Protective Orders in Civil Discovery: Rule 26(c), Tiers, and Clawbacks

A protective order in civil discovery is a court order, usually issued under Federal Rule of Civil Procedure 26(c), that limits how parties can share or use sensitive information exchanged during a lawsuit. Most of these orders are negotiated between the parties and submitted jointly for a judge’s signature. When the parties cannot agree, one side files a motion and has to show “good cause” — specific, concrete harm from unrestricted disclosure, not vague discomfort.

The information these orders cover tends to fall into predictable categories: trade secrets, pricing and strategy documents, medical records, personnel files, financial data unrelated to the dispute, and material whose exposure would embarrass or harm someone without advancing the case. The order controls who sees what, how it is stored, whether it goes into the public record, and what happens to it when the case ends.

What Rule 26(c) Lets a Judge Do

Rule 26(c) is the primary federal authority. It allows a court to issue a protective order “for good cause” to shield a party or non-party from “annoyance, embarrassment, oppression, or undue burden or expense.”¹ Most state court systems have adopted substantially similar rules. The burden sits on the party seeking protection. Telling a judge a request is “burdensome” without evidence will not clear the bar.

Judges also weigh proportionality. Rule 26(b)(1) directs courts to consider the importance of the issues, the amount in controversy, each side’s access to information, and whether the burden of a request outweighs its likely benefit.¹ A demand for ten years of email archives in a $15,000 contract dispute will not survive that analysis.

Rule 26(c)(1) lists eight types of orders the court can enter. Together they cover forbidding the discovery entirely, setting terms for how it happens, requiring a different method, limiting scope or subject matter, controlling who may be present, sealing deposition transcripts, restricting disclosure of trade secrets or confidential commercial information, and requiring simultaneous sealed filings. The list is not exhaustive. Judges have inherent discretion to craft protections beyond it, which is where designations like “Attorneys’ Eyes Only” come from.¹

Stipulated Orders: The Common Path

In practice, most protective orders are not the result of a contested motion. The parties negotiate terms, draft a joint proposed order, and submit it to the court for approval. Once signed, it carries the same enforcement power as any other discovery order. The negotiation usually happens early, often at or shortly after the Rule 26(f) discovery planning conference.

Stipulated orders work well when both sides have something to protect. A business suing a former employee over a noncompete, for example, may need to produce financial records while the former employee needs to disclose details about a new employer. Courts generally approve these agreements without demanding a formal good-cause showing, though a judge can refuse to sign an order that is unreasonably broad or that improperly restricts public access to judicial proceedings.

There is a tradeoff. Because stipulated orders are entered without a contested good-cause finding, some circuits treat the reliance interests of the producing parties as weaker if someone later challenges or seeks to modify the order.² If confidentiality is genuinely critical, pushing for a contested order supported by specific evidence of harm gives you stronger protection down the road.

Filing a Contested Motion

The Meet-and-Confer Requirement

Before filing anything, the moving party must certify in writing that they attempted in good faith to resolve the dispute without court involvement. Rule 26(c)(1) requires that certification to accompany the motion.¹ Judges take this seriously. A motion filed without evidence of a genuine attempt to work things out can be denied on procedural grounds regardless of its merits. The certification should document who participated, when the discussion took place, and what each side’s position was.

Building the Record

Good cause requires evidence, not argument. If the objection is cost, a declaration from someone with knowledge of the company’s records systems, explaining the estimated expense of compliance, carries far more weight than a lawyer’s assertion that the request is expensive. If the concern is trade secrets, a declaration should explain what the proprietary information is, why it has competitive value, and how disclosure to the opposing party would cause specific financial harm.

The motion should include a proposed order for the judge to sign. That document needs to spell out which materials are covered, who can access them, how they must be stored, and what happens to them when the case ends. Vague proposed orders create problems at every stage, from the judge’s initial review to enforcement disputes months later.

