A law firm is vicariously liable when one of its attorneys or nonlawyer employees commits a wrongful act within the scope of their work for the firm. That exposure runs across the whole staff, from partners down to the bookkeeper and the IT contractor, and it is reinforced by professional conduct rules that put supervising lawyers on the hook even when they did not personally make the mistake. Law firm vicarious liability can translate into malpractice judgments, bar discipline, and disqualification from the matter itself.
Why the Firm Pays for Its People
Respondeat superior is the common law rule that holds an employer responsible for wrongful acts an employee commits in the course of their work. Inside a firm, the arrangement is a principal-agent relationship: the firm is the principal, each lawyer or staff member is an agent, and the firm directs the work, sets performance standards, and collects the fees it generates. Because the firm takes the upside of that work, it absorbs the downside too.
The practical reason the doctrine matters is money. An individual associate or paralegal rarely has the personal assets to satisfy a serious malpractice judgment. Respondeat superior keeps the party with the deepest pockets and the most control over quality on the hook, so clients harmed by a mistake can actually recover.
Attorney Mistakes That Trigger Firm Liability
Attorney malpractice is the most common path to firm liability. It happens when a lawyer falls below the accepted standard of care and the client suffers measurable harm as a result. Missing a statute of limitations is the textbook case: once the filing window closes, the claim is gone, and the firm answers for the loss. Incorrect legal advice that leads to a bad outcome produces the same result.
When an associate drafts a brief, negotiates a settlement, or researches a point of law, the work is treated as the firm’s output. The associate is doing tasks the firm assigned, under the firm’s control, which places the work squarely within the scope of employment. Partners and supervising lawyers also carry an independent duty to make sure associates follow the rules of professional conduct, and a supervisor who learns about a problem in time to prevent the consequences and does nothing shares responsibility for the violation.1American Bar Association. Model Rules of Professional Conduct – Rule 5.1 Responsibilities of a Partner or Supervisory Lawyer
Staff Mistakes That Trigger Firm Liability
Nonlawyer errors are treated the same way. A legal secretary who fails to calendar a court date, a clerk who misplaces a summons, an assistant who neglects to record a deed with the county: each of those failures can generate liability that lands on the firm. Courts do not separate attorney errors from administrative errors when the staff member was acting within the scope of their job. The firm directed the work, and the firm owns the result.
Nonlawyers who drift into giving legal advice create a different kind of exposure. A paralegal who counsels a client on strategy or interprets a statute can pull the firm into unauthorized-practice-of-law territory. The ABA Model Rules allow lawyers to delegate tasks to nonlawyers only when the lawyer supervises the work and retains responsibility for it.2American Bar Association. Model Rules of Professional Conduct – Rule 5.5 Comment on Unauthorized Practice of Law The title of the person who made the mistake does not matter. What matters is whether they were acting as the firm’s agent at the time.
Trust Account Theft and Mismanagement
Client fund handling carries especially harsh consequences when supervision fails. Lawyers must hold client property separately from their own funds in dedicated trust accounts and keep complete records for the period set by the applicable jurisdiction.3American Bar Association. Model Rules of Professional Conduct – Rule 1.15 Safekeeping Property When a bookkeeper or office manager embezzles from a client trust account, the firm faces civil liability to the harmed clients and potential discipline against the supervising attorneys.
Being too busy to monitor the account is not a defense. Safeguarding client funds is the attorney’s ethical responsibility, not the bookkeeper’s. Delegating the day-to-day work is permitted, but only with real oversight: reconciliation reviews, dual-signature requirements, access controls. A lawyer who learns staff have mishandled funds and does nothing may be treated as having ratified the conduct.4American Bar Association. Model Rules of Professional Conduct – Rule 5.3 Responsibilities Regarding Nonlawyer Assistance
Data Breaches and IT Errors
Staff negligence with client data is a growing exposure. When an employee clicks a phishing link, misconfigures a file-sharing tool, or sends confidential documents to the wrong recipient, the firm can face malpractice liability for failing to protect the information. ABA Formal Opinion 477R requires lawyers to make reasonable efforts to prevent unauthorized access to client data, using a risk-based approach rather than any fixed checklist.5Tennessee Board of Professional Responsibility. ABA Formal Opinion 477R – Securing Communication of Protected Client Information Managing lawyers are expected to oversee IT personnel handling client files, and claiming ignorance of what IT is doing is unlikely to work as a defense after a breach.4American Bar Association. Model Rules of Professional Conduct – Rule 5.3 Responsibilities Regarding Nonlawyer Assistance
The Supervisory Duties That Stand on Their Own
Beyond respondeat superior, the Model Rules impose supervisory duties that give regulators and plaintiffs an independent basis for liability.
