Attorney-client privilege is one of the oldest and most fundamental protections in the American legal system. It reflects a basic insight that the legal system works better when people can speak candidly with their lawyers without fear that those communications will later be used against them. For businesses, the privilege is not just an abstract legal concept — it is a practical tool that can mean the difference between keeping your legal strategy confidential and having it exposed in litigation or a regulatory investigation.
Yet attorney-client privilege is also fragile in ways that many business owners do not appreciate. It can be waived accidentally, sometimes by actions as routine as forwarding an email. The rules that govern it are more nuanced than most people realize, and the consequences of inadvertent waiver — losing the protection for communications that you expected to be confidential — can be severe. This article explains what the privilege actually covers, where it does not apply, how it can be lost, and what you can do to protect it.
What Attorney-Client Privilege Actually Protects
Attorney-client privilege protects confidential communications between an attorney and their client that were made for the purpose of obtaining or providing legal advice. Each element of that definition matters.
The communication must be between an attorney (or someone supervised by an attorney in the context of legal advice) and a client. The communication must be confidential — meaning it was not made in the presence of, or later disclosed to, people who are not part of the attorney-client relationship. And the communication must have been made for the purpose of obtaining or providing legal advice, not for some other purpose like business strategy, public relations, or general information-sharing.
When all of these elements are present, the privilege means that neither the attorney nor the client can be compelled to disclose the contents of the communication in litigation or a government investigation, absent specific exceptions or waiver. The attorney cannot be called as a witness and required to reveal what the client told them. Documents reflecting privileged communications are protected from production in discovery. The client cannot be ordered to disclose what advice they received.
It is worth being precise about what is protected: the communication itself. Attorney-client privilege does not protect the underlying facts from disclosure. If you told your lawyer about a particular transaction, the transaction itself is not privileged just because you discussed it with your attorney. The other side in litigation can ask you about the transaction. They cannot ask you what your lawyer said about it, or what you told your lawyer about it in confidence.
What Attorney-Client Privilege Does Not Cover
Understanding the limits of the privilege is as important as understanding what it covers, because people who mistakenly believe something is privileged when it is not may make decisions based on a false sense of protection.
Business Advice Is Not Privileged
Many attorneys also serve as trusted business advisors, and the line between legal advice and business advice is not always obvious. But it matters for privilege purposes. Communications with your attorney that convey business strategy, market analysis, financial projections, or operational recommendations — rather than legal analysis and advice — may not be protected by attorney-client privilege. Courts have held that the privilege applies when the attorney is acting in their professional legal capacity, and not when they are functioning as an accountant, a business consultant, or a friend who happens to have a law degree.
In practice, this means that the framing of a communication can matter as much as its content. A memo from your attorney that analyzes the legal risks and obligations associated with a proposed transaction is more clearly privileged than a memo that primarily discusses the business case for the transaction and includes a brief legal observation at the end.
The Crime-Fraud Exception
The attorney-client privilege does not protect communications that were made in furtherance of a crime or fraud. This exception — known as the crime-fraud exception — is not a loophole that applies whenever someone accuses your company of wrongdoing. Rather, it applies when a court finds that the communication itself was part of an ongoing or planned criminal or fraudulent scheme. If you consult an attorney about conduct you have already completed and want to defend, that communication is privileged. If you consult an attorney for help in committing a fraud that is ongoing or planned for the future, the privilege does not attach.
Work Product vs. Attorney-Client Privilege
Attorney-client privilege is sometimes confused with the attorney work product doctrine, which is a related but distinct protection. Work product doctrine protects materials prepared by or for an attorney in anticipation of litigation. It covers things like an attorney’s notes, memoranda, and mental impressions developed in connection with a legal dispute — even when those materials are not direct communications between attorney and client. Work product protection is generally somewhat weaker than attorney-client privilege and can be overcome in litigation upon a showing of substantial need, but the core mental impressions of the attorney receive stronger protection.
How Attorney-Client Privilege Is Waived
Waiver is the most significant practical risk associated with attorney-client privilege for businesses. A waiver occurs when privileged information is disclosed to someone who is not covered by the privilege, effectively making the communication no longer confidential. Once waived, the privilege cannot generally be restored. And critically, waiver of privilege for one communication can sometimes result in broader waiver of related communications.
The Carbon Copy Problem
The most common and preventable source of accidental waiver in a business context is the routine practice of copying non-lawyers on emails to or from legal counsel. When you send an email to your attorney seeking legal advice and you copy your business colleagues, you have disclosed that communication to people who are not part of the attorney-client relationship. Courts frequently find that this practice destroys the privilege for the communications involved, on the theory that a truly confidential communication would not be shared with others at the time it was made.
This does not mean you can never discuss legal matters with your team. It means you need to be thoughtful about the structure of those communications. If you want to consult your attorney and then share the relevant conclusions with your business team, the better practice is to have the confidential attorney-client communication first, and then share a business-level summary with your team in a separate communication. That way, the attorney-client communication itself remains protected even if the downstream business summary is disclosed.
