I. Introduction
Attorney-client privilege is among the most powerful protections available to businesses engaged in litigation or regulatory proceedings. A document that qualifies for protection cannot ordinarily be compelled from a party, its counsel, or anyone who has lawfully received it within the confines of the attorney-client relationship. Yet privilege is also fragile. The general rule is that voluntary disclosure of a privileged communication to a third party — someone outside the attorney-client relationship — operates as a waiver of the privilege, not only as to the specific document disclosed but potentially as to the entire subject matter to which it relates.
For businesses, this rule creates a practical tension of the first order. Legal advice rarely exists in a vacuum. Companies share legal opinions with auditors, banks, insurers, joint venture partners, and regulators. Lawyers consult with financial experts, technical specialists, and public relations advisors. Subsidiaries share legal analysis prepared by group counsel with parent companies and affiliates. In each of these situations, the question arises: does the disclosure destroy the privilege that would otherwise attach to the communication?
The answer, fortunately, is not always yes. The law has developed a series of well-recognized exceptions and doctrines that permit the disclosure of privileged material to certain categories of third party without forfeiting the protection of the privilege. These include the agency and representative exception (covering agents who assist in the provision of legal advice), the common interest doctrine (covering co-parties and others with aligned legal interests), disclosure to auditors in specific circumstances, the selective waiver doctrine (in limited jurisdictions), and the treatment of inadvertent disclosure. Each of these doctrines is carefully circumscribed, and misjudging their limits can be catastrophic — triggering subject-matter waiver across an entire category of privileged communications at the very moment that protection matters most.
This article examines each of these doctrines in turn, explains the conditions that must be met for a disclosure to a third party to be treated as non-waiving, and offers practical guidance for businesses seeking to navigate the difficult terrain between necessary information-sharing and inadvertent privilege destruction.
II. The General Rule: Disclosure to Third Parties Waives Privilege
To understand when disclosure does not waive privilege, it is necessary first to understand why disclosure ordinarily does so. Attorney-client privilege protects communications that are intended to be confidential. The confidentiality requirement is not merely a formality; it is the doctrinal foundation on which the entire privilege rests. As the Supreme Court explained in Upjohn Co. v. United States, 449 U.S. 383 (1981), the privilege exists to encourage clients to make full and candid disclosure to their lawyers, and that purpose is served only where the client has a reasonable expectation that the communication will remain private.
When a client discloses a privileged communication to a third party, the confidential character of the communication is broken. Courts reason that the client, by sharing the information voluntarily, has demonstrated that they did not treat the communication as genuinely confidential. Moreover, permitting a client to selectively disclose privileged material to some parties while withholding it from others — typically adversaries — would allow privilege to operate as a sword rather than a shield, enabling a party to gain strategic advantage through the revelation of self-serving legal opinions while suppressing damaging ones. To prevent this abuse, courts have adopted the principle of subject-matter waiver: disclosure of one privileged document on a given topic may waive the privilege as to all documents on the same topic.
Against this backdrop, the exceptions described below must be understood as carefully limited departures from a demanding general rule. They are available only where the policy rationale for the general rule — preventing strategic manipulation of privilege — is absent, typically because the disclosure was made to a party whose interests are sufficiently aligned with those of the client, or because the disclosure was necessary to enable the lawyer to provide effective legal advice.
III. Agents, Intermediaries, and Functional Equivalents of the Client
The first and most well-established exception covers disclosures to persons who, although technically third parties, function as agents of the client or the attorney for purposes of the legal representation. The privilege is not waived when a communication is shared with a person whose participation is necessary to facilitate the attorney-client relationship — someone who, in effect, stands within the circle of confidentiality even though they are not the lawyer or the client.
A. Agents of the Lawyer
Lawyers routinely work with a range of professional advisors and support staff whose input is necessary to provide competent legal advice. Expert witnesses retained to advise counsel on technical matters, forensic accountants engaged to analyze financial data in connection with litigation, jury consultants retained to assist in trial preparation, and public relations specialists engaged to advise on the legal dimensions of a communications strategy have all been held, in appropriate circumstances, to fall within the protected sphere of the attorney-client relationship. The key principle is that these individuals are functioning as agents or assistants of the lawyer, and their receipt of privileged information does not break the circle of confidentiality because their role is to assist in the delivery of legal advice.