Rule 5.1: Supervising Other Lawyers
Partners and lawyers with managerial authority must ensure the firm has systems that give reasonable assurance all lawyers follow the professional conduct rules. A lawyer with direct supervisory authority over another lawyer must make reasonable efforts to ensure that lawyer complies as well. A supervising attorney becomes personally responsible for a subordinate’s violation in two situations: when the supervisor ordered or knowingly ratified the misconduct, or when the supervisor learned about it in time to avoid or mitigate the consequences and failed to act.1American Bar Association. Model Rules of Professional Conduct – Rule 5.1 Responsibilities of a Partner or Supervisory Lawyer
Rule 5.3: Supervising Nonlawyers
The same structure covers nonlawyers. Partners must ensure the firm has measures giving reasonable assurance that nonlawyer conduct is compatible with the lawyers’ professional obligations. A lawyer with direct supervisory authority over a paralegal, legal secretary, or other staff member must make reasonable efforts to ensure proper conduct. And a lawyer is responsible for nonlawyer misconduct under the same two triggers that apply to lawyer subordinates: ordering or ratifying the conduct, or learning about it in time to limit the damage and doing nothing.4American Bar Association. Model Rules of Professional Conduct – Rule 5.3 Responsibilities Regarding Nonlawyer Assistance
Together, these rules mean a firm cannot deflect responsibility by pointing to the employee who made the error. Tasks can be assigned to others. The duty to oversee how those tasks get done cannot.
Where Firm Liability Ends
Vicarious liability has a boundary: the act must fall within the scope of employment. An employee acts within that scope when performing assigned work or engaging in conduct subject to the firm’s control and intended to serve its purposes. When the employee abandons firm business for purely personal reasons, the firm’s liability generally ends.
Courts use the frolic-and-detour framework to draw the line. A detour is a minor departure from work duties that stays incidental to the job. An associate who stops for coffee on the way to a deposition has taken a detour, and the firm likely remains on the hook for whatever happens on that brief side trip. A frolic is a major departure undertaken purely for the employee’s benefit. The same associate who skips the deposition for a personal event has given the firm a strong argument that the conduct fell outside the scope of employment.
Travel is the common dispute. Under the going-and-coming rule, a regular commute sits outside the scope of employment. But if the firm requires the employee to use a personal vehicle for work and expects it to be available regularly, the commute itself may be treated as inside the scope because the travel benefits the firm. Travel to depositions, client meetings, and court appearances is work travel, and accidents during those trips create firm liability.
Intentional Acts and Harassment
Vicarious liability is not limited to negligence. Firms can face exposure for intentional wrongful acts too, though the analysis shifts to foreseeability and job relatedness. An attorney who assaults a client during a meeting creates a far more direct path to firm liability than one who gets into a bar fight on the weekend, even though both acts are intentional.
Harassment by supervising attorneys is especially high-risk. Under federal guidance, an employer is always liable for supervisor harassment that leads to a tangible employment action such as firing, demotion, or an undesirable reassignment. When the harassment does not produce a tangible employment action, the firm may raise an affirmative defense by showing it exercised reasonable care to prevent and correct harassing behavior and that the victim unreasonably failed to use available complaint procedures. Partners and owners face a stricter standard: if the harasser is high enough in the firm to be treated as its alter ego, the firm is automatically liable regardless of whether the conduct led to a tangible employment action and regardless of what anti-harassment policies exist on paper.6U.S. Equal Employment Opportunity Commission. Enforcement Guidance on Vicarious Liability for Unlawful Harassment by Supervisors
Direct Liability as a Parallel Theory
Even when vicarious liability fails because the employee acted outside the scope of employment, the firm may still face direct liability for its own negligence. Negligent hiring means bringing on someone the firm knew or should have known was incompetent or dangerous. Negligent supervision means failing to monitor employees adequately once hired. Negligent retention means keeping an employee after learning they pose a risk. These theories hold the firm accountable for its own institutional failures rather than imputing a specific employee act to it. Plaintiffs often plead both theories in the same complaint.
