Offshore Legal Staffing: What the Ethics Rules Actually Require

What is offshore legal staffing?

Offshore legal staffing is the use of legal support personnel located outside the United States — paralegals, legal administrative staff, document reviewers — working on a U.S. law firm's matters under the supervision of a licensed attorney at that firm. It is a delivery model, not a category of legal service.

The distinction that matters throughout: these are support staff performing work under supervision. They are not practicing law, and describing them otherwise creates a problem that has nothing to do with geography.

The market is substantial. Estimates for global legal process outsourcing run between roughly $20 billion and $30 billion for 2024–2025 depending on which research house you ask, with offshore delivery accounting for somewhere near 77 to 79 percent of it. Thomson Reuters' 2025 Legal Department Operations Index found 43% of chief legal officers planning to send more work outside their organizations — seventeen percentage points above the prior year.

So this is no longer novel. Large firms and corporate legal departments have done it at scale for two decades. What changed recently is that it became viable for small firms.

Is offshore legal support ethical?

Yes, with conditions. ABA Formal Opinion 08-451 states that a lawyer may outsource legal and nonlegal support services, domestically or overseas, provided the lawyer remains ultimately responsible for delivering competent representation to the client. Every state authority to address it since has reached the same conclusion.

That opinion, issued in August 2008, is the foundational document. Its requirements, in plain terms:

Competence stays with you. Under Model Rule 1.1, you remain responsible for the quality of the representation regardless of who performed which task.

Supervision stays with you. Rules 5.1 and 5.3 require reasonable efforts to ensure the provider's conduct is compatible with your own professional obligations.

Disclosure and consent. The opinion says appropriate disclosure should be made about the use of outside lawyers and nonlawyers, and consent obtained where they will receive information protected by Rule 1.6.

Conflicts screening. The provider must not be working for adversaries on the same or substantially related matters.

Reasonable fees under Rule 1.5.

No assisting unauthorized practice under Rule 5.5.

The opinion also acknowledges directly that overseas arrangements make supervision harder — distance, time zones, differing legal systems — and recommends reference and background checks on the provider.

Several state and local bars addressed overseas outsourcing specifically, and the pattern is consistent: permitted, but treated as higher-risk than domestic, warranting clearer consent and tighter access controls. Florida Bar Opinion 07-2, North Carolina 2007 Formal Ethics Opinion 12, and New York City Bar Formal Opinion 2006-3 all land there. Florida's opinion is notable for stating expressly that nothing in it should be read as an endorsement, and for directing lawyers to familiarize themselves with the privacy laws of the offshore jurisdiction.

Do I have to tell my client?

In Illinois, ordinarily yes. ISBA Opinion 19-04 states that when a lawyer outsources legal or legal-support services, including to other countries, "disclosure to, and informed consent by, the client will ordinarily be required." It is always required where a lawyer transfers complete or substantial responsibility for a matter to an unaffiliated lawyer.

This is the question providers skip, and it's the one with real consequences.

That last point comes from Illinois Rule of Professional Conduct 1.2(e), which is unusual — most states don't have an equivalent, and Illinois has had it since 1980. Worth knowing if you practice in more than one jurisdiction, because the Illinois requirement is stricter than the baseline.

North Carolina goes further still, requiring the client's advance informed consent. New York City's opinion requires securing consent before disclosing confidential information to a foreign provider.

What generally drives whether consent is required:

Does the provider receive confidential client information? If yes, Rule 1.6 is engaged and consent moves from advisable to expected.

Is the work substantive or ministerial? Purely administrative support under close supervision is treated more like an in-house assistant. Substantive legal work is not.

How is it billed? Separately billed or marked-up arrangements attract more scrutiny than costs passed through at actual cost.

My practical advice: have the conversation. Attorneys tend to assume clients will object, and in my experience clients mostly want to know that someone competent is doing the work and that their information is protected. A client who finds out later, from someone else, reacts very differently than a client you told up front.

Who supervises the work?

You do. Under ABA Model Rule 5.3 — adopted in substance in Illinois — a lawyer is responsible for the conduct of nonlawyers working on their matters, and that obligation does not transfer to a vendor. No contract term, indemnity, or service agreement changes it.

The 2012 amendments to Rule 5.3 added commentary addressing nonlawyers outside the firm specifically. What the required supervision looks like scales with circumstances: the education, experience and reputation of the nonlawyer; the nature of the work; the terms of any arrangements protecting client information; and the legal and ethical environment of the jurisdiction where the work is performed.

That last factor is the one that makes offshore different from domestic. You're expected to have thought about the enforceability of confidentiality obligations in the provider's country.

And the duty doesn't end at vendor selection. Illinois guidance is explicit that protecting client information requires ongoing monitoring, not a one-time due diligence exercise.

What this means practically. A good provider makes supervision workable — detailed work logs, matter-level reporting, a named person you can reach rather than a support queue. A poor provider stays vague about it and lets you assume the obligation went away. It didn't.

How is confidentiality protected?

Rule 1.6 requires reasonable efforts to prevent unauthorized disclosure of client information, and that obligation applies identically whether the person handling the file sits in Chicago or Bogotá. The safeguards ethics authorities expect are specific and worth asking about directly.

