Attorney-client privilege applies to an email when four things line up: the message is between you and a licensed lawyer (or that lawyer’s working support staff), its primary purpose is to seek or give legal advice, you intended it to be confidential, and you’ve kept it that way. Miss any one of those, and the email is fair game in discovery. Having a lawyer on the “To” line is not enough on its own, and labeling a message “privileged” doesn’t rescue a communication that fails the test.
The Four Elements, and Where People Trip
Privilege covers oral, written, and electronic communications on the same terms, so an email qualifies as readily as a phone call. Communications with the attorney’s paralegals or legal assistants working under the attorney’s direction also count.
The element that trips most people is the primary-purpose requirement. Your lawyer might also be your friend, your business partner, or a member of your company’s board. Only communications where you’re genuinely seeking or receiving legal counsel are protected. An email to your lawyer about scheduling lunch or forwarding an industry newsletter doesn’t qualify, even though a lawyer is on the thread. The line gets blurry when the same person wears multiple hats, which is a bigger problem in corporate settings than in personal ones.
The confidentiality element is also easy to lose sight of. You need to have sent the email expecting it to stay between you and your attorney, and you need to keep behaving that way afterward. CC-ing people with no role in the legal consultation, or forwarding your lawyer’s reply around the office, breaks the chain.
Drafting Habits That Preserve Privilege
A few concrete habits make a real difference when a court later has to decide whether a given email was privileged.
Use a subject line that signals legal purpose. Something like “Privileged: Legal Advice Request Re: [Topic]” shows your intent from the start. Courts have treated labeling as “not dispositive” but “persuasive” on whether you treated the communication as confidential. The label alone will not create privilege where none exists.
Get to the legal question quickly in the body. State the issue and what advice you need. Avoid burying a legal question inside three paragraphs of business updates. Sharing background facts with your attorney so they can advise you is fine and protected; mixing in operational discussion that has nothing to do with legal risk invites a court to decide the real purpose was something other than legal advice.
Keep the recipient list tight. Include your attorney and anyone whose involvement is genuinely necessary for the legal consultation, and no one else. Every extra name on the “To” or “CC” line gives the other side an argument that you didn’t actually intend confidentiality. A third party sitting on an otherwise privileged thread can destroy the privilege unless that person was essential to the attorney-client relationship.
Attachments Are Not Automatically Protected
A common and costly misconception: attaching a document to an email to your lawyer does not make that document privileged. If the document existed before you sent it (a contract, a financial statement, a news article), it stays discoverable even though you shared it with counsel. A document doesn’t become protected simply because a client later forwards it to a lawyer.
The email itself, where you explain why you’re sending the document and ask for legal advice about it, is privileged. In some cases the act of selecting and sending a particular document can also be protected if it reveals your thought process on a legal issue. If you send your lawyer a news article about enforcement actions in your industry and ask whether your company’s practices comply, the surrounding communication is privileged even though the article is public. The underlying document itself remains reachable through other discovery channels.
The Dual-Purpose Problem in Corporate Email
Corporate settings are where email privilege claims most often fall apart. The Supreme Court held in Upjohn Co. v. United States that privilege isn’t limited to a senior “control group”; communications between employees at any level and company counsel can be protected when the employee is communicating at the direction of a corporate superior, for the purpose of obtaining legal advice, about matters within their job duties, with the understanding that the information is being provided so the company can get legal guidance. The communication also has to stay within those who need to know.
The harder problem is that in-house counsel routinely participate in business decisions. When an email thread mixes legal analysis and business strategy, federal courts generally apply a primary-purpose test. If business considerations dominate, courts tend to find the whole communication unprotected, even if a lawyer sprinkled in legal observations. If the lawyer holds both a legal and a business title at the company, communications made in the business role aren’t privileged no matter the law license.
The practical fix is separation. When you need legal advice on a business matter, send a separate email that specifically asks for legal guidance. Don’t tack a legal question onto the end of a strategy memo. Some courts will parse a single communication and protect only the legal portions, but keeping the streams separate from the start is far safer.
One limit worth keeping in mind: privilege protects the communication, not the underlying facts. If an employee tells company counsel about a safety incident, the email is protected, but opposing counsel can still interview the employee and ask about the incident itself.
How Email Privilege Gets Waived
Privilege is easy to lose and nearly impossible to recover. In the email context, three patterns do most of the damage.
