If you're an attorney – or a technician tasked with protecting attorney data, take note of important California Opinion 2010-179 on the duties of confidentiality and competence in the handling of client data (warning: opens seven-page PDF).
Or, if you're pressed for time, see this excellent treatise prepared by the firm Mayer Brown.