC

🚨BOLO! Fake Apple App Steals Mac Password Vaults: What Lawyers Must Do Now 🔐⚠️

If you use a Mac in your law practice, this is a “stop and read” moment.

Fake Apple App Threatens Lawyers’ Mac Password Security

A newly identified piece of malware—disguised as a legitimate Apple application—has the ability to trick users into surrendering access to their macOS password vault. That means saved credentials, system access, and potentially client data are all in play. For lawyers, the implications go well beyond inconvenience. This is an ethics issue. 🚨

According to Malwarebytes’ recent threat intelligence report, attackers are distributing a fake Apple app that convincingly mimics legitimate system prompts. Once installed, it requests elevated permissions and can capture macOS Keychain credentials—the same vault many attorneys rely on to store passwords and secure notes.

That should immediately raise a red flag for anyone responsible for client confidentiality.

Why This Matters for Lawyers

Many attorneys assume macOS provides a higher baseline of security. That assumption is not entirely wrong, but it is incomplete. Threat actors are increasingly targeting Mac users because of that very complacency.

If your Keychain is compromised, an attacker may gain access to:

  • Email accounts containing privileged communications 📧

  • Cloud storage platforms holding client files ☁️

  • Practice management systems

  • Financial accounts and trust systems 💼

This is not just a cybersecurity issue—it is a professional responsibility issue under multiple ABA Model Rules.

The Ethics Layer You Cannot Ignore

Let’s connect the dots to your obligations.

Mac Malware Mimics Apple Prompts to Steal Keychain Credentials

ABA Model Rule 1.6 (Confidentiality of Information) requires attorneys to make reasonable efforts to prevent unauthorized access to client information. Falling for a well-crafted phishing or malware attack does not automatically mean a violation—but failing to implement reasonable safeguards might.

ABA Model Rule 1.1 (Competence) now explicitly includes technological competence. Comment 8 makes clear that lawyers must understand the “benefits and risks associated with relevant technology.”

If you are not aware that fake system prompts exist—or that macOS Keychain can be targeted—you are already behind the curve.

ABA Model Rule 5.3 (Responsibilities Regarding Nonlawyer Assistance) also comes into play if your staff installs software or clicks prompts without proper training.

This is why I often emphasize in both my blog and podcast that cybersecurity is no longer optional—it is foundational.

How the Attack Works 🧠

The attack is deceptively simple:

  • A user downloads what appears to be a legitimate Apple-related application.

  • The app triggers a system-like prompt requesting credentials.

  • The interface closely mimics macOS authentication dialogs.

  • The user enters their password, believing it is a routine request.

  • The attacker captures the credentials and may escalate access.

This is classic social engineering layered with technical sophistication.

And here is the uncomfortable truth: even experienced professionals can be fooled when the interface looks authentic.

Warning Signs You Should Not Ignore

While these attacks are convincing, they are not perfect. Look for:

  • Unexpected prompts asking for your Mac password 🔑

  • Requests tied to apps you do not recall installing

  • Slightly off branding, spacing, or wording

  • Prompts appearing outside normal workflows

When in doubt, stop. Do not enter credentials.

Instead, open System Settings directly and verify whether any legitimate action requires authentication.

💡 TIP:  Download Apps directly from the Apple App Store.  These applications are vetted by Apple and are less likely to be malware!

Practical Safeguards for Your Practice 🛡️

You do not need to become a cybersecurity expert. But you do need a defensible baseline.

Start here:

  • Use a dedicated password manager instead of relying solely on Keychain.

  • Enable multi-factor authentication (MFA) across all critical systems.

  • Limit administrative privileges on your Mac.

  • Install reputable endpoint protection software.

  • Keep macOS and all applications updated.

  • Train your staff to recognize suspicious prompts.

Incident Response: What If You Already Clicked?

  • If you suspect you interacted with a fake app:

  • Disconnect from the internet immediately 🌐

  • Change all critical passwords from a separate, clean device

  • Run a full malware scan

  • Contact a cybersecurity professional

  • Assess whether client data may have been exposed

At that point, your ethical obligations may shift toward disclosure.

Under ABA Model Rule 1.4 (Communication), you may need to inform affected clients if their data was compromised. Timing and scope matter, so consult ethics counsel where appropriate.

Lawyers Must Strengthen Mac Cybersecurity and Client Data Protection

The Bigger Picture

This is not just about one fake app.

It is about a shift in the threat landscape. Attackers are no longer relying on obvious scams. They are leveraging trust—your trust in Apple, your trust in familiar interfaces, your trust in your own habits.

That is why vigilance must become part of your daily workflow.

As I have discussed before, technology amplifies both efficiency and exposure. The same tools that make your practice more productive also expand your attack surface.

Final Thought

You do not need to panic. But you do need to pay attention.

The lawyers who thrive in this environment are not the most technical—they are the most aware.

Stay alert. Stay updated. And treat every unexpected prompt like it matters—because it might. 🔍

MTC: Law School, Laptops, and AI: Why Banning Computers Misses the Point!

Law schools are throwing out the baby with the bathwater by banning laptops from the classroom as an effort to combat improper ai use.

On July 10, 2026, the conversation around artificial intelligence in legal education reached a new level. Reports of universities banning both AI tools and laptops in classrooms reflect a growing anxiety: how do we preserve critical thinking in an age of automation? ⚖️

It is a fair question. It is also the wrong solution.

Let me be clear at the outset. A first-year ban on AI tools makes sense. A blanket ban on laptops does not.

The Case for Limiting AI—At First

Legal education has always been about building judgment. That means learning how to analyze facts, synthesize doctrine, and construct arguments from scratch. AI short-circuits that process if used too early.

Under ABA Model Rule 1.1 (Competence), lawyers must provide knowledgeable and skilled representation. That competence begins in law school. If students rely on AI before they understand the law themselves, they risk becoming operators instead of thinkers.

As I have noted in prior discussions on legal technology, AI should augment—not replace—legal reasoning.

So yes, a structured limitation on AI during the first year is defensible. It creates a foundation. It forces students to wrestle with ambiguity. It builds intellectual muscle. 💡

But Banning Laptops? That Is an Overreach

This is where the policy breaks down.

When I entered law school then graduated in 2002, laptops were just beginning to appear in classrooms. They were not universal. They were not always welcome.

For me, the laptop was not a distraction. It was essential.

My handwriting was and sadly still is poor. My ability to type, organize notes, and revise quickly made the difference between struggling and succeeding. My laptop was not a shortcut. It was an accessibility tool before we used that term widely.

Fast forward to today. Students are typing far more than they write. Many have never learned cursive. Their academic workflows are digital from the start.

To remove laptops is not to level the playing field. It is to shift it—often unfairly.

The Practical Reality of Modern Learning

Legal education does not exist in a vacuum. Law practice is digital.