Of Counsel and Contract Attorneys
The default rule is that employers are not vicariously liable for independent contractors, because the employer does not control the manner and means of a contractor’s work. Firms often use “of counsel” lawyers and contract attorneys in ways that blur that line, and courts look past the label to the actual working relationship.
A firm is generally liable for an of counsel attorney’s malpractice when the arrangement creates the appearance that the attorney is part of the firm. If the attorney’s name appears on the letterhead, the firm’s website lists them as affiliated, or the client reasonably believes they are dealing with a firm lawyer, apparent authority can bind the firm. Courts also look at whether the firm shared in the attorney’s fees, exercised control over the work, and had mechanisms to monitor the matters handled.
For contract attorneys, the question turns on how much direction the firm gives. A contract lawyer who independently manages a case with minimal firm involvement looks like an independent contractor. One who works from the firm’s office, uses firm resources, and reports to a supervising partner looks like an employee no matter what the engagement letter calls them.
Imputed Conflicts of Interest
Vicarious principles reach into conflicts work as well. When one lawyer at a firm has a conflict that prevents them from representing a client, that conflict is generally imputed to every other lawyer at the firm. No one in the firm can take the matter unless the conflict arises from a purely personal interest of the disqualified lawyer that does not create a meaningful risk of limiting the representation.
Nonlawyer staff are handled differently. A paralegal who previously worked at an opposing firm may hold confidential information about a current adversary, but that conflict does not automatically disqualify the entire firm. The firm can avoid disqualification by putting a timely ethical screen in place that isolates the conflicted employee from the matter: no access to case files, no discussion of the matter with the employee, and no share in any fees generated by the case. When a conflicted lawyer joins a new firm, screening is more demanding and does not always work. If the incoming attorney had substantial involvement in an ongoing matter the new firm handles, screening may not be enough.
How Firm Structure Changes Who Pays
The entity the firm chooses determines how liability flows to individual partners.
General Partnerships
In a general partnership, every partner is personally liable for partnership obligations, including malpractice claims arising from another partner’s negligence. A partner who had nothing to do with the case can still lose personal assets to satisfy the judgment. That unlimited exposure is why most firms no longer operate as traditional general partnerships.
Limited Liability Partnerships and Professional Corporations
An LLP shields individual partners from personal liability for firm obligations that arise while it operates as an LLP. A partner is not personally liable for another partner’s malpractice solely because of partner status. The firm’s assets and insurance remain reachable, but a partner who did not participate in the misconduct generally keeps personal assets out of the judgment. Professional corporations work similarly, with the entity absorbing liability rather than individual shareholders.
These protections are not absolute. A partner who directly supervised the negligent work, ratified the misconduct, or was personally involved in the representation still faces individual exposure regardless of the firm’s form. And in every structure, the firm’s insurance and operating capital are at risk.
Piercing the Veil
Courts can set aside a firm’s liability protections through veil piercing, though they do so reluctantly. It typically requires serious misconduct: commingling personal and firm assets, undercapitalizing the entity at formation, or using the structure to perpetrate fraud. The specific test varies by jurisdiction, but courts generally demand egregious behavior before they will disregard the entity and reach individual partners. Simply operating as an LLP or professional corporation does not invite scrutiny; the protections hold unless partners treat the entity as an extension of themselves.
Insurance as the Practical Backstop
Professional liability insurance is the main mechanism firms use to manage this exposure. Only a handful of states require attorneys to carry malpractice insurance, though many more require disclosure of whether coverage exists. A firm that goes without is betting that no employee error will ever produce a judgment larger than the firm’s assets. Given the range of mistakes that trigger vicarious liability, from missed deadlines and botched filings to data breaches and trust account theft, that bet is hard to justify. Insurance does not eliminate liability; it ensures the firm can actually pay a judgment without dissolving. Firms whose staff theft produces a claim should also expect coverage disputes with insurers over whether the loss falls within a dishonest-act exclusion.