Attorney-client privilege in regulatory and fraud investigations protects confidential communications with your lawyer about legal advice, while the related work product doctrine shields materials prepared in anticipation of litigation. Both can hold up against an SEC subpoena, a grand jury request, or a parallel civil suit, but only if you have built them correctly and defended them consistently. One careless email, one unexamined document production, one employee interview conducted without the right warning, and protections you assumed you had can disappear. The rules are specific, the government has tools to challenge your claims, and the circuits do not all draw the lines in the same place.
What Each Protection Actually Covers
Attorney-client privilege applies to confidential communications between a client and a lawyer made for the purpose of obtaining legal advice. Four elements must line up: a communication, between a client and an attorney, made in confidence, for legal advice, and not shared with outsiders. Break any one of them and the privilege fails. A lawyer sitting in a meeting or copied on an email does not make the exchange privileged. The communication has to actually be about legal guidance, not business strategy that happens to include counsel.
Work product protection is separate. Under Federal Rule of Civil Procedure 26(b)(3), documents and tangible things prepared by a party or its representative in anticipation of litigation are generally shielded from discovery.1Legal Information Institute (Cornell Law School). Rule 26 – Duty to Disclose; General Provisions Governing Discovery The test is whether the material would have been created in substantially the same form without the prospect of litigation. Routine business records do not qualify. Even when a court orders disclosure of work product, it must still protect the lawyer’s mental impressions, conclusions, and legal theories.
The two protections also fail differently. A regulator or opposing party can overcome work product by showing substantial need for the materials and an inability to obtain the equivalent without undue hardship.1Legal Information Institute (Cornell Law School). Rule 26 – Duty to Disclose; General Provisions Governing Discovery That bar is higher than ordinary discovery, but it does get cleared. Attorney-client privilege is close to absolute and cannot be pierced by a showing of need.
Mixed Legal and Business Communications
Most investigation-era communications serve more than one purpose. An email to outside counsel about a compliance failure can discuss both the legal exposure and the operational fix in the same thread. Federal courts handle these with a “primary purpose” test: the communication is privileged only when legal advice was the primary reason for the exchange.
The circuits disagree on how strict that test is. The D.C. Circuit asks whether legal advice was “a significant purpose,” which allows legal advice to be one of several important reasons. The Second, Fifth, Sixth, and Ninth Circuits take a narrower view, requiring legal advice to be the single primary purpose. The Ninth Circuit has specifically rejected importing the more permissive “because of” test used for work product. If your company operates across jurisdictions or faces a federal investigation that could land anywhere, assume the narrower standard applies. Separate the legal thread from the business thread when you can.
Which Employees Can Speak Under Privilege
When the client is a corporation, you have to decide which employees are covered when they talk to counsel. The Supreme Court addressed this in Upjohn Co. v. United States, rejecting the restrictive “control group” test that limited privilege to senior executives with authority to act on the legal advice.2Legal Information Institute (LII). Upjohn Co. v. United States The Court recognized that the facts corporate counsel need are often held by mid-level and lower-level employees.
Under Upjohn, communications with non-executive employees are privileged when the communications were made to counsel at the direction of corporate superiors to obtain legal advice, the information was not available from upper management, the subject matter fell within the employees’ duties, and the employees understood the questioning was for the company to get legal advice.2Legal Information Institute (LII). Upjohn Co. v. United States The communications also have to be treated as confidential.
Most federal courts and the majority of states follow Upjohn. A handful of states, Illinois most prominently, still apply the control group test. Check the standard in the relevant jurisdiction before structuring internal interviews for a state-level matter.
The Upjohn Warning
When corporate counsel interviews an employee during an internal investigation, the lawyer has to give an Upjohn warning. The warning tells the employee three things: the lawyer represents the company and not the individual, the conversation is privileged but the company holds the privilege and can waive it, and the employee must keep the interview confidential. Skip this and you create real problems. An employee who reasonably thought the lawyer was representing them personally can argue that an individual attorney-client relationship was formed, which complicates any later decision by the company to share the information with the government.
Contractors and the Functional Equivalent Doctrine
Companies routinely use independent contractors, consultants, and temporary workers who hold information relevant to a legal matter. Several federal circuits, including the Eighth and Ninth, recognize the “functional equivalent” doctrine, which extends Upjohn to outside contractors who are essentially indistinguishable from employees. The same criteria apply: the communication must be made for legal advice, at a corporate superior’s direction, on a subject within the contractor’s duties, and kept confidential. If the contractor is embedded in the organization and doing the work an employee would do, the privilege can attach.
Non-Lawyer Consultants and the Kovel Doctrine
Fraud matters frequently need forensic accountants, data analysts, and other specialists working alongside counsel. Under the Kovel doctrine, from a 1961 Second Circuit decision, attorney-client privilege can extend to communications with a non-lawyer professional whose role is to help the attorney understand complex information. The consultant acts as a translator, converting technical material into something the lawyer can use.