Law students who learned on laptops will be disadvantaged if classrooms suddenly ban them.

Under ABA Model Rule 1.1, Comment 8, lawyers must understand the benefits and risks of technology. That obligation does not begin after graduation. It begins in law school.

Students today must learn:

  • How to organize digital research

  • How to draft and revise efficiently

  • How to manage documents and workflows

  • How to integrate technology into legal reasoning

You cannot teach modern legal competence while removing the primary tools of modern legal work. 🖥️

A laptop is not the problem. Misuse is.

The Enforcement Problem No One Is Talking About

There is also a practical issue. Banning AI is difficult to enforce. Banning laptops is easy.

That does not make it the right policy.

If anything, banning laptops is a workaround for the harder problem of AI enforcement. It is a policy by convenience.

And it raises a deeper concern under ABA Model Rule 5.3 (Responsibilities Regarding Nonlawyer Assistance), which increasingly applies to AI tools. Lawyers—and future lawyers—must learn to supervise and evaluate AI outputs.

You cannot teach supervision by eliminating exposure.

A Better Approach: Controlled Access, Not Prohibition

Law schools should be experimenting with smarter controls instead of blunt bans.

Some possibilities include:

  • Disabling Wi-Fi and cellular signals in certain classrooms 📶

  • Using locked-down exam or classroom software environments

  • Creating AI-permitted and AI-prohibited assignments with clear boundaries

  • Requiring disclosure of AI use in coursework

  • Teaching prompt engineering and AI verification as part of the curriculum

This approach aligns with ABA Model Rule 1.6 (Confidentiality) as well. Students must learn what data can and cannot be shared with AI systems.

Exposure with guardrails is more effective than prohibition. That principle applies directly to how law schools should approach AI.

Critical Thinking and Technology Are Not Opposites

There is a persistent myth underlying these bans: that technology erodes thinking.

That is not inherently true.

Technology can weaken thinking if it replaces effort. It can strengthen thinking if it supports it.

A student who uses a laptop to organize case law, annotate notes, and refine arguments is not thinking less. They are thinking differently—and often more effectively.

The same will eventually be true of AI.

The goal is not to create lawyers who avoid technology or who think less by using AI. It is to create lawyers who use it wisely. ⚖️

What Law Schools Should Be Teaching Instead

If I were designing a first-year curriculum today, I would include:

THE MODERN LAWYER NEEDS TO KNOW HOW TO BALANCE JUDGMENT WITH AI USE IN THEIR WORK!

  • A temporary restriction on AI-generated work

  • Mandatory instruction on how AI tools function

  • Exercises in verifying AI outputs against primary sources

  • Training on ethical risks, including hallucinations and confidentiality

  • Continued use of laptops as standard tools

This approach respects both sides of the equation: foundational thinking and technological competence.

Final Thought: Do Not Solve the Wrong Problem

Law schools are right to be concerned. AI is reshaping the profession at a rapid pace.

But banning laptops is not a solution. It is a signal of discomfort.

The better path is harder. It requires nuance. It requires experimentation. It requires trust in students, guided by structure.

Most importantly, it requires recognizing that the future lawyer will not choose between thinking and technology.

They will need both.

And law school is exactly where they should learn how to do that. 🚀

🎙️ Ep. 139, From MyCase to Claude: Building a Secure, AI-Ready Tech Stack for Solo and Small Law Firms.

My next guests are Gabriela “Gabby” Cubeiro, Senior Vice President of Product at 8am — the powerhouse behind MyCase, LawPay, CASEpeer, and DocketWise — and Majo Castro, founder and managing attorney at CastroMand Legal in Austin, Texas. 🌟 Gabby is a 16-year legal tech veteran who co-founded CASEpeer and now drives product strategy across one of the most widely adopted law practice management platforms in the country. Majo is a Venezuelan-born cybersecurity and AI attorney whose solo firm helps growing companies navigate AI implementation, data management, and cybersecurity — and she writes about all of it on her Substack, The Cyber Law Gal. 🛡️ This is a no-fluff, peer-to-peer conversation about the exact workflows that separate a modern LPM from a liability, why the Data Processing Agreement is the most important acronym in your practice right now, and what your employees are almost certainly already doing with AI — whether you've approved it or not.

Join Gabriela “Gabby” Cubeiro, Majo Castro, and me as we discuss the following three questions and more!

  1. What are the top three integrations or workflows a solo, small, or midsize firm should expect from a modern cloud-based LPM platform like 8am — and what's missing that signals a real red flag around efficiency, cash flow, or security?

  2. As AI gets baked into cloud LPM tools like 8am, what are the top three day-to-day tasks that will change most for solo and small firm lawyers — and what basic security or ethical guardrails should they put in place to use those AI features without putting client data at risk?

  3. For solo and small firms without a CISO or CTO, what are the top three cybersecurity mistakes you see over and over again?

In our conversation, we cover the following:

  • [00:00:00] 🪝 Show Hook — Gabby's critical warning: if your firm hasn't "adopted" AI, your employees probably already have — on free consumer tools

  • [00:00:00] Title read — Episode 139

  • [00:01:00] Host intro: why this conversation goes tactical on AI, security, and LPM workflows

  • [00:02:00] Guest introductions — Gabriela “Gabby” Cubeiro (8am/MyCase) and Majo Castro (CastroMand Legal / The Cyber Law Gal)

  • [00:03:00] Majo celebrates 1.5 years as a solo practitioner 🎉

  • [00:03:00] Ad: Five-star review request for The Tech-Savvy Lawyer.Page

  • [00:03:30] Tech setups — Gabby's MacBook Air (M4 chip), iPhone Max, Slack, Zoom, Google Drive, Claude Enterprise

  • [00:06:00] Gabby's portable USB-C external monitor for travel (Amazon, highest-rated)

  • [00:09:00] Majo's MacBook Pro 14" M4 (16GB RAM), performance issues, upgrade path discussion

  • [00:10:00] Michael recommends Onyx (free Mac maintenance utility); Michael's Mac Studio M3 Ultra with 256GB

  • [00:11:00] Mac Mini and Mac Studio as desktop alternatives; MacRumors Buyer's Guide tip

  • [00:13:00] Apple Business Account benefits — small discounts + white-glove service

  • [00:15:00] Majo's full setup: iPhone 16 Pro Max, Google Workspace + Gemini (team account with DPA), DJI Osmo Pocket 3, Hollyland wireless mic

  • [00:16:00] Q1: Top three LPM workflows — intake, secure client communication (client portal), and getting paid (trust accounting + automated invoicing)

  • [00:19:00] Majo on switching from QuickBooks to MyCase after discovering QuickBooks mishandles trust accounting

  • [00:20:00] 🎉 Gabby announces: AI case summary features are now LIVE in 8am/MyCase

