1. Purpose and Scope
This Compliance and Law Enforcement Requests Policy (this "Policy") describes the general approach of [FIRM LEGAL NAME], operating as loramora (the "Firm," "we," "us," or "our"), to requests from government authorities, law enforcement agencies, courts, and regulators ("Authorities") for information relating to the Website, its Users, or the Firm's Clients, and to certain related compliance obligations such as sanctions screening, anti-money-laundering requirements, and client identification.
This Policy describes a framework of principles. It does not itself constitute legal advice, does not waive attorney–client privilege or professional secrecy in any specific matter, and is subject to the mandatory rules of professional conduct and Applicable Law governing the Firm.
2. Definitions
Capitalized terms not defined in this Policy have the meaning given in the Website Terms of Use. In addition, in this Policy:
- "Lawful Request" means a request, subpoena, warrant, court order, or similar legal process issued by an Authority with proper jurisdiction, seeking information within the Firm's possession or control.
- "Privileged Information" means information protected by attorney–client privilege, the work-product doctrine, professional secrecy, or an equivalent protection under Applicable Law.
- "AML" means anti-money-laundering.
- "KYC" means client (or "know your customer") identification procedures.
3. Governing Principles
The Firm approaches requests from Authorities according to the following principles, to the extent consistent with Applicable Law:
- Lawfulness — the Firm will assess whether a request is a valid Lawful Request before responding to it substantively.
- Confidentiality and privilege — the Firm will identify and seek to protect Privileged Information from disclosure to the fullest extent permitted by Applicable Law.
- Minimization — the Firm will seek to limit any disclosure to what is actually required by a valid Lawful Request.
- Transparency where permitted — the Firm will provide notice to an affected Client or User where Applicable Law permits it and doing so would not itself violate a legal restriction (such as a non-disclosure or "gag" order).
4. Authority Verification
Before responding substantively to a request from an Authority, the Firm intends to take reasonable steps to verify that the request originates from a genuine Authority with proper jurisdiction and that it is issued through valid legal process (for example, by confirming the issuing court or agency, the requesting official's identity and authority, and the formal basis cited for the request). Requests that do not include adequate identification, legal basis, or that are addressed through unverified or informal channels will generally be treated as insufficient to compel disclosure absent further verification.
Verification steps the Firm may take include confirming the request was issued on official letterhead or through an official case-management or court filing system, calling back through a publicly listed number for the issuing agency or court rather than a number provided only in the request itself, and, where appropriate, seeking confirmation from the Firm's own legal counsel before responding.
5. Types of Requests
This Policy addresses several distinct categories of requests, which the Firm treats somewhat differently depending on their nature:
- Informational requests seeking confirmation of a fact (for example, whether the Firm represents a named person), which the Firm will generally decline to confirm or deny absent a valid Lawful Request or the affected person's consent, consistent with confidentiality obligations;
- Production requests seeking documents, communications, or records, which are subject to the scope review described in Section 6 and the privilege protections described in Section 7;
- Preservation requests asking the Firm to retain specified records pending further legal process, which the Firm may honor where reasonable and consistent with its own record-retention obligations, without that preservation constituting agreement to eventually produce the preserved material; and
- Testimonial requests seeking a statement, deposition, or testimony from Firm personnel, which raise distinct privilege and professional-conduct considerations addressed on a case-by-case basis.
6. Scope Review and Narrowing
The Firm intends to review the scope of each Lawful Request to confirm that it is not overbroad, and, where appropriate and legally permissible, to engage with the requesting Authority or to use available legal channels (such as a motion to quash, narrow, or clarify) to seek to limit a request that appears to exceed what is necessary or that would require disclosure of Privileged Information not properly subject to compelled disclosure.
7. Confidentiality and Privilege Protections
The Firm treats attorney–client privilege and professional secrecy as fundamental professional obligations. Where a Lawful Request may call for the production of Privileged Information, the Firm intends to assert applicable privilege and confidentiality protections to the extent permitted by Applicable Law, and to disclose Privileged Information only where legally compelled after available objections and protections have been considered, or where disclosure is otherwise required or permitted by mandatory rules of professional conduct (for example, narrow exceptions relating to the prevention of certain future harms, where recognized by Applicable Law).
8. Data Minimization
When responding to a valid Lawful Request, the Firm intends to disclose only the specific information responsive to the request's defined scope, rather than providing broader access to files, systems, or communications than the request requires. Where a request could reasonably be satisfied by redacted or summarized information, the Firm intends to consider whether such an approach adequately meets the Authority's legitimate need while limiting exposure of information beyond that need.
