Confidentiality and data handling Required
The rule
Everything about a client - name, numbers, documents, even the fact that they are a client - is confidential.
In practice
- Client files live in Canopy, Caseware, and the firm OneDrive. Not on personal devices, personal email, or personal cloud storage.
- Anonymize client references in anything that could be shared (for example, "Client A, a construction CCPC").
- Never paste client data into external tools that are not approved by a partner.
- Lock your screen when you step away. Use the firm password manager; never reuse passwords.
If something goes wrong
Tell a partner immediately. Fast disclosure is always better than a quiet fix.