Law Firm Intake Form and Prospective Client Confidentiality

Someone fills out your website form at 9 p.m. and types three paragraphs about a dispute with a business partner. No lawyer has read a word yet. Your firm may already owe that person a duty of confidentiality. That is the core of the law firm intake form prospective client confidentiality problem, and ABA Model Rule 1.18 is where it starts. This post covers what to ask, what to hold back and when to run the conflict check. It sits under our guide to law firm intake automation. We are not lawyers and this is not legal advice. Confirm every point with your own ethics counsel or state bar. The fix is mostly form design and order of operations.

Why the intake form is where Rule 1.18 starts

Rule 1.18 defines a prospective client in plain terms. Under the ABA's comment to Rule 1.18, the duty not to use or reveal what you learned applies even if no one hires you. It applies however brief the first conversation was.

Not everyone who sends your firm information is covered. Comment 2 carves out people who write without a reasonable expectation that the lawyer will discuss taking them on. Business Law Today notes the comment treats a response to advertising that only describes education, experience, practice areas and contact details as outside the definition. Legal information of general interest is treated the same way.

A page that lists your practice areas is one thing. A form that says "tell us about your case" is another. It invites a consultation. Whether your form crosses that line depends on its wording and your state's version of the rule. That is a question for counsel, not the operations team.

State versions differ. The same Business Law Today piece points out that Illinois does not require written notice to the prospective client in one of the screening provisions. If your lawyers are licensed in New Jersey, Pennsylvania or both, which is common around Philadelphia, ask your ethics counsel how each state's version reads. We have not pulled those texts for this post.

The practical point for an intake system built for a law firm is simple. Every field on the form is a decision. It sets how much confidential information the firm will receive before it knows whether it can take the matter.

What to ask on the first screen

The ABA's comment says a lawyer weighing a new matter should limit the first consultation to what appears necessary to check conflicts and decide whether to proceed. An intake form is a consultation in writing. The same restraint applies to it.

A conflict check searches your client and matter records for the people and organizations involved. It shows whether the firm already represents, or has consulted, someone on the other side. So the first screen needs the inputs for that search and for routing. Nothing more.

First-screen intake fields: ask now, hold back, or route to a lawyer

Field	Treatment	Reason
Name, phone, email	Ask	Needed to reply and to run the check on the person.
Names of the other parties and related companies	Ask	These are the main conflict-check inputs.
Opposing counsel, if known	Ask	Helps the check and flags existing relationships.
Matter type, chosen from a dropdown	Ask	Routes to the right attorney and shows whether you handle it.
State, county or court	Ask	Confirms the matter is somewhere your lawyers are licensed.
A date you are worried about, as a date only	Ask	Lets staff flag urgency without reading the story.
How you found us	Ask	Marketing attribution, no confidential content.
Open narrative of what happened	Hold back	Highest risk of receiving harmful information.
Uploaded documents, screenshots, emails	Hold back	Collect only after the check clears.
Settlement positions, admissions, strategy	Hold back	Exactly what a later conflict would turn on.
Medical, immigration or financial account details	Hold back	Sensitive, and not needed to decide.

The "date only" row matters. A statute of limitations or a hearing date is the one fact that cannot wait for the check. Capture it as a date, not a paragraph, so a person can triage it without reading the story.

What to hold back, and why a text box is the risk

The open text box is where firms receive more than they meant to. The ABA Journal describes an ABA ethics opinion on prospective-client confidentiality. Its example is an hour-long meeting about a divorce, after which the lawyer cannot represent the other spouse. It also says the more information a lawyer acquires, the more likely it is "significantly harmful." Rule 1.18(c) uses that phrase as the trigger for disqualification.

A form can collect that much text in two minutes. Three changes cut the exposure.

• Replace the narrative with choices. Matter type, state and a short "what kind of help do you need" selector give a lawyer enough to decide whether to book a call.
• If you keep a text box, cap it and label it. A short limit and a line telling people not to include confidential details reduce what arrives. They do not make the problem disappear, and a counsel-approved version matters more than a clever one.
• Move uploads to a second step. Send the upload link only after the conflict check clears and a lawyer approves the next step.

None of this stops a determined person from pasting a story into any field. The aim is to show the firm took reasonable steps, which is the language Rule 1.18(d)(2) uses, and to limit what lands in the inbox.

Conflict-check timing: names first, story second

The article in Washington State Bar News (2025) makes the sequencing point directly. Ideally the names of the parties are obtained first and a conflict check is run before a meeting to discuss the representation. Your intake automation should enforce that order so no one has to remember it.

The order of operations

1. The form captures the first-screen fields only and logs a timestamp.
2. The system searches your client, matter and prior-inquiry records for the party names, including spelling variants.
3. A conflict clerk or attorney reviews any hit. The system never clears a conflict on its own.
4. If the check is clean, the person receives the second step: a short questionnaire, the upload link and the scheduling link.
5. If there is a hit, the inquiry goes to a lawyer, who decides whether to decline, seek consent or consider screening.

Those last options come from the rule itself. Under comment 7, a disqualified lawyer's conflict is imputed to the rest of the firm, which means everyone is treated as having it. The firm can avoid that with the informed consent, confirmed in writing, of both the prospective and affected clients. It can also meet the conditions in paragraph (d)(2): reasonable measures to limit exposure, timely screening and prompt written notice. Which path fits is a lawyer's call.

