The safest reply confirms nothing about the reviewer. ABA Formal Opinion 496 concluded that a negative online review is not itself a controversy triggering the self-defence exception to confidentiality — so the instinct to explain your side is the specific thing that opinion says you cannot do publicly. Your state may treat it differently.
The instinct is the problem
A former client posts something unfair. Everything in you wants to correct the record — and correcting it requires facts. What actually happened. What they were told. What they didn't do.
Those facts are confidential. That is the whole difficulty, and it's why generic reputation-management advice is dangerous here. "Respond professionally and give your side" is fine guidance for a restaurant. For a lawyer it describes an ethics problem.
What ABA Formal Opinion 496 concluded
The ABA Standing Committee on Ethics and Professional Responsibility issued Formal Opinion 496 in January 2021, addressing exactly this. Its reasoning runs roughly as follows.
Model Rule 1.6(a) prohibits revealing information relating to a client's representation without informed consent or implied authorisation. The Committee worked through the exceptions in 1.6(b) and found only the self-defence provision — 1.6(b)(5) — even arguably relevant.
It concluded that a negative online review, by itself, is not a "controversy between the lawyer and the client" within the meaning of that provision, given its informal nature. So the exception does not open.
It went further: even if a posting did rise to that level, a public response would not be "reasonably necessary" to establish a claim or defence, because disclosure is permitted only to the extent reasonably necessary for a stated purpose, and a public reply exceeds that.
The opinion also relies on the earlier Formal Opinion 480 for a point that surprises people: information relating to a representation stays confidential even when it appears in the public record. That a fact sits in a filed document does not make it yours to repeat.
The part that matters most for a national audience
ABA formal opinions interpret the Model Rules. They are persuasive, not binding. Your obligations come from your own state's rules and your own state's interpretations.
The Committee itself surveyed state opinions on this question, agreed with the majority — and expressly disagreed with a Colorado opinion that would have permitted limited disclosure. That disagreement is the useful detail: it is direct evidence, from the ABA's own analysis, that jurisdictions differ on precisely this point.
So the practical position is: 496 tells you what the majority view looks like and why. It does not tell you what you may do. Check whether your state has an opinion on point, because if it does, that one governs.
What the opinion suggests instead
The best practices it sets out are notably conservative:
- Consider not responding at all. Responding draws attention to the review and can invite further posts from someone already unhappy. The opinion suggests serious thought be given to silence in every situation.
- Ask the platform to remove it, where the post violates the host's terms.
- Invite the conversation offline and try to resolve it directly.
- If the poster is not a client or former client, you may say so — no confidentiality duty is owed to someone who was never a client. This is the one substantive statement the opinion identifies as available, and it's worth knowing precisely because it's so narrow.
Notice what's absent: any version of "explain what really happened."
Why the identity problem bites first
This catches people who are otherwise careful.
Confirming that the reviewer was a client is itself information relating to a representation. A reply opening "we're sorry your matter didn't resolve as you'd hoped" has already confirmed a relationship existed and characterised its outcome.
That's why the safest replies read as bland as they do. Speaking to your general standard of practice, without confirming or denying anything about an individual, isn't weak writing. Under this analysis it's close to the only writing available.
What you can and can't conclude
Verified — What Formal Opinion 496 says. It's published and you can read it in full.
Pending — What applies to you. Adopting states vary, several have their own opinions, and at least one has reached a different conclusion. Multi-state practitioners have the added question of which state's rules govern a response posted on a national platform — genuinely unsettled, and worth asking about rather than assuming.
Unconfirmed — Whether responding or staying silent is better for your reputation. That's a marketing judgment, not an ethics one, and the two can point in opposite directions. The ethics analysis constrains what you may write; it doesn't tell you whether writing anything is wise.
The practical position
Decide your policy before you need it, and write it down. Firms that improvise a reply while angry are the ones that end up explaining themselves later — not because they intended to disclose anything, but because the reply felt reasonable while they were writing it.
Take the policy to your state bar's ethics advisory service before you adopt it. Most run one, and this is exactly the kind of question they exist to answer.
Reputation is one of the areas we look at in an audit, and it's where the right answer for a law firm diverges most from general marketing advice. If the question is your site copy rather than a review reply, that's a different rule — see how do I tell if my site copy crosses bar advertising lines. More on how we work with boutique law firms.
SEO Doctor is a marketing diagnostics firm. We are not lawyers and this is not legal advice. ABA formal opinions are persuasive rather than binding, state rules and interpretations vary, and at least one jurisdiction has reached a different conclusion on this question. Confirm anything affecting your own conduct with your state bar's ethics advisory service or with counsel.