  • [00:21:00] Cloud vs. local access debate — SaaS uptime, SLAs, and asking vendors for proof

  • [00:23:00] Michael's redundant backup strategy: Backblaze + Dropbox + local Mac Mini

  • [00:25:00] Cautionary tale: ransomware attack converts a server-based firm to the cloud overnight

  • [00:28:00] Majo's Google Drive third-party backup with 2-hour recovery window

  • [00:29:00] Q2: How AI changes daily workflows — drafting, case summaries, surfacing critical info fast

  • [00:30:00] Why reading vendor Terms of Service and activating Data Processing Agreements (DPAs) is non-negotiable

  • [00:31:00] 8am's SOC 2 Type 2 compliance; updated AI terms and opt-in controls coming

  • [00:32:00] SOC 2, HIPAA, end-to-end encryption as baseline vendor security requirements

  • [00:34:00] AI as the great equalizer — leveling the playing field for solo firms vs. BigLaw

  • [00:35:00] Majo's real data: ~12 hours saved last month across 27 consultations using Gemini for proposals

  • [00:36:00] Plaud and Pocket AI recording devices — data retention, PII, and DPA concerns

  • [00:37:00] Majo's stance on wearable AI recorders; Apple Watch comparison; one-party vs. two-party consent

  • [00:39:00] Plaud's terms say no AI training — but it's not a DPA; terms can change without notice 🚨

  • [00:40:00] Google Workspace DPA must be manually activated — most users don't know; creating user friction around protection

  • [00:41:00] Q3: Top cybersecurity mistakes — shadow AI, no MFA, undertrained employees

  • [00:42:00] Majo's checklist: DPA + no model training on client data + enterprise/team-tier subscriptions + MFA

  • [00:43:00] Gabby: employees are the #1 security risk; fractional IT and CISO options for small firms

  • [00:44:00] AI-powered phishing attacks on law firms will only intensify

  • [00:45:00] Majo's training method: positive AI policies + 45-second staff video explainers 🎬

  • [00:46:00] 🚨 Gabby's shadow AI reminder (Show Hook callback): audit your tech stack — your team already has

  • [00:47:00] Episode originally recorded at ABA Techshow; re-recorded after a technical snafu 😅

  • [00:47:00] Where to find Gabby: LinkedIn, X, 8am.com, Kaleidoscope conference (September — banner at 8am.com)

  • [00:48:00] Where to find Majo: LinkedIn (Majo Castro), CastroMand Legal, Substack: The Cyber Law Gal

  • [00:48:30] Outro — michaeldj@thetechsavvylawyer.page | next episode in ~two weeks

RESOURCES

Connect with Gabriela “Gabby” Cubeiro

Connect with Majo Castro

Mentioned in the Episode

Hardware Mentioned

MTC🪙🪙:  When Reputable Databases Fail: What Lawyers Must Do After AI Hallucinations Reach the Court

What should a lawyer do when they inadvertENTLY USE A HALLUCINATED CITE?

In a sobering December 2025 filing in Integrity Investment Fund, LLC v. Raoul, plaintiff's counsel disclosed what many in the legal profession feared: even reputable legal research platforms can generate hallucinated citations. The Motion to Amend Complaint revealed that "one of the cited cases in the pending Amended Complaint could not be found," along with other miscited cases, despite the legal team using LexisNexis and LEXIS+ Document Analysis tools rather than general-purpose AI like ChatGPT. The attorney expressed being "horrified" by these inexcusable errors, but horror alone does not satisfy ethical obligations.

This case crystallizes a critical truth for the legal profession: artificial intelligence remains a tool requiring rigorous human oversight, not a substitute for attorney judgment. When technology fails—and Stanford research confirms it fails at alarming rates—lawyers must understand their ethical duties and remedial obligations.

The Scope of the Problem: Even Premium Tools Hallucinate

Legal AI vendors marketed their products as hallucination-resistant, leveraging retrieval-augmented generation (RAG) technology to ground responses in authoritative legal databases. Yet as reported in our 📖 WORD OF THE WEEK YEAR🥳:  Verification: The 2025 Word of the Year for Legal Technology ⚖️💻, independent testing by Stanford's Human-Centered Artificial Intelligence program and RegLab reveals persistent accuracy problems. Lexis+ AI produced incorrect information 17% of the time, while Westlaw's AI-Assisted Research hallucinated at nearly double that rate—34% of queries.

These statistics expose a dangerous misconception: that specialized legal research platforms eliminate fabrication risks. The Integrity Investment Fund case demonstrates that attorneys using established, subscription-based legal databases still face citation failures. Courts nationwide have documented hundreds of cases involving AI-generated hallucinations, with 324 incidents in U.S. federal, state, and tribal courts as of late 2025. Legal professionals can no longer claim ignorance about AI limitations.

The consequences extend beyond individual attorneys. As one federal court warned, hallucinated citations that infiltrate judicial opinions create precedential contamination, potentially "sway[ing] an actual dispute between actual parties"—an outcome the court described as "scary". Each incident erodes public confidence in the justice system and, as one commentator noted, "sets back the adoption of AI in law".

The Ethical Framework: Three Foundational Rules

When attorneys discover AI-generated errors in court filings, three Model Rules of Professional Conduct establish clear obligations.

ABA Model Rule 1.1 mandates technological competence. The 2012 amendment to Comment 8 requires lawyers to "keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology". Forty-one jurisdictions have adopted this technology competence requirement. This duty is ongoing and non-delegable. Attorneys cannot outsource their responsibility to understand the tools they deploy, even when those tools carry premium price tags and prestigious brand names.

Technological competence means understanding that current AI legal research tools hallucinate at rates ranging from 17% to 34%. It means recognizing that longer AI-generated responses contain more falsifiable propositions and therefore pose a greater risk of hallucination. It means implementing verification protocols rather than accepting AI output as authoritative.

ABA Model Rule 3.3 requires candor toward the tribunal. This rule prohibits knowingly making false statements of law or fact to a court and imposes an affirmative duty to correct false statements previously made. The duty continues until the conclusion of the proceeding. Critically, courts have held that the standard under Federal Rule of Civil Procedure 11 is objective reasonableness, not subjective good faith. As one court stated, "An attorney who acts with 'an empty head and a pure heart' is nonetheless responsible for the consequences of his actions".

When counsel in Integrity Investment Fund discovered the miscitations, filing a Motion to Amend Complaint fulfilled this corrective duty. The attorney took responsibility and sought to rectify the record before the court relied on fabricated authority. This represents the ethical minimum. Waiting for opposing counsel or the court to discover errors invites sanctions and disciplinary referrals.

