Legal PII: Attorney-Client Privilege at Anonymization

Legal PII: Attorney-Client Privilege at Anonymization

Ang Hamon: Balancing Privilege at Compliance

Ang legal practice ay may unique PII challenges:

1. Client names at addresses - core client information, privileged
2. Attorney notes - may reference sa client communications
3. Opposing party information - puede kailangan anonymize para sa third-party review
4. Case references - docket numbers, court proceedings (sometimes public)

Ang e-discovery process ay nangangailangan ng disclosure, pero:

• GDPR requires anonymization ng EU client data
• Federal Rules of Civil Procedure (FRCP) require reasonable efforts to prevent disclosure ng privileged material
• State bar rules require diligence sa client confidentiality

Ang Real-World Problem: Redaction Failures

Noong 2023, isang law firm ay nag-submit ng email sa court na may redacted (blacked-out) email addresses:

Original (redacted):

TO: [REDACTED]
FROM: [REDACTED]
SUBJECT: Settlement negotiation

The client is willing to accept $500,000 settlement.
Original attachment: [REDACTED]_settlement_offer.pdf

Pero ang filename ay nag-leak ng email:

john.smith@example.com_settlement_offer.pdf

Result: Court sanctions, attorney suspended, malpractice claim

Ang Solution: Comprehensive Legal Document Anonymization

Ang anonym.legal ay may legal-specific anonymization features:

Hakbang 1: Identify Legal-Specific PII

{
  "legal_entities": {
    "ATTORNEY_NAME": {
      "patterns": ["licensed attorney", "counsel", "Esq."],
      "protection_level": "PRIVILEGED"
    },
    "CLIENT_NAME": {
      "patterns": ["my client", "plaintiff", "defendant"],
      "protection_level": "CONFIDENTIAL"
    },
    "CASE_NUMBER": {
      "patterns": ["Case No.", "Docket No.", "CV-\d{4}"],
      "protection_level": "PUBLIC"
    },
    "SETTLEMENT_AMOUNT": {
      "patterns": ["settlement", "$", "€"],
      "protection_level": "CONFIDENTIAL"
    },
    "WITNESS_NAME": {
      "patterns": ["witness testified", "deposed on"],
      "protection_level": "CONFIDENTIAL"
    }
  }
}

Hakbang 2: Implement Legal Document Recognizer

from presidio_analyzer import AnalyzerEngine, PatternRecognizer, Pattern

analyzer = AnalyzerEngine()

# Case number recognizer
case_recognizer = PatternRecognizer(
    supported_entity="CASE_NUMBER",
    patterns=[
        Pattern(name="case_cv", regex=r"CV-\d{2}-\d{6}"),
        Pattern(name="case_no", regex=r"Case No\. [0-9:-]+"),
        Pattern(name="docket", regex=r"Docket No\. [0-9:-]+")
    ],
    context=["case", "docket", "suit"]
)

analyzer.registry.add_recognizer(case_recognizer)

# Test
legal_text = """
COMPLAINT

Case No. CV-25-0001234
Docket No. 2025-00001

Plaintiff: Jane Doe v. Defendant: ABC Corporation

The undersigned attorney represents the plaintiff in this matter.
"""

results = analyzer.analyze(
    text=legal_text,
    entities=["CASE_NUMBER", "PERSON", "ORGANIZATION"]
)

Hakbang 3: Selective Anonymization per Protected Status

from presidio_anonymizer import AnonymizerEngine

anonymizer = AnonymizerEngine()

# For public document (court filing):
public_ops = {
    "ATTORNEY_NAME": OperatorConfig("keep"),  # Attorneys disclosed sa court
    "CLIENT_NAME": OperatorConfig("replace", {"new_value": "[CLIENT]"}),  # Confidential
    "CASE_NUMBER": OperatorConfig("keep"),  # Public
    "SETTLEMENT_AMOUNT": OperatorConfig("replace", {"new_value": "[AMOUNT]"})  # Confidential
}

# For third-party discovery review:
discovery_ops = {
    "ATTORNEY_NAME": OperatorConfig("replace", {"new_value": "[COUNSEL]"}),
    "CLIENT_NAME": OperatorConfig("replace", {"new_value": "[PARTY]"}),
    "CASE_NUMBER": OperatorConfig("replace", {"new_value": "[CASE]"}),
    "SETTLEMENT_AMOUNT": OperatorConfig("replace", {"new_value": "[AMOUNT]"})
}

# Sanitize para sa third-party review
anonymized = anonymizer.anonymize(
    text=legal_text,
    analyzer_results=results,
    operators=discovery_ops
)

Ang Legal Compliance Matrix

Ang Real-World Case: Law Firm E-Discovery

Isang law firm ay nag-prepare ng 5,000 documents para sa e-discovery:

Manual redaction approach:

Timeline: 3 months (black marker on PDFs)
Cost: 3 lawyers × 3 months = $180,000
Quality: 2-3% error rate = 100-150 unredacted PII
Risk: Malpractice exposure $500K+

With automated anonymization:

Timeline: 2 weeks (batch processing)
Cost: Software + 1 lawyer review = $5,000
Quality: <0.1% error rate = 5 documents to fix
Risk: Minimal (audit trail of all replacements)
Savings: $175,000 + risk mitigation

Ang Best Practice para sa Legal Firms

1. Define document type - court filing vs discovery vs training
2. Set anonymization rules - per FRCP + state bar rules
3. Use batch processing - for volume e-discovery
4. QA review - spot-check 5-10% ng anonymized documents
5. Audit log - maintain complete redaction trail para sa court

Ang legal document anonymization ay critical para sa compliance at risk mitigation.