Code of Professional Responsibility and Accountability (CPRA)
Section 30. Duty of confidentiality of members of a law firm. - A lawyer may disclose the legal matters entrusted by a client of the firm to the partners and associates, as well as paralegals, legal assistants, law clerks, legal researchers, law interns, and other non-legal staff, who are or will be involved in the handling of the client's account, unless expressly prohibited by the client.
A lawyer directly entrusted with a client's confidences shall adopt necessary measures to prevent other members of the law firm, both legal and non-legal, to whom the client's confidences have been shared, from disclosing or using them, without the written informed consent of the client.