The duty of candor applies regardless of how the error originated. In Kaur v. Desso, a Northern District of New York court rejected an attorney's argument that time pressure justified inadequate verification, stating that "the need to check whether the assertions and quotations generated were accurate trumps all". Professional obligations do not yield to convenience or deadline stress.

ABA Model Rules 5.1 and 5.3 establish supervisory responsibilities. Managing attorneys must ensure that subordinate lawyers and non-lawyer staff comply with the Rules of Professional Conduct. When a supervising attorney has knowledge of specific misconduct and ratifies it, the supervisor bears responsibility. This principle extends to AI-assisted work product.

The Integrity Investment Fund matter reportedly involved an experienced attorney assisting with drafting. Regardless of delegation, the signing attorney retains ultimate accountability. Law firms must implement training programs on AI limitations, establish mandatory review protocols for AI-generated research, and create policies governing which tools may be used and under what circumstances. Partners reviewing junior associate work must apply heightened scrutiny to AI-assisted documents, treating them as first drafts requiring comprehensive validation.

Federal Rule of Civil Procedure 11: The Litigation Hammer

Reputable databases can hallucinate too!

Beyond professional responsibility rules, Federal Rule of Civil Procedure 11 authorizes courts to impose sanctions on attorneys who submit documents without a reasonable inquiry into the facts and law. Courts may sanction the attorney, the party, or both. Sanctions range from monetary penalties paid to the court or opposing party to non-monetary directives, including mandatory continuing legal education, public reprimands, and referrals to disciplinary authorities.

Rule 11 contains a 21-day safe harbor provision. Before filing a sanctions motion, the moving party must serve the motion on opposing counsel, who has 21 days to withdraw or correct the challenged filing. If counsel promptly corrects the error during this window, sanctions may be avoided. This procedural protection rewards attorneys who implement monitoring systems to catch mistakes early.

Courts have imposed escalating consequences as AI hallucination cases proliferate. Early cases resulted in warnings or modest fines. Recent sanctions have grown more severe. A Colorado attorney received a 90-day suspension after admitting in text messages that he failed to verify ChatGPT-generated citations. An Arizona federal judge sanctioned an attorney and required her to personally notify three federal judges whose names appeared on fabricated opinions, revoked her pro hac vice admission, and referred her to the Washington State Bar Association. A California appellate court issued a historic fine after discovering 21 of 23 quotes in an opening brief were fake.

Morgan & Morgan—the 42nd largest law firm by headcount—faced a $5,000 sanction when attorneys filed a motion citing eight nonexistent cases generated by an internal AI platform. The court divided the sanction among three attorneys, with the signing attorney bearing the largest portion. The firm's response acknowledged "great embarrassment" and promised reforms, but the reputational damage extends beyond the individual case.

What Attorneys Must Do: A Seven-Step Protocol

Legal professionals who discover AI-generated errors in filed documents must act decisively. The following protocol aligns with ethical requirements and minimizes sanctions risk:

First, immediately cease relying on the affected research. Do not file additional briefs or make oral arguments based on potentially fabricated citations. If a hearing is imminent, notify the court that you are withdrawing specific legal arguments pending verification.

Second, conduct a comprehensive audit. Review every citation in the affected filing. Retrieve and read the full text of each case or statute cited. Verify that quoted language appears in the source and that the legal propositions match the authority's actual holding. Check citation accuracy using Shepard's or KeyCite to confirm cases remain good law. This process cannot be delegated to the AI tool that generated the original errors.

Third, assess the materiality of errors. Determine whether fabricated citations formed the basis for legal arguments or appeared as secondary support. In Integrity Investment Fund, counsel noted that "the main precedents...and the...statutory citations are correct, and none of the Plaintiffs' claims were based on the mis-cited cases". This distinction affects the appropriate remedy but does not eliminate the obligation to correct the record.

Fourth, notify opposing counsel immediately. Candor extends to adversaries. Explain that you have discovered citation errors and are taking corrective action. This transparency may forestall sanctions motions and demonstrates good faith to the court.

Fifth, file a corrective pleading or motion. In Integrity Investment Fund, counsel filed a Motion to Amend Complaint under Federal Rule of Civil Procedure 15(a)(2). Alternative vehicles include motions to correct the record, errata sheets, or supplemental briefs. The filing should acknowledge the errors explicitly, explain how they occurred without shifting blame to technology, take personal responsibility, and specify the corrections being made.

Sixth, notify the court in writing. Even if opposing counsel does not move for sanctions, attorneys have an independent duty to inform the tribunal of material misstatements. The notification should be factual and direct. In cases where fabricated citations attributed opinions to real judges, courts have required attorneys to send personal letters to those judges clarifying that the citations were fictitious.

Seventh, implement systemic reforms. Review firm-wide AI usage policies. Provide training on verification requirements. Establish mandatory review checkpoints for AI-assisted work product. Consider technology solutions such as citation validation software that flags cases not found in authoritative databases. Document these reforms in any correspondence with the court or bar authorities to demonstrate that the incident prompted institutional change.

The Duty to Supervise: Training the Humans and the Machines

The Integrity Investment Fund case involved an experienced attorney assisting with drafting, yet errors reached the court. This pattern appears throughout AI hallucination cases. In the Chicago Housing Authority litigation, the responsible attorney had previously published an article on ethical considerations of AI in legal practice, yet still submitted a brief citing the nonexistent case Mack v. Anderson. Knowledge about AI risks does not automatically translate into effective verification practices.

Law firms must treat AI tools as they would junior associates—competent at discrete tasks but requiring supervision. Partners should review AI-generated research as they would first-year associate work, assuming errors exist and exercising vigilant attention to detail. Unlike human associates who learn from corrections, AI systems may perpetuate errors across multiple matters until their underlying models are retrained.

Training programs should address specific hallucination patterns. AI tools frequently fabricate case citations with realistic-sounding names, accurate-appearing citation formats, and plausible procedural histories. They misrepresent legal holdings, confuse arguments made by litigants with court rulings, and fail to respect the hierarchy of legal authority. They cite proposed legislation as enacted law and rely on overturned precedents as current authority. Attorneys must learn to identify these red flags.

Supervisory duties extend to non-lawyer staff. If a paralegal uses an AI grammar checker on a document containing confidential case strategy, the supervising attorney bears responsibility for any confidentiality breach. When legal assistants use AI research tools, attorneys must verify their work with the same rigor applied to traditional research methods.

Client Communication and Informed Consent

watch out for ai hallucinations!

Ethical obligations to clients intersect with AI usage in multiple ways. ABA Model Rule 1.4 requires attorneys to keep clients reasonably informed and to explain matters to the extent necessary for clients to make informed decisions. Several state bar opinions suggest that attorneys should obtain informed consent before inputting confidential client information into AI tools, particularly those that use data for model training.