9. Notice to Affected Persons Where Permitted
Where Applicable Law does not prohibit it, and where doing so would not itself frustrate a legitimate law enforcement purpose recognized by a court or applicable order, the Firm intends to notify an affected Client or User of a Lawful Request seeking their information before complying, so that the affected person has an opportunity to seek to protect their own interests, including by seeking separate legal representation. Where Applicable Law prohibits notice (for example, under a valid non-disclosure order), the Firm will comply with that legal restriction. Where notice is delayed rather than permanently withheld (for example, because a non-disclosure order is time-limited), the Firm intends to provide notice once the restriction lapses, unless doing so would itself be inconsistent with Applicable Law at that later time.
10. Emergency Requests
In situations involving an imminent risk to life or safety, the Firm may, where permitted by Applicable Law and consistent with mandatory rules of professional conduct, cooperate with an Authority on an expedited basis, while still applying reasonable verification appropriate to the circumstances and documenting the basis for its response.
11. Cross-Border and Multi-Jurisdictional Requests
A request from an Authority in a jurisdiction other than the Firm's own jurisdiction(s) of practice raises additional considerations, including whether the requesting Authority's process has been recognized through an applicable mutual legal assistance treaty, letter of request, or other recognized cross-border mechanism, and whether responding would be consistent with the data protection, blocking statute, or confidentiality laws of the jurisdiction in which the relevant information is held. Where a cross-border request does not follow a recognized mechanism, the Firm intends to treat it with additional scrutiny and, where appropriate, to seek guidance from counsel qualified in the relevant jurisdictions before responding.
12. Sanctions and Export Controls
The Firm is subject to applicable trade sanctions and export control regimes in the jurisdictions relevant to its operations. Consistent with the Website Terms of Use, the Firm may be required to screen prospective and existing Clients against applicable sanctions lists, and may decline to provide services to, or continue services for, a person or entity where doing so would violate Applicable Law, including sanctions or export control restrictions.
13. Client Identification and Anti-Money-Laundering Obligations
Where Applicable Law imposes AML or KYC obligations on the Firm in connection with particular categories of legal work, the Firm intends to comply with applicable client identification, verification, source- of-funds, and record-keeping requirements before or during the relevant engagement. The specific AML/KYC regime applicable to the Firm depends on its jurisdiction(s) of practice and the nature of the services provided, to be confirmed by the Firm: [APPLICABLE AML/KYC REGIME AND REGULATOR, IF ANY]. Where Applicable Law requires the Firm to report a suspicion of money laundering or terrorist financing, the Firm will comply with that mandatory reporting obligation, which may, where legally required, take precedence over ordinary confidentiality obligations to the extent Applicable Law so provides.
14. Cooperation with Authorities
Subject to the protections described in this Policy, the Firm will cooperate with Authorities to the extent legally compelled to do so, including in response to valid subpoenas, court orders, and regulatory demands. Cooperation under this Section does not extend to voluntary disclosure of Privileged Information or Client confidences beyond what Applicable Law requires or mandatory professional conduct rules permit.
15. Mandatory Reporting Obligations
Nothing in this Policy limits any mandatory reporting obligation imposed on the Firm or its lawyers by Applicable Law or applicable rules of professional conduct, including obligations that may require disclosure notwithstanding ordinary confidentiality expectations. Such obligations are addressed under the specific legal or regulatory provisions that create them, which take precedence over this Policy to the extent of any conflict.
16. Record-Keeping
The Firm intends to maintain reasonable internal records of Lawful Requests received and the Firm's response to them, to the extent consistent with Applicable Law, professional conduct obligations, and any restrictions imposed by the requesting Authority (such as a non-disclosure order affecting what may be recorded or disclosed about the request itself). These records are intended to support the Firm's own accountability and are not, by themselves, made available to the public or to the affected Client or User except where Applicable Law requires disclosure or the Firm determines disclosure is appropriate.
17. Internal Escalation and Legal Review
The Firm intends to route Lawful Requests, and any request that appears designed to circumvent the verification or scope-review steps described in this Policy, to personnel with appropriate authority and, where warranted by the complexity or sensitivity of the request, to the Firm's own legal counsel before a substantive response is given. This escalation step is intended to help ensure that responses to Authorities are consistent with this Policy, Applicable Law, and the Firm's professional obligations.
18. Complaint Handling
A person who believes the Firm has responded improperly to a request from an Authority, or who has a complaint regarding this Policy, may contact the Firm using the details in Section 20. Complaints concerning the Firm's professional conduct may also be directed, where applicable, to [RELEVANT REGULATORY OR PROFESSIONAL BODY]. Nothing in this Policy limits any non-waivable right a person may have under Applicable Law to challenge a disclosure through appropriate legal channels.
19. Changes to This Policy
The Firm may revise this Policy from time to time to reflect changes in its practices or Applicable Law. The effective date at the top of this page indicates when it was last revised.
20. Contact
Authorities and other parties seeking to submit a Lawful Request, and individuals with questions about this Policy, may contact:
[FIRM LEGAL NAME]
Legal Compliance Contact: compliance@loramora.example
Address: [FIRM OFFICE ADDRESS]