The leading case establishing this principle is United States v. Kovel, 296 F.2d 918 (2d Cir. 1961), in which Judge Friendly held that an accountant employed by a law firm and working on matters requiring both legal and accounting expertise could receive privileged communications without destroying the privilege. The Kovel doctrine requires that the third party’s assistance be necessary for the lawyer to give effective legal advice, and that the communication with the third party be made in confidence. It does not extend to professionals whom the client engages independently for their own business purposes, even if those professionals also happen to consult with the client’s lawyers.
The distinction is critical and is the source of frequent error. A company that engages an investment bank to advise on a transaction and also consults its lawyers cannot claim that the investment bank falls within the Kovel exception simply because the lawyers and bankers happen to communicate. The investment bank has been engaged for independent business purposes; it is not functioning as an agent of the lawyers. Communications shared with the bank in its capacity as financial advisor are not privileged, even if the substance of those communications overlaps with legal advice.
B. Corporate Affiliates and Employees
Within the corporate context, the attorney-client privilege extends to communications between corporate counsel and the employees and officers of the corporate client, as established in Upjohn. The privilege is that of the corporate entity, but it protects communications with any employee whose information is sought by counsel in connection with providing legal advice to the organization, provided that the employee is aware that the purpose of the communication is to obtain legal advice.
More complex questions arise when privileged communications are shared across corporate families — between a parent company and its subsidiaries, or among sibling entities within the same group. Courts have generally recognized that affiliated entities may share a common attorney-client relationship, particularly where they share common counsel and the legal advice addresses matters of common legal concern. However, this is not automatic: where subsidiaries have separate legal interests or separate outside counsel, sharing privileged communications across the group may not preserve the privilege. Businesses operating through complex corporate structures should seek legal advice on whether intra-group sharing of legal opinions preserves privilege in the jurisdictions that matter most to them.
IV. The Common Interest Doctrine
The common interest doctrine — sometimes referred to as the joint defense privilege or the community of interest doctrine — is one of the most practically important exceptions to the general rule of waiver. It permits parties who share a common legal interest to exchange privileged communications without destroying the privilege, even where those parties are separately represented and are not engaged in litigation against a common adversary at the time of the exchange.
A. The Scope of the Doctrine
The doctrine applies when two or more parties with a shared legal interest agree, expressly or impliedly, to share privileged information in furtherance of that common interest. The most obvious application is in co-defendant litigation: two defendants who face a common plaintiff may share trial strategies, witness analyses, and legal assessments without waiving privilege against the plaintiff, provided that the sharing is made in furtherance of their common defense and pursuant to a common interest agreement. The privilege is not waived as to third parties — including adversaries — even though the specific communication has been disclosed to another party.
Courts have extended the doctrine beyond the co-defendant context to cover a wide range of situations in which parties share a common legal interest short of active co-litigation. These include parties engaged in parallel regulatory investigations who share common counsel or coordinate their responses; business partners engaged in a joint venture who exchange legal advice concerning the venture; and a seller and purchaser in a transaction who share legal opinions concerning specific legal risks identified during due diligence. In each case, the key requirement is that the parties share a genuinely common legal interest — not merely a common commercial interest — in the subject matter of the privileged communication.
B. The “Legal” Interest Requirement
The requirement that the shared interest be a legal interest, rather than a purely commercial or business interest, is the most frequently litigated aspect of the doctrine and the source of most adverse rulings. Courts have consistently held that a shared commercial goal — maximizing the value of a transaction, achieving a particular business outcome, or avoiding regulatory disruption — is not sufficient to invoke the common interest doctrine. The parties must share an interest in the legal analysis itself: in a legal right being asserted, a legal obligation being assessed, or a legal risk being managed.
The line between legal and commercial interest is not always easy to draw, and courts have reached different conclusions on similar facts. A useful illustration is the context of merger and acquisition transactions. The Second Circuit held in In re Teleglobe Communications Corp., 493 F.3d 345 (3d Cir. 2007), that affiliated entities sharing common counsel could assert common privilege under appropriate circumstances, but subsequent courts have frequently found that the sharing of legal due diligence reports between buyer and seller — two parties with opposing commercial interests in the same transaction — does not satisfy the legal interest requirement, because the parties’ interests, though aligned in completing the transaction, are adverse with respect to the price and terms. By contrast, where buyer and seller share privileged communications specifically in connection with a shared legal exposure — such as environmental liability attaching to the target’s assets — the common interest doctrine may apply.