The confidentiality analysis turns on the AI tool's data-handling practices. Many general-purpose AI platforms explicitly state in their terms of service that they use input data for model training and improvement. This creates significant privilege and confidentiality risks. Even legal-specific platforms may share data with third-party vendors or retain information on servers outside the firm's control. Attorneys must review vendor agreements, understand data flow, and ensure adequate safeguards exist before using AI tools on client matters.

When AI-generated errors reach a court filing, clients deserve prompt notification. The errors may affect litigation strategy, settlement calculations, or case outcome predictions. In extreme cases, such as when a court dismisses claims or imposes sanctions, malpractice liability may arise. Transparent communication preserves the attorney-client relationship and demonstrates that the lawyer prioritizes the client's interests over protecting their reputation.

Jurisdictional Variations: Illinois Sets the Standard

While the ABA Model Rules provide a national framework, individual jurisdictions have begun addressing AI-specific issues. Illinois, where the Integrity Investment Fund case was filed, has taken proactive steps.

The Illinois Supreme Court adopted a Policy on Artificial Intelligence effective January 1, 2025. The policy recognizes that AI presents challenges for protecting private information, avoiding bias and misrepresentation, and maintaining judicial integrity. The court emphasized "upholding the highest ethical standards in the administration of justice" as a primary concern.

In September 2025, Judge Sarah D. Smith of Madison County Circuit Court issued a Standing Order on Use of Artificial Intelligence in Civil Cases, later extended to other Madison County courtrooms. The order "embraces the advancement of AI" while mandating that tools "remain consistent with professional responsibilities, ethical standards and procedural rules". Key provisions include requirements for human oversight and legal judgment, verification of all AI-generated citations and legal statements, disclosure of expert reliance on AI to formulate opinions, and potential sanctions for submissions including "case law hallucinations, [inappropriate] statements of law, or ghost citations".

Arizona has been particularly active given the high number of AI hallucination cases in the state—second only to the Southern District of Florida. The State Bar of Arizona issued guidance calling on lawyers to verify all AI-generated research before submitting it to courts or clients. The Arizona Supreme Court's Steering Committee on AI and the Courts issued similar guidance emphasizing that judges and attorneys, not AI tools, are responsible for their work product.

Other states are following suit. California issued Formal Opinion 2015-93 interpreting technological competence requirements. The District of Columbia Bar issued Ethics Opinion 388 in April 2024, specifically addressing generative artificial intelligence in client matters. These opinions converge on several principles: competence includes understanding AI technology sufficiently to be confident it advances client interests, all AI output requires verification before use, and technology assistance does not diminish attorney accountability.

The Path Forward: Responsible AI Integration

The legal profession stands at a crossroads. AI tools offer genuine efficiency gains—automated document review, pattern recognition in discovery, preliminary legal research, and jurisdictional surveys. Rejecting AI entirely would place practitioners at a competitive disadvantage and potentially violate the duty to provide competent, efficient representation.

Yet uncritical adoption invites the disasters documented in hundreds of cases nationwide. The middle path provided by the Illinois courts requires human oversight and legal judgment at every stage.

Attorneys should adopt a "trust but verify" approach. Use AI for initial research, document drafting, and analytical tasks, but implement mandatory verification protocols before any work product leaves the firm. Treat AI-generated citations as provisional until independently confirmed. Read cases rather than relying on AI summaries. Check the currency of legal authorities. Confirm that quotations appear in the cited sources.

Law firms should establish tiered AI usage policies. Low-risk applications such as document organization or calendar management may require minimal oversight. High-risk applications, including legal research, brief writing, and client advice, demand multiple layers of human review. Some uses—such as inputting highly confidential information into general-purpose AI platforms—should be prohibited entirely.

Billing practices must evolve. If AI reduces the time required for legal research from eight hours to two hours, the efficiency gain should benefit clients through lower fees rather than inflating attorney profits. Clients should not pay both for AI tool subscriptions and for the same number of billable hours as traditional research methods would require. Transparent billing practices build client trust and align with fiduciary obligations.

Lessons from Integrity Investment Fund

The Integrity Investment Fund case offers several instructive elements. First, the attorney used a reputable legal database rather than a general-purpose AI. This demonstrates that brand name and subscription fees do not guarantee accuracy. Second, the attorney discovered the errors and voluntarily sought to amend the complaint rather than waiting for opposing counsel or the court to raise the issue. This proactive approach likely mitigated potential sanctions. Third, the attorney took personal responsibility, describing himself as "horrified" rather than deflecting blame to the technology.

The court's response also merits attention. Rather than immediately imposing sanctions, the court directed defendants to respond to the motion to amend and address the effect on pending motions to dismiss. This measured approach recognizes that not all AI-related errors warrant the most severe consequences, particularly when counsel acts promptly to correct the record. Defendants agreed that "the striking of all miscited and non-existent cases [is] proper", suggesting that cooperation and candor can lead to reasonable resolutions.

The fact that "the main precedents...and the...statutory citations are correct" and "none of the Plaintiffs' claims were based on the mis-cited cases" likely influenced the court's analysis. This underscores the importance of distinguishing between errors in supporting citations versus errors in primary authorities. Both require correction, but the latter carries greater risk of case-dispositive consequences and sanctions.

The Broader Imperative: Preserving Professional Judgment

Lawyers must verify their AI work!

Judge Castel's observation in Mata v. Avianca that "many harms flow from the submission of fake opinions" captures the stakes. Beyond individual case outcomes, AI hallucinations threaten systemic values: judicial efficiency, precedential reliability, adversarial fairness, and public confidence in legal institutions.

Attorneys serve as officers of the court with special obligations to the administration of justice. This role cannot be automated. AI lacks the judgment to balance competing legal principles, to assess the credibility of factual assertions, to understand client objectives in their full context, or to exercise discretion in ways that advance both client interests and systemic values.

The attorney in Integrity Investment Fund learned a costly lesson that the profession must collectively absorb: reputable databases, sophisticated algorithms, and expensive subscriptions do not eliminate the need for human verification. AI remains a tool—powerful, useful, and increasingly indispensable—but still just a tool. The attorney who signs a pleading, who argues before a court, and who advises a client bears professional responsibility that technology cannot assume.

As AI capabilities expand and integration deepens, the temptation to trust automated output will intensify. The profession must resist that temptation. Every citation requires verification. Every legal proposition demands confirmation. Every AI-generated document needs human review. These are not burdensome obstacles to efficiency but essential guardrails protecting clients, courts, and the justice system itself.

When errors occur—and the statistics confirm they will occur with disturbing frequency—attorneys must act immediately to correct the record, accept responsibility, and implement reforms preventing recurrence. Horror at one's mistakes, while understandable, satisfies no ethical obligation. Action does.

MTC

🎙️🎁 TSL Labs Bonus: The Ultimate 2025 Tech Gift Guide for Attorneys — Expert-Curated Gadgets, AI Tools, and Must-Have Devices Every Lawyer Needs!