The limits matter. The consultant has to work at the attorney’s direction, on tasks directly tied to the legal representation, in an engagement structured to facilitate legal advice rather than independent business consulting. Courts read engagement letters closely. To preserve the privilege, the attorney should contract directly with the consultant, state clearly that the consultant is assisting counsel in providing legal advice, and keep control over the consultant’s work product. Standalone business advice, tax preparation, or financial services independent of the legal work are not protected.
When Privilege Disappears
The Crime-Fraud Exception
Privilege vanishes when the client uses the attorney-client relationship to further an ongoing or future crime or fraud. The Supreme Court recognized the principle as early as 1933, holding that a client who consults an attorney for advice that will serve in the commission of a fraud “will have no help from the law” and “must let the truth be told.”3Justia. Clark v. United States, 289 U.S. 1 (1933) The exception applies whether or not the attorney knows about the wrongdoing. What matters is the client’s intent.
Past versus future conduct is where confusion arises. Talking to your lawyer about something that already happened is almost always privileged. You have to be able to tell your attorney what occurred so they can defend you. If the communication shifts toward planning or concealing ongoing or future illegal conduct, the privilege drops. Asking about penalties for a potential course of action stays privileged. Asking how to hide the proceeds of a fraud does not.
The federal circuits vary on the proof standard for triggering the exception, ranging from “some foundation in fact” in the Tenth and Eleventh Circuits to “probable cause” in the Second Circuit. Whichever standard applies, suspicion alone is not enough. The party seeking to pierce privilege has to come with actual evidence. When a dispute reaches the court, a judge may conduct in camera review under United States v. Zolin, but only after the challenging party shows a factual basis adequate to support a good faith belief by a reasonable person that the review may reveal evidence supporting the crime-fraud claim.4Justia. United States v. Zolin, 491 U.S. 554 (1989)
Waiver and Inadvertent Disclosure
Once waived, privilege is hard or impossible to get back. Federal Rule of Evidence 502 governs the scope and consequences of waiver in federal proceedings and provides important protections against accidental loss.5Legal Information Institute (Cornell Law School). Federal Rule of Evidence 502
Intentional disclosure waives the privilege, but the reach of that waiver is limited. Under Rule 502(a), subject-matter waiver (where disclosure of one document waives privilege over all related communications) occurs only when the waiver is intentional, the disclosed and undisclosed communications concern the same subject, and fairness requires they be considered together.5Legal Information Institute (Cornell Law School). Federal Rule of Evidence 502 The rule says explicitly that an inadvertent disclosure can never trigger subject-matter waiver.
For inadvertent disclosures, Rule 502(b) sets a three-part safe harbor. The privilege survives if the disclosure was truly inadvertent, the holder took reasonable steps to prevent it, and the holder promptly took reasonable steps to fix the error once discovered, including following the clawback procedures under FRCP 26(b)(5)(B). In productions involving hundreds of thousands of files, courts generally expect a reasonable review protocol, not perfection.
Parties can also obtain an order under Rule 502(d) providing that any production of privileged material, inadvertent or not, does not waive the privilege in the current case or any other proceeding.6United States District Court Southern District of Florida. 502(d) Clawback Order Long Form These clawback orders are increasingly standard in government investigations and give the strongest available protection against accidental waiver. Requesting one at the outset of a significant production is a baseline step that experienced counsel rarely skip.
Selective Waiver to Regulators
Companies often ask whether disclosing privileged material to one government agency waives the privilege as to everyone else. If you share an internal investigation report with the SEC, can a private plaintiff in a parallel civil suit demand the same documents? Almost every federal circuit that has addressed this has rejected the selective waiver doctrine. Only the Eighth Circuit recognizes a limited version. In practice, producing privileged material to one regulator typically opens the door for other parties to demand it. Weigh this hard before making any voluntary disclosure.
What the DOJ Actually Expects From Cooperation
The Department of Justice’s policy is explicit: corporations do not need to waive privilege to receive cooperation credit. The Principles of Federal Prosecution of Business Organizations state that prosecutors may not request disclosure of privileged communications or attorney work product as a condition for cooperation credit.7United States Department of Justice. Principles of Federal Prosecution Of Business Organizations A company can earn the same credit for disclosing underlying facts from non-privileged materials as it would for disclosing those facts from privileged ones. The government wants the facts, not the lawyer’s analysis.
Two exceptions. If a company raises an advice-of-counsel defense, it cannot shield the communications underlying that defense. And communications made in furtherance of a crime or fraud were not privileged to begin with.7United States Department of Justice. Principles of Federal Prosecution Of Business Organizations
Under the Yates Memo, to qualify for any cooperation credit, a corporation must provide all relevant facts about individual misconduct. The company cannot pick which executives to shield. The requirement operates “within the bounds of the law and legal privileges,” meaning the government expects factual disclosure while respecting legitimate privilege claims.8U.S. Department of Justice. Individual Accountability for Corporate Wrongdoing (Yates Memo) A company that declines to learn or share facts about individual wrongdoing will not get cooperation credit.
