Compliance Checklist for Solo Attorney Practices: What You Cannot Skip
A practical compliance checklist for solo attorneys covering trust accounts, client files, cybersecurity, and more. Essential steps to avoid bar complaints and fines.
Running a solo practice means you are the CEO, the IT department, and the compliance officer. Missing a compliance step can lead to bar complaints, fines, or even malpractice claims. This checklist covers the non-negotiable items every solo attorney must handle, with concrete steps you can take this week.
1. Trust Accounting: The #1 Compliance Risk
Trust accounting errors are the most common reason solo attorneys face disciplinary action. You must keep client funds separate from operating funds, and you must reconcile your trust account monthly.
What you cannot skip:
- Open a separate IOLTA (Interest on Lawyers’ Trust Account) account. Most states require this for small client funds.
- Never comingle your funds with client funds. Your own money goes in a separate operating account.
- Reconcile your trust account every month. Use software like Clio, QuickBooks, or LeanLaw to automate this.
- Keep detailed records of every deposit and withdrawal, including the client matter.
This week: Set a recurring calendar reminder for the last business day of each month to reconcile your trust account. If you don’t have accounting software, start with a simple spreadsheet that tracks client name, matter, date, and amount.
2. Client File Management and Retention
You must maintain client files securely and retain them for a specific period, which varies by state. Typically, you must keep files for at least five years after the matter closes, but some states require longer.
What you cannot skip:
- Create a file for every client, even if you do a quick consult. Include engagement letters, pleadings, correspondence, and billing records.
- Store files securely, whether physical or digital. For digital files, use encrypted cloud storage like Dropbox Business or Clio.
- Follow your state’s retention schedule. Check your state bar’s website for the exact rules.
- When you close a file, document the date and where it is stored.
This week: Review your current file system. If you don’t have a digital filing system, set up a folder structure by client name and matter. Start scanning paper documents to reduce clutter.
3. Cybersecurity and Data Protection
Solo practices are prime targets for cyberattacks because they often lack robust security. You have a duty to protect client confidential information.
What you cannot skip:
- Use strong, unique passwords for all accounts. Consider a password manager like LastPass or 1Password ($36-$60/year).
- Enable two-factor authentication on your email, cloud storage, and practice management software.
- Encrypt all devices, including laptops, phones, and external drives. Use built-in encryption like FileVault (Mac) or BitLocker (Windows).
- Use a virtual private network (VPN) when working remotely. Services like NordVPN or ExpressVPN cost $60-$100/year.
- Back up your data daily. Use a service like Backblaze ($70/year) or a cloud backup integrated with your practice management software.
This week: Change your passwords to strong ones and enable two-factor authentication on your primary email and practice management software. If you don’t have a backup system, sign up for a cloud backup service today.
4. Malpractice Insurance: Not Optional
Even if your state doesn’t require it, malpractice insurance is essential. It protects you from claims and covers defense costs.
What you cannot skip:
- Carry a minimum of $100,000 per claim and $300,000 aggregate, but most solos opt for $250,000/$500,000 or $1 million/$1 million.
- Premiums for solo attorneys range from $1,500 to $5,000 per year, depending on your practice area and location. High-risk areas like personal injury or real estate cost more.
- Consider a claims-made policy, which covers claims made during the policy period. You may need tail coverage if you switch carriers or retire.
This week: If you don’t have malpractice insurance, get quotes from at least three providers like ALPS, Lawyers Mutual, or USI. Compare coverage and premiums.
5. Client Communication and Engagement Letters
Clear communication is not just good practice; it’s a compliance requirement. You must have a written engagement letter for every client.
What you cannot skip:
- Use an engagement letter that outlines the scope of representation, fees, and your obligations. Include a clause on how you handle client funds.
- Send regular updates to clients. At a minimum, provide a status update every 60 days.
- Document all communications, including phone calls and emails, in the client file.
This week: Create a template for engagement letters if you don’t have one. Review your current letters to ensure they include all required elements.
6. Continuing Legal Education (CLE) and Licensing
You must meet your state’s CLE requirements to maintain your license. Missing deadlines can result in suspension.
What you cannot skip:
- Know your state’s CLE requirements. Most states require 12-15 hours per year, including 2-3 hours of ethics.
- Track your CLE credits. Use a spreadsheet or a service like LawPay or MyLawCLE.
- Keep your bar registration current. Pay your annual fees on time.
This week: Check your state bar’s website for your CLE status. If you’re behind, sign up for online CLE courses that fit your schedule.
7. Business Entity and Tax Compliance
As a solo attorney, you need to choose a business structure and comply with tax obligations.
What you cannot skip:
- Register your practice as an LLC or professional corporation. This protects your personal assets.
- Obtain an Employer Identification Number (EIN) from the IRS, even if you have no employees.
- File your taxes on time. Consider working with a CPA who specializes in legal practices.
- Pay estimated taxes quarterly if you’re self-employed.
This week: If you haven’t formed a legal entity, research the requirements in your state. File the necessary paperwork online, which typically costs $50-$200.
8. Advertising and Marketing Compliance
Your marketing must comply with state bar rules, which prohibit false or misleading statements.
What you cannot skip:
- Avoid guarantees of results. Phrases like “best attorney” or “guaranteed outcome” are red flags.
- Include your name and contact information in all ads.
- If you use client testimonials, ensure they are truthful and not misleading.
- Review your website and social media for compliance.
This week: Audit your website and any online profiles. Remove any language that could be seen as promising a specific outcome.
FAQ
Q: What is the most common compliance mistake solo attorneys make? A: Trust accounting errors. Failing to reconcile monthly or mixing client funds with operating funds leads to disciplinary action.
Q: Do I need malpractice insurance if my state doesn’t require it? A: Yes. Even if not required, it protects your personal assets and covers defense costs, which can exceed $10,000 even for a baseless claim.
Q: How long must I keep client files? A: It varies by state, but typically at least five years after the matter closes. Some states require longer, so check your state bar’s rules.
Q: Can I use free cloud storage for client files? A: It’s risky. Free services may not offer adequate encryption or security. Use a paid, encrypted service like Clio or Dropbox Business to ensure compliance.
The Bottom Line
Compliance is not optional. Start with the highest-risk areas: trust accounting, client files, and cybersecurity. Implement the steps above this week, and you’ll reduce your risk of bar complaints and legal trouble. Remember, the cost of compliance is far less than the cost of a disciplinary action or malpractice claim.