C. Common Interest Agreements
Although the common interest doctrine can arise implicitly, businesses are strongly advised to memorialize it in a written common interest agreement before sharing privileged material. Such an agreement specifies the scope of the common interest, confirms that all materials shared thereunder are privileged and confidential, establishes that neither party waives privilege by virtue of the sharing, and provides for the return of materials if the common interest terminates. A well-drafted agreement not only strengthens the evidentiary basis for asserting the doctrine but also serves important practical functions: it clarifies what has been shared and in what capacity, reduces the risk that a court will find the sharing was for business rather than legal purposes, and provides a contractual remedy if one party subsequently attempts to use shared materials adversely.
V. Disclosure to Auditors and Financial Advisors
The disclosure of privileged legal advice to independent auditors is a matter of particular concern for public companies and other entities subject to mandatory financial reporting requirements. Auditors routinely request access to legal opinions, correspondence with regulatory authorities, and litigation risk assessments as part of their audit procedures. The question of whether providing these materials to auditors destroys privilege has been extensively litigated, and the law is not entirely settled.
The majority rule in U.S. federal courts is that disclosure of privileged communications to independent auditors waives the privilege, because the auditor is a third party whose interests are not aligned with those of the client and who may be required to disclose the information to regulators or the public. The leading case is Medinol Ltd. v. Boston Scientific Corp., 214 F.R.D. 113 (S.D.N.Y. 2002), which held that the voluntary disclosure of privileged communications to auditors constituted waiver regardless of the fact that disclosure was made in connection with a regulatory requirement. The court reasoned that the auditor’s independence — the very quality that makes audited financial statements reliable — is incompatible with the confidentiality that privilege requires.
Some courts have reached a different conclusion, recognizing a limited exception for disclosures that are required by regulatory obligation and that carry an implied expectation of confidentiality enforceable against the auditor. However, this minority view has not been widely adopted, and businesses should not assume that it will be applied in any given jurisdiction. The prudent approach is to treat disclosures to auditors as potentially privilege-waiving and to structure legal opinions and litigation assessments provided to auditors with care, limiting them to the minimum information necessary and, where possible, to factual summaries rather than privileged legal analysis.
The related question of whether disclosure to financial advisors — investment banks, financial consultants, and similar professionals engaged in connection with transactions — waives privilege is governed by the same general principles. Where the financial advisor is retained independently by the client for business purposes, the disclosure will ordinarily waive privilege. Where the financial advisor is engaged specifically to assist counsel in providing legal advice — an application of the Kovel doctrine — privilege may be preserved. The distinction, as noted above, depends on the nature and purpose of the engagement.
VI. Disclosure to Insurers
Businesses with liability insurance coverage routinely disclose legal analyses, litigation assessments, and counsel’s opinions to their insurers as part of the claims notification and coverage process. Courts have recognized that this type of disclosure does not automatically waive privilege, on the basis that the insurer’s interest in the outcome of covered litigation is sufficiently aligned with the insured’s that the two can be regarded as sharing a common interest. The reasoning is that both the insured and the insurer benefit from a favorable outcome in covered litigation, and that the flow of privileged information between them is necessary to enable the insurer to fulfill its obligation to defend and indemnify.
This analysis is strongest in first-party coverage situations, where the insurer’s interests and the insured’s are genuinely aligned. It becomes more complicated where coverage is disputed — for example, where the insurer has issued a reservation of rights or has denied coverage — because in those circumstances the insurer’s interests may be adverse to the insured’s with respect to the coverage question, even if they remain aligned on the merits of the underlying litigation. Courts have reached varying conclusions in reservation-of-rights situations, and businesses facing coverage disputes should seek specific advice on the privilege implications of communicating with their insurers.
VII. Selective Waiver in Government Investigations
One of the most contested privilege questions in corporate practice is whether a company can disclose privileged materials to a government regulator — the Department of Justice, the Securities and Exchange Commission, or a state attorney general — without waiving privilege against private litigants and other adversaries. Known as the selective waiver doctrine, this theory holds that disclosure to a government authority for a specific and limited purpose does not constitute a general waiver of privilege against all third parties, particularly where the disclosure is made pursuant to a confidentiality agreement with the regulator.
