What insurance do law firms need?
It depends — a law firm generally needs to evaluate lawyers’ professional liability (legal malpractice) first, then add general liability, cyber, employment, and other lines for separate exposures. Rules and contracts differ by jurisdiction and client, but a firm can be sued over missed deadlines, conflicts, confidentiality, client funds, and negligent legal work.
Law-firm insurance starts with the firm’s professional duty, not with a generic package. A missed limitation period, conflicted representation, disclosure of client information, or mishandled trust-account balance can create a different allegation from a visitor’s injury in the office or a ransomware event. The firm needs a coverage map that follows those separate duties and the contracts its clients require.
Legal malpractice is the central professional exposure
Legal malpractice is the profession-specific name for professional liability arising from legal services. The ABA’s Model Rule 1.1 requires competent representation, including legal knowledge, skill, thoroughness, and preparation. The ABA’s insurance overview describes professional liability/legal malpractice as the line directed at negligence in legal services.
The firm should not treat a generic professional-services form as interchangeable with a lawyers’ professional-liability form. The application, definitions, insured-entity language, prior-acts date, exclusions, defense provisions, and coverage for the firm’s actual practice areas matter. A litigation firm, real-estate practice, public-defender office, and trust-and- estates practice do not present identical allegations.
Four law-firm-specific allegations
| Duty or control point | What a claimant may allege | Evidence the firm should be able to identify |
|---|---|---|
| Diligence and deadlines | Missed filing, limitation period, hearing, or response deadline | Docket controls, calendaring, delegation, and documented client instructions |
| Conflicts | Representation was directly adverse or materially limited by another interest | Conflict searches, waivers, engagement scope, and information barriers |
| Confidentiality | Client information was disclosed or accessed without authorization | Access controls, supervision, secure communication, and incident records |
| Client property and funds | Trust money or other property was not separated, recorded, or returned correctly | Account records, reconciliations, receipts, and client communications |
The ABA’s Model Rule 1.3 requires reasonable diligence and promptness. Model Rule 1.7 addresses concurrent conflicts and informed written consent; Model Rule 1.6 addresses confidentiality and reasonable protective efforts; Model Rule 1.15 addresses separate property, records, and accounting. These are not interchangeable examples: each produces a different allegation, record trail, and coverage question.
Who can sue the firm
Clients and former clients are the clearest claimants when legal advice, research, drafting, representation, or a missed procedural obligation is alleged to have caused a loss. A beneficiary, opposing party, lender, or other third party may also appear in a dispute depending on the duty asserted and the governing law. The policy question is not simply whether a lawyer was named. It is whose legal service is alleged to be wrongful, what duty is claimed, and whether the firm and the individual lawyer are insured for that work.
The firm’s responsibility also does not disappear merely because work was delegated. The ABA insurance discussion notes that a law firm remains responsible for a freelance lawyer’s work in the described arrangement. Engagement letters, supervision, and the professional-liability form should be read together.
Lines next to legal malpractice
The ABA identifies general liability, cyber, and employment exposures as separate considerations for a law practice. General liability addresses office or operations allegations such as bodily injury and property damage; it does not substitute for a legal-malpractice form. Cyber is a separate question when the firm holds privileged information, credentials, or personal data. Employment coverage addresses claims by workers and applicants, not a client’s allegation that legal work was negligent.
The sister library covers the cyber insurance mechanics and the boundary around a documentation error at closing. Those links are useful when the issue is policy operation; this page keeps the PDS focus on who can sue the firm and what conduct is alleged.
Requirements and demanded limits
A law firm’s insurance requirement may come from a client engagement, lender or transaction checklist, landlord, court-appointed role, or local professional regime. It is unsafe to state that every jurisdiction mandates the same policy or limit. The ABA’s jurisdictional comparison shows why the Model Rules are a starting point rather than a fifty-state insurance mandate.
A contract can still demand lawyers’ professional liability, a stated limit, prior-acts continuity, cyber coverage, or evidence of separate lines. Match the demand to the firm’s actual work and policy wording. The familiar certificate process does not answer whether the legal-malpractice form covers the alleged service.
Questions people actually ask
Do law firms need legal-malpractice insurance? A firm should evaluate it as the primary professional-liability exposure because clients can allege negligent legal work. Whether a particular jurisdiction or client requires a policy or limit is a separate question.
What can a law firm be sued for besides malpractice? The firm can face separate allegations involving office bodily injury, a data incident, employment practices, client funds, or a contract dispute. The responsible liability line depends on the allegation.
Does a law-firm policy cover a freelance lawyer? Do not assume it. The engagement, supervision, insured-person definition, and policy wording must be checked. The ABA notes that a firm can remain responsible for delegated legal work.
Do law firms need cyber insurance? Many firms have a distinct cyber exposure because they hold confidential and personal information, but cyber does not replace legal-malpractice coverage. The two lines answer different allegations.
Sources are linked above. The ABA Model Rules are not a uniform insurance mandate; jurisdictions modify them. The actual policy, engagement, and governing law control.
Ask us
Ask publicly The best questions become new pages here — sourced, anonymized, never with your email.
Ask privately Confidential — for a policy-specific read, answered by an editor, never published.
Sources
- Primary source: American Bar Association — Model Rule 1.1: Competence — The ABA rule identifies the legal knowledge, skill, thoroughness, and preparation required for competent representation.
- Primary source: American Bar Association — Model Rule 1.3: Diligence — The ABA rule requires reasonable diligence and promptness; the associated missed-deadline exposure is a law-firm-specific malpractice fact.
- Primary source: American Bar Association — Model Rule 1.7: Conflict of interest — The ABA rule addresses concurrent conflicts, direct adversity, material limitations, and informed written consent.
- Primary source: American Bar Association — Model Rule 1.6: Confidentiality — The ABA rule requires confidentiality and reasonable efforts to prevent unauthorized disclosure or access to client information.
- Primary source: American Bar Association — Model Rule 1.15: Safekeeping property — The ABA rule addresses separate client property, records, accounting, and funds—distinct law-firm control points.
- Context source: American Bar Association — Insurance essentials for a freelance law practice — The ABA describes professional liability/legal malpractice as coverage for negligence in legal services and discusses separate general liability, cyber, and EPL exposures.
- Primary source: American Bar Association — Jurisdictional rules comparison — The ABA cautions that jurisdictions modify the Model Rules; it supports the page's limitation that requirements vary by location.