Timing and Hearing

Once the motion is filed and served, the opposing side gets a window to respond. The Federal Rules do not set a universal deadline for opposing non-dispositive motions like this one. Each court’s local rules control the timeline, and they vary. Check them before you count days. A judge may decide the motion on the papers or schedule a hearing. Rulings sometimes come from the bench; other times the judge takes the matter under advisement and issues a written order later. Either way, the ruling is enforceable the moment it is entered, and violating it triggers the sanctions framework under Rule 37.³

Fee Shifting If You Lose

Losing a protective order fight can cost more than the ruling itself. Rule 26(c)(3) incorporates the fee-shifting provisions of Rule 37(a)(5). If the motion is granted, the court must require the party whose conduct forced the motion to pay the movant’s reasonable expenses, including attorney fees, unless the opposition was substantially justified or an award would be unjust. If the motion is denied, the presumption flips: the movant pays the opposing party’s costs unless the motion was substantially justified. When the motion is granted in part and denied in part, the court has discretion to split expenses however it sees fit.³

This mechanism is not optional. The rule uses “must.” Judges are required to award fees to the prevailing side unless one of the narrow exceptions applies. Filing a weak motion, or digging in against a reasonable one, carries real financial risk.

Confidentiality Tiers Inside the Order

Most protective orders in commercial litigation establish a tiered system for classifying documents. The producing party stamps each document with a designation, and the designation controls who can see it and how it can be used.

A common two-tier structure uses a “Confidential” designation, which allows the opposing party’s litigation team (lawyers, paralegals, experts) to view the materials, and an “Attorneys’ Eyes Only” designation, where even the opposing party itself cannot see the documents. The Federal Judicial Center describes Attorneys’ Eyes Only orders as provisions that forbid the opposing lawyer from disclosing materials even to their own client.⁴ This tier is common when competitors are litigating against each other and production would otherwise hand one side a window into the other’s pricing or product pipeline.

These designations are provisional. The producing party applies them based on a good-faith belief that good cause exists, but the receiving party can challenge any designation at any time. If challenged, the producing party must justify the designation to the court, and the judge decides whether the material actually warrants the level of protection claimed.⁴ Overdesignating is a recurring problem in practice and can erode credibility with the judge.

Blanket Orders vs. Targeted Orders

A blanket protective order covers all documents produced in the case and relies on the parties to designate which materials qualify for protection. It saves time and avoids document-by-document court review at the outset. A targeted order, by contrast, applies only to specific documents the court has individually reviewed. Targeted orders provide stronger protection because they rest on a judicial finding rather than a party’s self-serving label, but they are far more labor-intensive and impractical in cases involving thousands of documents.

Sealing Orders

Sealing restricts materials from the public court record entirely. Rule 26(c)(1)(F) authorizes courts to order that depositions be sealed and opened only by court order, and subsection (H) allows simultaneous sealed filings.¹ Sealing is harder to get than a standard confidentiality designation. Courts start with a presumption of public access to judicial records, and the party seeking a seal has to overcome that presumption with specific evidence of harm.

Three Situations That Need Special Provisions

Electronic Discovery and Metadata

Electronic files carry hidden data recording who created a document, when it was last edited, and what changes were made. Metadata can inadvertently reveal information far beyond what the document’s text contains, including privileged review notes or draft language. Parties should discuss handling early, ideally during the meet-and-confer. Key decisions include which categories of metadata will be produced, whether files will come with industry-standard load files, and whether any gaps exist in material received from third parties. Metadata can be altered unintentionally through ordinary file copying, so the order should specify how electronic files must be handled to preserve their integrity. When forensic imaging of hard drives or devices is involved, the order should address who may access the images, what software will be used, and how the scope of any search is limited.

HIPAA Qualified Protective Orders

Lawsuits involving medical records trigger federal health privacy rules on top of ordinary discovery protections. Under HIPAA regulations, a covered entity like a hospital or insurer can disclose protected health information in response to a subpoena or discovery request only if certain conditions are met. One path is a court order. The other requires the requesting party to show reasonable efforts to secure a “qualified protective order.”⁵

A qualified protective order must do two things. First, it must prohibit the parties from using or disclosing the health information for any purpose other than the litigation. Second, it must require the return or destruction of all copies at the end of the case.⁵ The second requirement catches many litigants off guard. A standard order that limits who can see medical records but says nothing about destroying them will not satisfy HIPAA, and the healthcare provider may refuse to produce the records until a compliant order is in place.

Clawback Provisions for Privileged Material

Large-scale document production creates a constant risk of accidentally disclosing privileged material. Reviewing hundreds of thousands of documents for privilege is expensive and imperfect, and a single mistake can waive the privilege not just for the disclosed document but potentially for everything on the same subject. Federal Rule of Evidence 502 addresses this.