The selective waiver doctrine has had a troubled history in U.S. courts. The Eighth Circuit recognized it in Diversified Industries, Inc. v. Meredith, 572 F.2d 596 (8th Cir. 1977), holding that a company’s voluntary disclosure of privileged documents to the SEC pursuant to a confidentiality agreement did not waive privilege against a private plaintiff. However, the majority of circuits that have subsequently addressed the question have rejected selective waiver. The Second, Third, Fourth, Sixth, Ninth, Tenth, and D.C. Circuits have all held, in varying formulations, that disclosure to a government authority waives privilege generally, regardless of any confidentiality agreement with the regulator.
The courts rejecting selective waiver have reasoned that the confidentiality agreement with the regulator does not restore the confidential character of the communication, because confidentiality for privilege purposes must exist at the time the communication is made — not as a result of a subsequent contractual arrangement. They have also noted that allowing companies to disclose to regulators selectively, while withholding the same materials from private litigants, would permit strategic manipulation of the privilege in precisely the manner that the waiver doctrine is designed to prevent.
For businesses facing government investigations, the practical implications are serious. A decision to produce privileged materials to the DOJ or SEC in connection with an internal investigation or enforcement proceeding may expose those materials to private plaintiffs — including securities class action claimants, derivative suit plaintiffs, and civil RICO litigants — in subsequent litigation. Companies should seek detailed legal advice before making any voluntary disclosure to government authorities, and should carefully consider whether the benefits of cooperation with regulators outweigh the risk of broader privilege waiver.
VIII. Inadvertent Disclosure
Not all disclosures of privileged material to third parties are intentional. In the context of modern litigation, with its massive volumes of electronically stored information and tight production schedules, privileged documents are sometimes produced inadvertently to opposing counsel or other parties. The question of whether an inadvertent disclosure destroys privilege — and, if so, whether it can be clawed back — is addressed by Federal Rule of Evidence 502, enacted in 2008 specifically to provide greater certainty in this area.
Rule 502(b) provides that the inadvertent disclosure of a privileged communication does not operate as a waiver if three conditions are met: the disclosure was inadvertent; the holder of the privilege took reasonable steps to prevent disclosure; and the holder promptly took reasonable steps to rectify the error, including, if applicable, following the procedures prescribed by Federal Rule of Civil Procedure 26(b)(5)(B). Rule 26(b)(5)(B) in turn establishes a clawback procedure under which the producing party may notify the receiving party of the inadvertent production, whereupon the receiving party must promptly return or destroy the materials and may not use them pending a court determination of whether privilege applies.
The Rule 502 framework has significantly reduced the risk of permanent waiver through inadvertent production in federal proceedings, but it does not eliminate it. A party that fails to take reasonable precautions to screen for privilege before production — by failing to implement a privilege review protocol, by using inadequate search terms, or by failing to train document review personnel — may find that a court declines to apply Rule 502(b), on the basis that the disclosure was not truly inadvertent or that the reasonable precautions requirement was not satisfied. Moreover, Rule 502 applies only in federal proceedings; state courts may apply different rules, and parties litigating in multiple jurisdictions may face inconsistent treatment of the same disclosure.
The ability to enter into “clawback agreements” under Rule 502(d) provides an additional layer of protection. Parties to federal litigation can agree — and courts can order — that the production of privileged materials in discovery does not constitute a waiver either in the pending proceeding or in any other federal or state proceeding. A well-drafted Rule 502(d) order provides the strongest available protection against waiver through inadvertent production, and litigants should routinely seek such orders at the outset of any significant discovery proceeding.
IX. Disclosure in the Context of ADR and Settlement
Businesses frequently share privileged materials in the context of mediation, arbitration, and other forms of alternative dispute resolution, as well as in settlement negotiations. Two distinct sets of protections are relevant in these circumstances: attorney-client privilege and the separate mediation privilege or settlement communications protections recognized under Federal Rule of Evidence 408 and analogous state statutes.