Forwarding to Third Parties
The moment you forward a privileged email to someone outside the attorney-client relationship, privilege for that communication is generally gone. It doesn’t matter that the recipient is a trusted colleague, a board member, or a close friend. If they aren’t part of the legal consultation, sharing the email shows you didn’t treat it as confidential.
Oversharing Inside the Company
Even within one organization, privilege can be waived if the email circulates beyond employees who genuinely need the legal advice to do their jobs. Sending your lawyer’s analysis to every department head “for awareness” undercuts the argument that the communication was confidential.
Talking About the Advice in Public
Discussing the substance of your attorney’s advice in a meeting with non-privileged parties, on social media, or in any public setting waives privilege. You don’t have to quote the email verbatim. Revealing the gist is enough.
There’s also a subject-matter waiver risk. Under Federal Rule of Evidence 502(a), intentionally disclosing part of a privileged communication in a legal proceeding can extend the waiver to other, undisclosed communications on the same subject when the disclosed and undisclosed materials ought in fairness to be considered together.
When You Send a Privileged Email to the Wrong Person
Accidentally sending a privileged email to the wrong recipient does not automatically destroy privilege. Federal Rule of Evidence 502(b) provides a safety net when three conditions are met: the disclosure was truly inadvertent, you took reasonable steps beforehand to prevent disclosure, and you acted promptly to fix the error once you discovered it.
“Reasonable steps to prevent disclosure” means things like maintaining privilege logs, using email encryption, training employees on privilege protocols, and reviewing documents before producing them in discovery. A company with no safeguards in place will struggle to argue a disclosure was inadvertent.
Promptly rectifying means you can’t sit on the mistake. As soon as you realize a privileged email went to the wrong person, notify the recipient and ask that the material be returned or destroyed. In litigation, Federal Rule of Civil Procedure 26(b)(5)(B) sets the procedure: the producing party notifies the receiving party, and the material is sequestered until the court rules on the privilege claim.
Courts can also issue clawback orders under FRE 502(d) providing that disclosures connected with pending litigation don’t waive privilege. These orders are increasingly common in cases involving large-scale electronic discovery, and putting one in place early can save significant trouble. On the receiving end, ABA Model Rule 4.4(b) requires a lawyer who receives a document and knows or reasonably should know it was sent by mistake to promptly notify the sender.
Where Privilege Does Not Apply at All
Attorney-client privilege has a hard boundary: it does not protect communications made to further or conceal a crime or fraud. If you email your lawyer seeking help carrying out an illegal scheme, that email is not privileged no matter how it’s labeled or how narrow the recipient list is.
The crime-fraud exception requires two things: the client was engaged in or planning criminal or fraudulent activity when the communication occurred, and the communication was intended to facilitate or conceal that activity. Past conduct is different. If you committed a crime last year and email your attorney seeking a defense, that communication is fully privileged. The exception targets communications used as tools for ongoing or future wrongdoing, not conversations about what you’ve already done.
Intent matters. A client asking “what would happen if someone hypothetically did X” to understand legal exposure sits in a different place than a client asking “how do I structure this transaction to avoid getting caught.” Courts look at whether the client had a fully formed intent to commit the wrongful act. The Supreme Court noted in Clark v. United States that a “mere charge of wrongdoing” isn’t enough to pierce privilege; the party trying to get past it has to make a threshold showing.
Sharing With Allies Without Waiving
Sometimes you need to share privileged information with someone other than your attorney without losing the protection. The common interest doctrine allows this in limited circumstances. When two or more parties, each represented by their own lawyers, share a common legal interest and agree to exchange information to develop a joint legal strategy, the shared communications can remain privileged.
Every element has to be there. Both sides need their own attorneys involved. A direct exchange between two clients, without each party’s lawyer participating, typically doesn’t qualify. The shared interest must be a legal one, not just a business alignment. And the communication must advance a joint legal strategy, not a commercial objective.
If you’re considering sharing privileged material with an ally in litigation or a co-party in a regulatory investigation, get a written common interest agreement in place first. Without documentation, you’re relying on a court’s after-the-fact determination that the doctrine applies.
How Long the Protection Lasts
Attorney-client privilege doesn’t expire when your matter concludes or when you stop working with a particular lawyer. The protection continues indefinitely, and the Supreme Court has held that it survives even the client’s death.
Emails you exchanged with your attorney years ago remain privileged unless you or someone authorized to act on your behalf waives the protection. Archived privileged emails deserve the same care as current ones. Privilege that survived decades can still be lost by careless handling of old files.