🎯 In this TSL Labs Bonus episode, we are experimenting with Google’s Notebook LLM to do a “Deep Dive” on our November 24th editorial on the ultimate 2025 tech gift guide for attorneys. We use this AI-powered conversation to unpack the key themes, ethical challenges, and actionable recommendations. Whether you're a solo practitioner, big law associate, or tech-curious partner, this episode delivers expert-curated insights on gadgets, AI tools, and must-have devices that support technological competence as a professional obligation.

If you're a busy legal professional seeking practical tech recommendations that enhance daily practice rather than collect digital dust, join us for this insightful conversation that explores how the right technology investments can improve your practice, safeguard your clients, and help prevent unnecessary bar complaints.

🤔 Join Google AI Deep Dive as they discuss the following three questions and more!

  1. What are the essential low-cost tech gifts under $25 that can make an immediate impact on an attorney's practice, and why do items like cables and tracking devices matter for professional competence?

  2. Which professional-grade tools under $100 deliver the best value for attorneys seeking to fulfill their ethical duty to work smarter and faster through AI integration and productivity enhancements?

  3. Why should premium technology investments over $100—including physical infrastructure like ergonomic chairs—be considered essential to an attorney's professional obligation to their clients?

In our conversation, we cover the following:

[00:00:00] — Episode introduction and TSL Labs Bonus overview

[00:01:00] — Navigating the perfect tech gift for attorneys: unique needs like security, portability, focus, and raw power

[00:02:00] — The three seismic forces driving tech choices: AI integration, cloud-based practice management, and heightened ethical duties

[00:03:00] — Target audience: solo practitioners, big law associates, and tech-curious partners who need technology that lasts

[00:04:00] — Essential low-cost gifts under $25: OWC Thunderbolt 4 USB-C cable and Apple AirTag for security and reliability

[00:05:00] — Productivity essentials: Logitech Pebble M350 silent mouse and Anker 7-in-1 USB-C Hub for presentations

[00:06:00] — AI tools for "forced competence": ChatGPT Plus one-month subscription as a low-risk nudge toward AI exploration

[00:07:00] — Professional grade tools under $100: Apple Pencil (1st Gen) for document annotation and Logitech MX Keys Mini keyboard

[00:08:00] — Focus and noise cancellation: Soundcore Space One headphones with 40+ hours battery life

[00:09:00] — Precision document navigation: Logitech MX Master 3S mouse with horizontal scrolling for wide documents

[00:10:00] — Premium mobile computing sweet spots: iPad Air with M3 chip ($599) and MacBook Air M4 ($999)

[00:11:00] — Physical infrastructure as health technology: Herman Miller Aeron chair ($1,351) for sustained high-quality work

[00:12:00] — Ultra-wide monitor benefits: LG 34" 5K 2K ($315) for seamless document comparison and reduced cognitive strain

[00:13:00] — Virtual practice essentials: Logitech Brio 4K webcam ($160) and Samsung T7 SSD ($109) for secure data management

[00:14:00] — The ultimate organizational hub: CalDigit TS3 Plus dock ($280) with 15 ports for cable clutter elimination

[00:15:00] — Strategic gift-giving advice: Understanding ecosystem (Apple, Windows, Android) and workflow considerations

📚 Resources

🖥️ Hardware Mentioned in the Conversation

Under $25:

  • OWC Thunderbolt 4 USB-C Cable (~$19.99) — Universal cable supporting 40Gb/s data, 100W power delivery, up to 8K video —(https://www.owc.com)

  • Apple AirTag (Single Pack) ($24) — Bluetooth tracking device using Find My network —(https://www.apple.com/airtag)

  • Logitech Pebble M350 Wireless Mouse (~$19.99) — Silent click, 90% noise reduction, 18-month battery — (https://www.logitech.com)

  • Anker 341 USB-C Hub (7-in-1) (~$19.99) — HDMI 4K@30Hz, USB ports, SD card slots — https://www.anker.com)

  • ORICLE 65W USB Travel Power Strip — Flat plug, 4-foot cord, 7-in-1 hub for travel —(https://oricotechs.com)

Under $100:

Premium Over $100:

  • iPad Air with M3 Chip (Starting at $599) — 8-core CPU, 9-core GPU, ideal balance of power and portability — (https://www.apple.com/ipad-air)

  • MacBook Air M4 (Starting at $999) — 10-core CPU, 10-core GPU, up to 18 hours battery life —(https://www.apple.com/macbook-air)

  • Herman Miller Aeron Chair (~$1,351) — Ergonomic office chair with PostureFit SL, three sizes for 1st-99th percentile —(https://www.hermanmiller.com)

  • LG 34" Ultrawide 5K 2K Monitor (~$315) — 3440x1440 resolution, curved display for seamless multitasking — (https://www.lg.com/us/monitors)

  • Logitech Brio 4K Ultra HD Webcam (~$160) — 4K@30fps, RightLight 3 HDR, adjustable 65°/78°/90° FOV — (https://www.logitech.com)

  • Samsung T7 Portable SSD (1TB) (~$109.99) — 1,050MB/s read speed, AES 256-bit encryption, 2m drop resistant — (https://www.samsung.com)

  • CalDigit TS3 Plus Thunderbolt 3 Dock (~$280) — 15 ports, 87W laptop charging, dual 4K display support — (https://www.caldigit.com)

💻 Software & Cloud Services Mentioned in the Conversation

  • ChatGPT Plus ($20/month) — OpenAI's premium AI assistant with GPT-4 access for research and drafting — (https://chat.openai.com)

  • Grammarly Premium (~$96/year on sale; $144/year regular) — AI-powered writing assistant with plagiarism detection —(https://www.grammarly.com)

  • Apple Find My — Location tracking app for AirTags and Apple devices — https://www.icloud.com/find

📌 Disclaimer: Prices mentioned throughout this episode and show notes are approximate and based on manufacturer suggested retail prices around the time of the publication date; actual pricing may vary depending on manufacturer availability, retailer promotions, seasonal sales, and geographic location, and we recommend verifying current pricing before making any purchase decisions.

🚨 BOLO: Samsung Budget Phones Contain Pre-Installed Data-Harvesting Software: Critical Action Steps for Legal Professionals

‼️ ALERT: Hidden Spyware in Samsung Phones!

Samsung Galaxy A, M, and F series smartphones contain pre-installed software called AppCloud, developed by ironSource (now owned by Unity Technologies), that harvests user data, including location information, app usage patterns, IP addresses, and potentially biometric data. This software cannot be fully uninstalled without voiding your device warranty, and it operates without accessible privacy policies or explicit consent mechanisms. Legal professionals using these devices face significant risks to attorney-client privilege and confidential client information.