Where a party discloses privileged materials to a mediator in the course of court-ordered or voluntary mediation, most courts have held that this does not constitute a waiver of privilege as against other parties, on the basis that the mediator functions as a confidential neutral and that the disclosure is made pursuant to the expectation — indeed, the design — of the mediation process. Many jurisdictions have enacted specific mediation privilege statutes that independently protect all communications made in mediation from disclosure, providing an additional layer of protection that operates independently of attorney-client privilege.
Disclosure of privileged materials in settlement negotiations is more complex. The production of legal opinions to an opposing party — even in the context of settlement discussions — carries significant waiver risk and should be done only after careful consideration and ideally pursuant to an express non-waiver agreement or a court order. Oral or written statements made in settlement negotiations are generally protected from use at trial under Rule 408, but this protection does not preserve attorney-client privilege; a privileged document voluntarily given to an adversary in settlement discussions may well be found to have been produced without any expectation of confidentiality.
X. Practical Guidance for Businesses
The doctrines described in this article provide a framework for managing the tension between necessary information-sharing and privilege preservation, but they require careful and proactive management. The following practical measures should be considered by any business for which attorney-client privilege is a significant strategic asset.
First, businesses should implement clear policies on the distribution of legal opinions and privileged communications. Access to privileged materials should be limited to those who need them for legitimate business or legal purposes, and the policies should address specifically when and how sharing with external parties — auditors, insurers, joint venture partners, lenders — may occur. All distributions of privileged materials should be documented, so that if privilege is later challenged, the organization can demonstrate the purpose and basis for each disclosure.
Second, before sharing privileged materials with any third party, counsel should be consulted to determine whether one of the recognized exceptions applies and whether a written agreement — a common interest agreement, a clawback agreement, or a confidentiality agreement — should be put in place to protect the privilege. A non-disclosure agreement alone is not sufficient to preserve privilege; the agreement must address privilege specifically and should be reviewed by counsel familiar with the applicable law.
Third, in the context of government investigations, businesses should carefully analyze the privilege implications of any voluntary production before making disclosures to regulators. The decision to cooperate with an investigation is a complex one that implicates many considerations beyond privilege, but the risk of broader waiver should always be weighed and, where possible, mitigated through the negotiation of robust confidentiality agreements with the relevant authority — even recognizing that such agreements may not be recognized as preventing waiver in subsequent civil litigation in most circuits.
Fourth, document management and litigation hold practices should be designed to minimize the risk of inadvertent disclosure. This includes implementing robust privilege review protocols, using technology-assisted review to identify potentially privileged materials early in the discovery process, training document review personnel on privilege identification, and seeking Rule 502(d) orders at the outset of significant litigation. The cost of a thorough privilege review is almost always lower than the cost of litigating a waiver dispute — and far lower than the cost of producing materials that would have been protected had appropriate care been taken.
XI. Conclusion
Attorney-client privilege is a powerful protection, but it is not self-executing. It requires active management, and it can be lost — sometimes irreversibly — through careless handling of privileged materials. At the same time, the law recognizes that the absolute prohibition on third-party disclosure is incompatible with the realities of modern business practice, and has developed a series of well-established doctrines that permit privileged communications to be shared in defined circumstances without sacrificing the protection of the privilege.
These exceptions — the agency exception for those who assist in the provision of legal advice, the common interest doctrine for parties with aligned legal interests, the qualified protection available for disclosures to insurers, and the Rule 502 framework for inadvertent disclosure — are genuinely valuable tools for businesses that must navigate the tension between transparency and confidentiality. But they are tools that must be used with precision. The boundaries of each doctrine are carefully drawn, and conduct that falls outside those boundaries — even marginally — may result in waiver at the very moment that confidentiality matters most.
The overarching message for business clients is to treat privilege not as an automatic right but as an asset that requires deliberate stewardship. Every significant sharing of legal advice with a third party should be preceded by a privilege analysis, and legal counsel should be involved in designing the frameworks — agreements, policies, and procedures — through which that sharing occurs. Our firm is well-positioned to advise on all aspects of privilege management, including in complex, cross-border matters where multiple legal regimes may apply simultaneously.
This article is provided for informational and educational purposes only and does not constitute legal advice. The law in this area is subject to continuing development and may vary depending on the specific facts, circumstances, and jurisdiction of each case. Businesses should consult qualified legal counsel before relying on any of the principles discussed herein.