From the opinions across jurisdictions, the expected controls are:

• Written confidentiality agreements with the provider, with remedies for breach
• Access limited to only the information needed for that specific matter — and explicitly no access to other clients' files
• Secure transmission and storage, encryption, access controls, passwords
• Conflict-check questionnaires
• Background and reference checks on the provider and any intermediary
• Documented supervision
• Attention to the data-protection regime and enforceability environment of the provider's jurisdiction

One structural point that gets missed. Florida's opinion specifically addresses subcontracting chains — the provider you vetted may not be the entity doing the work. Ask directly whether any portion is subcontracted, and to whom.

That isn't hypothetical. The clearest documented offshore confidentiality incident involved a medical transcription chain: in 2003, a Karachi-based transcriptionist at the end of a three-subcontractor chain threatened to post UCSF Medical Center patient files publicly over a pay dispute, and emailed actual files to prove she could. UCSF had not known the work reached overseas at all. It isn't a law firm case, but the failure mode — a chain nobody had mapped — transfers directly.

Can I bill offshore support to my client?

Yes, with a distinction that matters. Under ABA Formal Opinions 93-379 and 00-420, a firm may bill outsourced work as a legal fee and charge a reasonable total including overhead and profit. Pass the same cost through as a disbursement and you may charge only actual cost — unless the engagement letter disclosed a surcharge up front.

Almost nobody writes about this and it's a genuine trap.

The practical rule: if you intend to profit from delegated work, bill it as a fee, with the total reasonable under Rule 1.5. If you bill it as an expense line, bill what it cost you — unless you disclosed a surcharge in the engagement letter and the client agreed to it. Presenting an undisclosed markup as a disbursement is the version that creates a problem.

Employee or contractor: the distinction that matters most

Whether the offshore staff are employees of the provider or independent contractors sourced through a marketplace changes your risk profile more than which country they're in. An employer-of-record model produces enforceable contracts, stable assignment, and accountability. A marketplace produces neither.

This is where I'd focus evaluation, and it's the part rate comparisons obscure entirely.

A marketplace or contractor model refers you to independent workers. They can take other work, leave without notice, and are typically not covered by the platform's insurance. Confidentiality obligations run to individuals you have no relationship with. Turnover is high, which means the institutional knowledge that makes support valuable never accumulates.

A direct-employee or employer-of-record model means the provider legally employs the person in their own country. The employment contract carries confidentiality and intellectual-property terms enforceable there, and that person is assigned to your firm rather than shared. Supervision has somewhere to attach.

Rule 5.3 asks you to weigh the provider's arrangements protecting client information. A marketplace's answer to that question is structurally weaker than an employer's, regardless of price.

Five questions worth asking any provider:

1. Are the staff your employees, or contractors you refer to me?
2. Is any part of the work subcontracted, and to whom?
3. What is your vetting process, in actual steps?
4. What confidentiality instruments bind them, and are those enforceable in their jurisdiction?
5. Do you carry professional liability coverage on the people doing my work — in writing?

What actually goes wrong

The documented failures in offshore support trace to unmapped subcontracting chains, undefined task boundaries, and supervision that existed on paper only — not to the location of the worker. The evidence base is thinner than either advocates or critics suggest.

Two incidents are cited repeatedly, and both are worth knowing accurately.

The 2003 UCSF transcription case described above — a subcontracting chain the client institution didn't know existed. And in 2005, employees at a call center in Pune, India stole roughly $350,000 from four Citibank customers by obtaining PINs during support calls; more than a dozen people were arrested.

Neither is a law firm. Both are about controls, not geography.

What I'd want you to weigh honestly: I could not find a U.S. bar discipline case or malpractice judgment squarely attributed to offshore supervision failure, and no case treating properly supervised offshore support as unauthorized practice of law. The one lawsuit that tried to enjoin foreign legal outsourcing was voluntarily withdrawn in 2008.

But absence of reported cases is not evidence that the risk is small. It reflects limited public reporting and the general difficulty of enforcement in this area. I'd rather tell you the record is thin than tell you it's clean.

Independent comparative quality data — offshore versus domestic legal support — essentially doesn't exist in public. Nearly every "quality maintained, costs cut 50 to 70 percent" figure you'll encounter comes from a vendor. Including, to be fair, from vendors like us. Treat all of it as directional.

A note on our own arrangement

I opened by disclosing that we sell this, so it's fair to say plainly what we do.

Our offshore team members in Colombia and the Philippines currently provide executive assistant and administrative support, engaged full-time through employer-of-record partners who serve as the legal employer in-country. Paralegal work, and anything touching privileged client files, is performed by Chicago-based staff. Each offshore team member signs a non-disclosure agreement directly with us before starting.

So the chain runs: client → Amata → employer-of-record partner → the individual. Three links beyond you, each under written agreement.

I'm spelling that out because earlier in this piece I told you to ask every provider for exactly that. It would be a poor article that made the case and then dodged the question. A provider who tells you there's no chain either hasn't looked, or is hoping you won't.

Frequently asked questions

The version nobody sells you

Twenty-four years in, having supported more than 1,800 firms, I've come to think the offshore conversation gets framed backwards.

It's usually presented as a cost decision with an ethics footnote. It's actually an ethics decision with a cost benefit — and the firms that treat it the second way get better outcomes, because they ask harder questions before signing and end up with providers who can answer them.

The rules aren't obstacles here. They're a checklist. Written confidentiality terms, matter-scoped access, no unmapped subcontractors, documented supervision, a conversation with your client. A provider who can satisfy all five is a provider worth having. One who can't is going to be cheaper, and you'll find out why.

Ask these questions of whoever you're evaluating. If you want to test them on us first, we're at 312.924.0200 or [email protected] — and if the answers don't satisfy you, don't buy.