Rule 502(b) provides that an inadvertent disclosure in a federal proceeding does not waive privilege if the disclosure was genuinely inadvertent, the holder took reasonable steps to prevent it, and the holder promptly took reasonable steps to fix the error. The real power sits in subsection (d), which lets a federal court order that privilege is not waived by any disclosure connected with the litigation. An order under Rule 502(d) is binding not just in the current case but in any other federal or state proceeding.⁶ A typical 502(d) clawback provision sets up a procedure: if the producing party realizes it accidentally disclosed privileged material, it notifies the receiving party, and the receiving party must promptly return or destroy the documents. The receiving party cannot use the material and cannot argue the disclosure waived the privilege.

If You’re a Non-Party Who Got Subpoenaed

Non-parties pulled into litigation through subpoenas have their own set of protections under Rule 45. The issuing party must take reasonable steps to avoid imposing undue burden or expense on the recipient, and courts can sanction attorneys who ignore this obligation, including awards of lost earnings and attorney fees.⁷

A non-party who receives a document subpoena can serve a written objection before the compliance deadline or within 14 days of service, whichever comes first. If the requesting party then moves to compel, the court must protect the non-party from significant expense resulting from compliance.⁷ In practice, this often shifts the cost of collection and review back to the party that wants the information.

Non-parties can also move to quash. A court must quash a subpoena that fails to allow a reasonable time to comply, exceeds geographic limits, demands privileged material, or imposes undue burden. The court may also quash or modify a subpoena that demands trade secrets or confidential commercial information. In that situation, the requesting party can still get the material, but only by showing substantial need that cannot be met another way and ensuring the subpoenaed person is reasonably compensated.⁷

What Happens If Someone Violates the Order

Violating a protective order is not a procedural hiccup. Rule 37(b)(2)(A) gives courts a wide range of sanctions when a party disobeys a discovery order, and some of them can end the case. The available sanctions include directing that certain facts be taken as established against the violating party, prohibiting the party from supporting or opposing claims or introducing specific evidence, striking pleadings in whole or part, staying the proceedings until the party complies, dismissing the case or entering default judgment, and treating the violation as contempt of court, which can carry fines or even incarceration.

Courts impose case-ending sanctions when a violation is willful or causes serious prejudice. The sanctions framework also covers destruction of electronically stored information. If a party intentionally destroyed evidence that should have been preserved, the court can presume the lost information was unfavorable, instruct the jury to make that presumption, or enter a default judgment.³

Modifying or Appealing an Order

Protective orders are not permanent. A party can move to modify an existing order by showing changed circumstances or good cause, though the standard varies by circuit. Some circuits apply a strict test requiring a showing of “improvidence in the grant of the order or some extraordinary circumstance.” Others apply a more flexible balancing test that weighs the continuing need for protection against efficiency, public access, and the needs of related litigation.²

Third parties, including journalists and litigants in related cases, can also challenge protective orders, usually through permissive intervention under Rule 24(b). The strength of the original order matters here. An order entered after a contested good-cause showing receives more deference than a stipulated blanket order, which courts view as inherently overinclusive.²

A ruling on a protective order motion is typically not immediately appealable. These are interlocutory orders, made during the case rather than at its conclusion, and appeals usually wait for final judgment. Two narrow paths exist for immediate review. Under 28 U.S.C. § 1292(b), the district court can certify the order for interlocutory appeal if it involves a controlling question of law, there is substantial ground for disagreement, and an immediate appeal would materially advance the case. Both the district court and the court of appeals must agree, which makes this route uncommon. Alternatively, a party can petition for a writ of mandamus, asking the appellate court to direct the trial judge to reverse. Mandamus is reserved for situations where the right to relief is “clear and indisputable” and no other adequate avenue exists. Courts have granted it in discovery disputes involving highly sensitive materials, but the bar is deliberately high.

1
Legal Information Institute. Federal Rules of Civil Procedure Rule 26
2
United States Courts. Caselaw Study: Discovery Protective Orders
3
Legal Information Institute. Federal Rules of Civil Procedure Rule 37
4
Federal Judicial Center. Confidential Discovery: A Pocket Guide on Protective Orders
5
eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required
6
Legal Information Institute. Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product; Limitations on Waiver
7
Legal Information Institute. Federal Rules of Civil Procedure Rule 45