Who sees what

Screening only works if the system matches it. In a custom CRM, the intake queue can show the conflict clerk names and matter type. It can hide the narrative and attachments until the status flips to "cleared." It can also log who opened each record. A shared inbox cannot do either.

The Washington article also discusses a lawyer's duty to supervise non-lawyer staff, including people who assist with intake. Whoever answers the phone needs the same rule your form follows: names and matter type first, story later.

Form wording that helps and wording that doesn't

Comment 5 says a lawyer may condition a consultation on the person's informed consent that nothing disclosed will bar the lawyer from representing a different client in the matter. Informed consent means the person understood what they were agreeing to. The same Washington article calls that consent a "tough sell" for sensitive matters, and notes a prospective client has no obligation to give it.

So a checkbox is not a shield. Comment 6 adds a limit. Even without an agreement, a lawyer is barred from the other side only if they received information that could be significantly harmful. A good form does three jobs:

• It says plainly that submitting the form does not create a client relationship.
• It tells people what to send now and what to hold until the firm replies.
• It sits directly above the submit button and above any text box, not in a footer.

Here is a starting draft to hand to your ethics counsel. Treat it as a discussion document only:

Submitting this form does not create an attorney-client relationship. Please give only the names of the people and organizations involved and the type of matter. Do not send documents or describe what happened until we confirm we can speak with you.

Avoid wording that promises confidentiality you have not analyzed, such as "everything you tell us is privileged." That may be wrong for the matter or the state. Also avoid hidden consent, such as a disclaimer that only appears after submission. Counsel should decide what consent language, if any, your form carries. We build the form to match what they approve.

When to send it to a lawyer first

Some inquiries should skip the queue and go to an attorney before staff do anything else. Build these as automatic flags, and let staff add their own:

• The conflict search returns a hit on any party, including a former client.
• The person mentions a deadline, a hearing or a notice they received.
• The form contains a long narrative, an attachment or a recorded voicemail with substantive detail.
• The matter touches a state where no lawyer at the firm is licensed.
• The person mentions another lawyer, or a lawyer's advice, in the same matter.
• Something reads like a person writing mainly to see whether the firm will be tied up. Comment 2 says someone who communicates to disqualify the lawyer is not a prospective client, but that judgment belongs to a lawyer.

The flag changes who acts. It does not change what the system says. Until a lawyer reviews, the automatic reply stays neutral: it confirms receipt and says a team member will follow up. It does not discuss the matter or suggest the firm will take it.

If you use AI workflow automation to summarize or categorize inquiries, treat it as its own question. Sending narrative text to a third-party tool raises confidentiality and consent issues your lawyers need to assess. ABA Formal Opinion 512 is the ABA's opinion on generative AI. We did not retrieve or summarize its text for this post, so have counsel read it directly. Our default design runs summaries only on cleared inquiries, shows them to an attorney, and sends nothing to the prospective client without human review.

What we do not know

We read the ABA's Model Rule 1.18 pages and the commentary above as of October 17, 2026. We have not reviewed New Jersey's or Pennsylvania's current rule text, any state's case law on disclaimers, or whether a particular checkbox would hold up. Those answers vary by state and by facts.

The ABA's opinion on prospective clients, Formal Opinion 510 (2024), addresses how reasonable measures work for imputation, according to Business Law Today. We did not read the full opinion. Your counsel should.

What we can say is how the work gets built. In Medford, Burlington County and across the Philadelphia metro, small firms usually run intake through a contact form, a shared inbox and a spreadsheet. The form is the cheapest place to fix this. Our web design and development work includes forms that write straight into your CRM. The first-screen fields, the hold-back fields and the "cleared" status then live in one place. Bring your counsel's wording, and we will build to it.

Frequently Asked Questions

Does a law firm intake form create a prospective client relationship?

It can. Under Rule 1.18, a person who consults a lawyer about possibly forming a client relationship is a prospective client. Comment 2 excludes people who write without a reasonable expectation of being heard, such as responding to purely descriptive advertising. A form that invites case details looks more like a consultation. Whether yours does depends on wording and your state's version, so ask your ethics counsel.

What should a law firm intake form ask before the conflict check?

Ask for contact details, the names of the other parties and related organizations, and the matter type from a dropdown. Add the state or court and any urgent date. Hold back the narrative, documents and sensitive details until the check clears. The goal is to collect what you need to run the check and route the inquiry, and little else.

Should a law firm intake form include a disclaimer?

Many firms include one saying the form does not create an attorney-client relationship and asking people not to send confidential details yet. Place it above the submit button. A disclaimer is not a guaranteed shield, though. Comment 5 allows conditioning a consultation on informed consent, and that is a legal judgment. Have your ethics counsel approve the exact wording and any consent language.

When should intake staff send an inquiry to a lawyer first?

Send it first when the conflict search returns a hit, when the person mentions a deadline or hearing, when substantive detail or attachments arrive, or when the matter falls outside the states your lawyers are licensed in. Until a lawyer reviews it, staff should send only a neutral confirmation of receipt. They should not discuss the matter or suggest the firm will take it.

Next step

If you want an intake form, conflict-check queue and attorney review step that match your counsel's rules, talk to us at iOLab Digital. We will start from your current form and inbox, not from a template.