The Threat Landscape

AppCloud runs quietly in the background with permissions to access network connections, download files without notification, and prevent phones from sleeping. The application is deeply integrated into Samsung's One UI operating system, making it impossible to fully remove through standard methods. Users across West Asia, North Africa, Europe, and South Asia report that even after disabling the application, it reappears following system updates.

The digital rights organization SMEX documented that AppCloud's privacy policy is not accessible online, and the application does not present users with consent screens or terms of service disclosures. This lack of transparency raises serious ethical and legal compliance concerns, particularly for attorneys bound by professional responsibility rules regarding client confidentiality.

Legal and Ethical Implications for Attorneys

Under ABA Model Rule 1.6, attorneys must make "reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client". The duty of technological competence under Rule 1.1, Comment 8, requires attorneys to "keep abreast of changes in the law and its practice, including the benefits and risks associated with relevant technology".

The New York Bar's 2022 ethics opinion specifically addresses smartphone security, prohibiting attorneys from sharing contact information with smartphone applications unless they can confirm that no person will view confidential client information and that data will not be transferred to third parties without client consent. AppCloud's data harvesting practices appear to violate both conditions.

Immediate Action Steps

‼️ Act now if you’ve purchased certain samsung phones - your bar license could be in jeopardy!

Step 1: Identify Affected Devices
Check whether you use a Samsung Galaxy A series (A05 through A56), M series (M01 through M56), or F series device. These budget and mid-range models are primary targets for AppCloud installation.

Step 2: Disable AppCloud
Navigate to Settings > Apps > Show System Apps > AppCloud > Disable. Additionally, revoke notification permissions, restrict background data usage, and disable the "Install unknown apps" permission.

Step 3: Monitor for Reactivation
After system updates, return to AppCloud settings and re-disable the application.

Step 4: Consider Device Migration
For attorneys handling highly sensitive matters, consider transitioning to devices without pre-installed data collection software. Document your decision-making process as evidence of reasonable security measures.

Step 5: Client Notification Assessment
Evaluate whether client notification is required under your jurisdiction's professional responsibility rules. California's Formal Opinion 2020-203 addresses obligations following an electronic data compromise.

The Bottom Line

Budget smartphone economics should not compromise attorney-client privilege. Samsung's partnership with ironSource places aggressive advertising technology on devices used by legal professionals worldwide. Until Samsung provides transparent opt-out mechanisms or removes AppCloud entirely, attorneys using affected devices should implement immediate mitigation measures and document their security protocols.

🚨‼️ Emergency BOLO! 🚨‼️ Lawyers on the Go: Essential Tech Strategies for Air Travel During the Government Shutdown ✈️

Be the lawyer savant while dealing with air travel hassle!

The ongoing government shutdown has created unprecedented challenges for air travelers. With over 1,500 flights canceled daily, furloughed FAA and TSA workers, and a mandated 10% reduction in operations at 40 major airports by Friday, lawyers who travel for depositions, court appearances, and client meetings face serious disruptions. The right technology can transform these chaotic conditions from career obstacles into manageable inconveniences.

Track Flights Like Your Case Depends on It

Real-time flight intelligence separates prepared lawyers from stranded ones. Services like FlightAware and Flightradar24 provide push notifications for gate changes, delays, and cancellations before airport displays update. These apps offer predictive reports using historical data, allowing you to rebook proactively rather than reactively. During this shutdown, airlines are canceling flights with minimal notice—sometimes just hours before departure. Set up alerts for your flight and at least two backup options on different carriers.

Mobile Hotspots: Your Smart Device Connection Strategy

Public airport Wi-Fi poses serious ethical risks for lawyers handling confidential client data. (See TSL Blog Post - Malpractice Alert! If you are using a mobile device for your work and not using a VPN, you are exposing yourself to trouble.) Rather than depending solely on hotel and airport networks, transform your smart device—iPhone, iPad, or Android device—into a secure mobile hotspot. Most cellular carriers offer hotspot functionality built directly into your device settings, providing cellular encryption significantly stronger than public Wi-Fi networks. This approach eliminates the need for separate hardware while leveraging existing data plans.

Consider the power of dual carrier coverage by maintaining active plans with two different carriers—for example, AT&T and Verizon. If one network experiences outages or if you have a poor signal during the shutdown's staffing crisis, your second carrier ensures continuous connectivity. iPhones support Dual SIM through eSIM technology, allowing simultaneous carrier activation on a single device. Tablets with cellular capabilities similarly support multiple carriers, offering redundancy that protects against carrier-specific network failures during this period of infrastructure stress.

VPN Protection is Non-Negotiable

When you must access public networks, Virtual Private Networks (See TSL Blog Post - 📰 How to Ensure a Public Wi-Fi Network Is Legitimate (and Why Legal Professionals Must Always Use a VPN)!) encrypt your connection and mask your IP address. VPNs prevent hackers from intercepting privileged communications—a critical safeguard when working from airport lounges during extended delays. Configure your VPN to connect automatically at startup. Every device accessing firm networks or client files requires VPN protection, particularly when traveling internationally where surveillance risks increase. Enable VPN across all your devices simultaneously—iPhone, iPad, and laptop—ensuring consistent protection regardless of which device you're using.

Airport Lounge Access: Productivity Sanctuaries

Extended delays during the shutdown make lounge access invaluable. Priority Pass provides membership to over 1,300 lounges with quiet workspaces, reliable Wi-Fi, and complimentary amenities. For occasional travelers, many pay-per-use platforms offer access without annual fees. Many mid-tier travel credit cards include Priority Pass memberships with several free annual visits.

Power Banks: Anker Delivers Portable Professional Power

A tsa approved backup battery can be a career saver!!!

TSA permits power banks up to 100Wh (approximately 27,000mAh) in carry-on luggage. Anker Prime Power Bank* (26K, 300W) offers exceptional capacity at 26,250mAh, providing powerful performance for simultaneous device charging while meeting TSA requirements. The smart display provides real-time insights into charging speed and battery levels, with dual USB-C ports delivering 140W maximum output per port. This enables charging a MacBook Pro while simultaneously powering an iPhone and iPad—essential during multi-hour delays where multiple devices require constant connectivity.

For lighter travel, the Anker 747 Power Bank (PowerCore 26K) delivers 25,600mAh capacity with 87W rapid charging in a more compact profile. Budget-conscious travelers find the Anker MagGo* series offers excellent value as the best travel-specific Anker option. All Anker models feature multiple charging ports, allowing lawyers to charge phones, tablets, and laptops simultaneously—critical when airport charging stations become competition zones during this crisis.

Note:  If you are going to plug into an available outlet, don’t forget to use a serge protector. A sudden change in current could wipe out your device and leave you in a pickle.