Forwarding Privileged Emails
Forwarding a privileged email to someone outside the attorney-client relationship — including to other employees who were not part of the original privileged communication — can constitute a waiver. In corporate settings, there is a recognized principle that privilege covers communications within the company among employees who have a “need to know” the legal advice for the company’s purposes, but this principle has limits. An email chain that includes an attorney’s privileged advice and is then forwarded broadly within the organization risks losing its protection if the distribution exceeds the scope of genuine need.
Public Disclosure
If you publicly disclose the substance of a privileged communication — whether in a press release, a regulatory filing, a deposition, or casual conversation — you waive the privilege for that communication. This is one reason why companies facing litigation or regulatory investigations are careful about what they say publicly regarding their legal advice and strategy.
Selective Disclosure and Subject Matter Waiver
A particularly dangerous form of waiver occurs when a party selectively discloses some privileged communications to gain a strategic advantage — for example, by revealing a favorable legal opinion to a regulator while withholding less favorable ones. Courts have held that this kind of selective use of privileged materials can result in a subject matter waiver, meaning that all privileged communications on the same subject become discoverable, not just the ones that were selectively disclosed.
Privilege in the Corporate Context
Applying attorney-client privilege in a business setting is more complex than in an individual representation, because the client is the organization rather than any individual person. This has several important practical implications.
First, the privilege belongs to the organization, not to individual employees. If you are the CEO of a company and you communicated with the company’s lawyer about company business, those communications are privileged — but the privilege belongs to the company. The company’s board of directors, acting on behalf of the organization, has the authority to waive the privilege. If there is a change of control, the new management may inherit control over the privilege. This has important implications in acquisition transactions, internal investigations, and disputes between shareholders and management.
Second, not every communication between an employee and company counsel is automatically privileged. The privilege covers communications made by employees for the purpose of obtaining legal advice for the company, but it does not cover all communications just because company counsel is copied. Courts applying what is known as the Upjohn analysis look at factors including whether the communication was made at the direction of superiors, whether it was treated as confidential within the organization, and whether it concerned matters within the scope of the employee’s duties.
Third, when a company undergoes an internal investigation conducted by outside counsel, the privilege that attaches to the investigation materials belongs to the company. If individual employees are interviewed during the investigation, counsel for the company must take care to make clear to those employees that the privilege belongs to the company and may be waived by the company, even over the individual employee’s objection. Failing to give this Upjohn warning appropriately can create confusion and legal complications.
Practical Steps to Protect Your Privilege
Given the ways in which privilege can be inadvertently lost, developing consistent habits for handling attorney communications is a worthwhile investment for any business.
Mark privileged communications clearly. While the label itself does not create privilege that would not otherwise exist, marking emails and documents as “Attorney-Client Privileged and Confidential” serves as a useful reminder to recipients of the sensitivity of the material and can help establish that the communication was intended to be confidential.
Separate legal advice from business advice. When you need both legal analysis and business input on a question, try to separate those conversations. Have the privileged legal conversation with your attorney, and then have the business conversation separately. Keeping a clear distinction between the two makes it much easier to establish the privilege for the legal communications.
Be thoughtful about who is copied on emails to counsel. Limit distribution of attorney communications to people who genuinely need the legal advice to do their jobs. Resist the institutional habit of adding people to email chains “for information.” The broader the initial distribution, the weaker the argument that the communication was confidential.
Be careful with litigation holds and document preservation. When litigation is reasonably anticipated, you have an obligation to preserve relevant documents. Your attorney can help you implement a litigation hold process that protects documents while also being careful about how privilege is handled in the process of preserving materials.
Consult your lawyer before disclosing anything that touches on privileged communications. If someone is asking you — in litigation, in a regulatory inquiry, or in a transaction’s due diligence process — to disclose communications with your attorney, that is not a decision to make unilaterally. The implications of waiver, including the possibility of broader subject matter waiver, make this a situation where professional guidance is essential before you say or produce anything.
Why This Matters Even When You Are Not in Litigation
Founders sometimes think about privilege primarily in the context of litigation — as something relevant only if they end up in a lawsuit. In fact, the privilege can be equally important in regulatory investigations, government audits, acquisition due diligence, and internal investigations.
When a government agency investigates your company, the ability to have frank conversations with your attorney about what the agency might find, what the exposure might be, and what your response should be is enormously valuable — but only if those conversations are protected. When an acquirer conducts due diligence, they will ask to see your legal files, but privileged communications properly maintained are generally not required to be produced in that process.
The practical value of attorney-client privilege is that it creates a protected space in which you and your legal counsel can think clearly, candidly, and strategically about your situation without those deliberations being visible to adversaries, regulators, or counterparties. That protected space is worth maintaining carefully.