Prosecutors also evaluate the internal investigation itself. The DOJ’s Evaluation of Corporate Compliance Programs asks whether investigations are properly scoped, independent, objective, and adequately documented.9U.S. Department of Justice. Evaluation of Corporate Compliance Programs They will look at who conducted the investigation, what authority they had, and whether company policies on personal devices and ephemeral messaging impaired either the investigation or the response to government requests. Disappearing-message platforms without preservation policies raise red flags before the investigation even starts.
Responding to a Subpoena
When a subpoena arrives from the SEC, a grand jury, or another federal agency, the clock starts. Non-compliance carries real penalties, and the privilege review is time-intensive and unforgiving of mistakes.
The first step is to gather and review responsive documents and identify what qualifies for privilege. For each withheld document, you prepare a privilege log describing the material in enough detail for the government to assess the claim without seeing the content. Federal Rule of Civil Procedure 26(b)(5)(A) requires you to expressly make the privilege claim and describe the nature of each withheld item in a way that lets the other side evaluate it.1Legal Information Institute (Cornell Law School). Rule 26 – Duty to Disclose; General Provisions Governing Discovery At minimum, each entry should include the date, the author, the recipients, the type of privilege claimed, and a brief description of the communication’s subject matter.
For SEC investigations, the Enforcement Manual requires the privilege log to be submitted at the same time as the responsive documents. When withholding on attorney-client grounds, the log must identify the attorney and client. When claiming work product, it must identify the litigation the material was prepared for. SEC staff will compare redacted documents against the log and will push back on incomplete entries. The SEC has also adopted the DOJ’s position: asserting a legitimate privilege claim will not hurt cooperation credit.10U.S. Securities and Exchange Commission. Division of Enforcement – Enforcement Manual
Accuracy in the log is where companies trip. Vague descriptions, missing recipients, and conclusory assertions invite challenges. Regulators push back on entries that say nothing more than “privileged communication regarding legal matter,” and a court will not give the benefit of the doubt to sloppy entries. An inadequate log can lead to a production order or judicial review.
How the Government Screens Privileged Material It Seizes
Federal agencies have protocols to keep investigators away from privileged material during searches and large-scale productions.
When the DOJ executes a search warrant at a location likely to contain privileged material, it uses a filter team (sometimes called a taint team) of attorneys and agents walled off from the investigation and prosecution teams. The Justice Manual requires the composition and procedures of the filter team to be set before the warrant is obtained.11United States Department of Justice. Justice Manual – 9-13.000 – Obtaining Evidence Filter team lawyers may advise agents during the search but may not participate in it. The team reviews everything seized and releases only non-privileged items to the prosecutors. The warrant affidavit is expected to state the government’s intention to use these procedures.
When a party does not trust the government’s filter process, or when the stakes are high, a court can appoint a special master to independently review the seized materials and make privilege recommendations to the judge, who makes the final call. This takes more time and money than a filter team but gives greater independence from the prosecution. For disputes that reach the judge directly, in camera review under Zolin allows the court to examine contested documents privately, but only on a sufficient factual basis.4Justia. United States v. Zolin, 491 U.S. 554 (1989) Generalized suspicion or blanket objections to a privilege log will not get a court to review documents in chambers.
Practical Steps for Preserving Privilege
Privilege does not maintain itself. Companies that treat it as an afterthought lose protections they assumed they had. A few structural practices make the difference between privilege that holds and privilege that collapses at the first challenge.
- Keep legal and business communications on separate threads. A single message that mixes legal analysis with operational planning risks losing privilege for the whole document under the primary purpose test.
- Use Kovel engagement letters for consultants. Before bringing in forensic accountants or specialists, have counsel contract directly with the consultant and state explicitly that the consultant is assisting counsel in providing legal advice. Without that, courts are unlikely to extend privilege.
- Deliver Upjohn warnings before every employee interview, and document that you gave them. An employee who later claims they believed the company’s lawyer represented them personally can create a privilege dispute you did not need.
- Request a Rule 502(d) clawback order at the outset of any significant production. These orders are routinely granted and are the strongest protection against inadvertent waiver.
- Label privileged documents clearly (“Privileged and Confidential — Attorney-Client Communication” or “Attorney Work Product”). The label does not create privilege, but it shows intent to maintain confidentiality and helps during review.
- Control distribution. Forwarding a legal memo to employees who do not need it, or discussing privileged advice with outside parties, can waive the protection.
- Preserve communications. The DOJ and SEC are paying closer attention to ephemeral messaging and auto-delete policies. If your company uses platforms that destroy communications automatically, build preservation into the policy.
The strongest privilege position is one built before anyone knows an investigation is coming. Companies that treat these protocols as part of regular compliance infrastructure avoid trying to organize privilege claims after a subpoena lands on the general counsel’s desk.