Attorneys have an ethical duty to protect their clients’ confidential information under the law, but most professional services providers are not automatically bound to do the same. One way the parties to a professional services contract can manage the risks accompanying the necessary access to sensitive information is to address them in a confidentiality statement.