Document Scanning: Adobe Technology on Your Apple Devices

Adobe Document Cloud transforms smartphones and tablets into powerful document management systems. The Adobe Scan app on iPhone and iPad uses optical character recognition to convert printed documents into searchable, editable PDFs. The app automatically detects document edges, straightens images, and enhances text clarity—perfect for scanning contracts, pleadings, or client intake forms from any location.

Adobe Acrobat Reader on iPhone, iPad, and Mac provides seamless document access across your entire Apple ecosystem. Documents opened on your MacBook sync instantly to your iPad or iPhone, allowing you to continue working on depositions notes from your phone during airport delays. The integrated fill-and-sign functionality enables you to execute agreements while in transit, with e-signatures recognized across all Adobe Document Cloud platforms. Importantly, Adobe products maintain cloud synchronization—if you lose cellular connection, previously downloaded documents remain accessible, ensuring you can work offline during flights or in coverage dead zones.youtube 

Practice Management: Download Before You Depart

Cloud-based platforms like Clio enable remote access to case files, time tracking, and client communications from any device. The critical step traveling lawyers often overlook: download all necessary files to your device BEFORE leaving the office. Modern practice management apps allow offline access to downloaded content, ensuring you maintain full productivity even if cellular or Wi-Fi connectivity fails. Flight time, extended airport delays, and coverage-restricted locations won't interrupt your work if essential files are already stored locally. Enable offline mode in your practice management app before traveling, treating it as a mandatory pre-departure checklist item alongside your boarding pass.

Noise-Cancelling Headphones for Focus

Sony WH-1000XM5 and Bose QuietComfort Ultra headphones provide 30-40 hour battery life and industry-leading active noise cancellation. I personally am a fan of Apple AirPods Max* (for flights) and Apple AirPods* (for on the go). These tools enable concentration during flights and allow productive conference calls from crowded gate areas. Budget options like Soundcore Life Q30 deliver comparable performance at reduced cost.

The Apple Ecosystem Advantage for Traveling Lawyers

Seamless integration across iPhone, iPad, and MacBook enables efficiency that standalone devices cannot match. Lawyers leveraging the Apple ecosystem can start a document review on their MacBook, switch to an iPad for annotation during client meetings, and finalize on an iPhone while traveling between appointments. This continuity proves invaluable during travel disruptions when flexibility matters most. Security features including Touch ID, Face ID, and FileVault encryption protect client confidentiality. The closed ecosystem provides transparency and security that appeals to legal professionals handling sensitive information.

TSA PreCheck and Global Entry

While not technology per se, these trusted traveler programs dramatically reduce security wait times—increasingly critical as TSA operates with reduced staffing. PreCheck costs $78 for five years; Global Entry includes PreCheck benefits plus expedited customs for $100 per five years. Applications require background checks and in-person interviews, so apply well before travel needs arise.

Prepare Before You Depart

TSA PRECHECk and Global Entry can add a little piece of mind during stressful air travel times!

Download offline maps, save important case files and documents locally, and fully charge all devices before reaching the airport. Download practice management files, case materials, and Adobe documents ensuring offline access. Screenshot confirmations, boarding passes, and hotel reservations in case connectivity fails. Configure your personal hotspot and dual carriers before travel begins. Store backup chargers in different bags to prevent total power loss. Share itineraries with colleagues who can handle emergencies if you become stranded.

The government shutdown has made air travel unpredictable and frustrating and even when the government “reopens” travel will not return to normal instantly. Lawyers cannot avoid travel obligations, but strategic technology adoption mitigates disruptions. These tools maintain productivity, protect client confidentiality, and preserve professional reputation when flights disappear and airports descend into chaos. Technology transforms crisis management from reactive scrambling into proactive preparation—exactly what clients expect from their counsel.

Be Safe and Happy Lawyering!

📖 Word ("Phrase") of the Week: Mobile Device Management: Essential Security for Today's Law Practice 📱🔒

Mobile Device Management is an essential concept for lawyers.

Mobile Device Management (MDM) has become essential for law firms navigating today's mobile-first legal landscape. As attorneys increasingly access confidential client information from smartphones, tablets, and laptops outside traditional office settings, MDM technology provides the security framework necessary to protect sensitive data while enabling productive remote work.

Understanding MDM in Legal Practice

MDM refers to software that allows IT teams to remotely manage, secure, and support mobile devices used across an organization. For law firms, this technology provides centralized control to enforce password requirements, encrypt data, install security updates, locate devices, and remotely lock or wipe lost or stolen devices. These capabilities directly address the ethical obligations attorneys face under the ABA Model Rules of Professional Conduct.

Ethical Obligations Drive MDM Adoption

The legal profession faces unique ethical requirements regarding technology use. ABA Model Rule 1.1 requires lawyers to maintain technological competence, including understanding "the benefits and risks associated with relevant technology". Rule 1.6 mandates that lawyers "make reasonable efforts to prevent the inadvertent or unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client".

ABA Formal Opinion 498 specifically addresses virtual practice considerations. The opinion cautions that lawyers should disable listening capabilities of smart speakers and virtual assistants while discussing client matters unless the technology assists the law practice. This guidance underscores the importance of thoughtful technology implementation in legal practice.

Core MDM Features for Law Firms

Device encryption forms the foundation of MDM security. All client data should be encrypted both in transit and at rest, with granular permissions determining who accesses specific information. Remote wipe capabilities allow immediate data deletion when devices are lost or stolen, preventing unauthorized access to sensitive case information.

Application management enables IT teams to control which applications can access firm resources. Maintaining an approved application list and regularly scanning for vulnerable or unauthorized applications reduces security risks. Containerization separates personal and professional data, ensuring client information remains isolated and secure even if the device is compromised.

Compliance and Monitoring Benefits

lawyers, do you know where your mobile devices are?

MDM solutions help law firms maintain compliance with ABA guidelines, state bar requirements, and privacy laws. The systems generate detailed logs and reports on device activity, which prove vital during audits or internal investigations. Continuous compliance monitoring ensures devices meet security standards while automated checks flag devices falling below required security levels.

Implementation Best Practices

Successful MDM implementation requires establishing clear policies outlining device eligibility, security requirements, and user responsibilities. Firms should enforce device enrollment and compliance, requiring all users to register devices before accessing sensitive systems. Multi-factor authentication enhances security for sensitive data access.

Regular training ensures staff understand security expectations and compliance requirements. Automated software updates and security patches keep devices protected against evolving threats. Role-based access controls prevent unauthorized access to corporate resources by assigning permissions based on job functions.

MDM technology has evolved from optional convenience to ethical necessity. Law firms that implement comprehensive MDM strategies protect client confidentiality, meet professional obligations, and maintain competitive advantage in an increasingly mobile legal marketplace.

Keep Your Practice Safe - Stay Tech Savvy!!!