Attorney-Client Privilege: Scope, Waiver, and Exceptions

Attorney-client privilege is a legal rule that protects confidential communications between you and your lawyer from being forced into evidence, and you—not your attorney—control whether that protection stays in place. The privilege applies only when three things line up: a genuine attorney-client relationship, a communication kept confidential, and a purpose of seeking or giving legal advice. Miss any of those, or trigger one of the recognized exceptions, and the protection can vanish.

Who Controls the Privilege and What It Covers

The privilege belongs to the client. Your lawyer cannot waive it without your consent and cannot refuse to assert it when you want it invoked. If you decide to tell a reporter, a business partner, or a federal investigator what your attorney told you, that is your choice, but it can permanently destroy the protection over that communication.

Your lawyer also carries an independent professional duty to keep your information confidential even if you never ask. Under ABA Model Rule 1.6, an attorney generally cannot reveal information relating to your representation without your informed consent.1American Bar Association. Rule 1.6 Confidentiality of Information The duty of confidentiality is broader than the privilege and covers more information; the privilege is the narrower rule that blocks forced disclosure in legal proceedings.

Communications, Not Underlying Facts

This is where a lot of people go wrong. The privilege protects what you told your lawyer and what your lawyer told you. It does not protect the underlying facts. If you hand your attorney a bank statement and discuss what it means, your conversation about the statement is privileged, but the statement itself remains discoverable through a subpoena or other legal process. Giving a document to your lawyer does not immunize it.

The same rule applies to your own knowledge. If you told your lawyer you were at a certain location on a certain day, the other side cannot force your lawyer to repeat what you said, but they can depose you directly and ask where you were. The privilege shields the communication. It never shields the fact.

The form of the communication does not matter. Spoken words, handwritten notes, emails, text messages, and even gestures that convey information within the relationship all qualify. Electronic communications get the same protection as paper files, provided you handle them with reasonable care.

When the Attorney-Client Relationship Forms

You do not need a signed engagement letter or a retainer check. If you sit down with an attorney for an initial consultation and share sensitive information, the privilege typically covers that conversation even if the lawyer never takes your case. ABA Model Rule 1.18 makes this explicit: a person who consults with a lawyer about possibly forming a professional relationship is a “prospective client,” and the lawyer cannot use or reveal information learned during that consultation.2American Bar Association. Rule 1.18 Duties to Prospective Client

Courts evaluate the question from your side. Did you reasonably believe you were consulting a licensed attorney for legal advice? If so, the protection attaches whether or not the lawyer intended to take the case. That prevents the unfair result of someone disclosing damaging information during a consultation and having it turned against them because no formal agreement was ever signed.

Corporate Clients

When a corporation gets legal advice, the privilege reaches beyond the executive suite. In Upjohn Co. v. United States, the Supreme Court rejected the narrow “control group” test that some lower courts had used and held that communications between corporate counsel and lower-level employees can also be privileged.3Legal Information Institute. Upjohn Co v United States After Upjohn, the privilege covers communications where an employee speaks to the company’s attorney at the direction of a supervisor, about matters within the scope of the employee’s duties, and for the purpose of enabling the lawyer to give the company legal advice. The Court declined to write a rigid formula and left federal courts to apply the privilege case by case under Federal Rule of Evidence 501.4Justia US Supreme Court. Upjohn Co v United States, 449 US 383 (1981)

Keeping the Communication Confidential

Even with a real attorney-client relationship and a real legal-advice purpose, the privilege only applies when you took steps to keep the communication private. This is where privilege claims most often fall apart. Discuss your legal strategy in a crowded restaurant, copy a friend on a sensitive email to your lawyer, or bring a casual acquaintance to a meeting, and a court will likely find you never intended the conversation to be confidential.

The general rule: allowing a third party who has no role in your legal representation to be present for a lawyer-client conversation waives the privilege. Bringing a family member for emotional support, however understandable, will usually destroy the protection. The exceptions are narrow. Someone essential to the representation—a translator, a necessary expert, a paralegal—does not break confidentiality because their presence serves the professional relationship.

Waiver After the Fact

Confidentiality is not just about who was in the room. If you later post details of your lawyer’s advice on social media, tell your neighbor what your attorney said, or forward a privileged email to someone outside the legal team, you have likely waived the privilege over that communication. One careless disclosure can open the door to forced production of everything on the same subject.

Sharing privileged material with a federal agency is particularly risky. Under Federal Rule of Evidence 502(a), when an intentional disclosure to a federal office or agency waives the privilege, the waiver can extend to other undisclosed communications on the same subject if fairness requires them to be considered together.5Legal Information Institute. Federal Rules of Evidence 502 If your company hands over internal audit reports to the SEC, opposing counsel in a later civil case will likely argue that the privilege over related documents is gone. Most federal circuits do not recognize a “selective waiver” that would let you disclose to the government while holding the line against private litigants, though the law in this area varies.

Inadvertent Disclosure

Mistakes happen. A paralegal includes a privileged memo in a document production, or a lawyer sends a confidential email to the wrong address. Federal Rule of Evidence 502(b) provides a safety net. An inadvertent disclosure in a federal proceeding does not waive the privilege if three conditions are met: the disclosure was genuinely inadvertent, the privilege holder took reasonable steps to prevent it, and the privilege holder promptly took reasonable steps to fix the error once discovered.5Legal Information Institute. Federal Rules of Evidence 502 What counts as reasonable depends on the situation. A privilege review protocol for large document productions, encryption on sensitive emails, and clawback agreements with opposing counsel all help.

The Common Interest Doctrine

Sharing privileged information with anyone outside the attorney-client relationship normally kills the privilege. The common interest doctrine carves out an exception. When separately represented parties share a common legal interest, they can exchange privileged information with each other and their respective attorneys without waiving the protection. It shows up most often in joint defense agreements, where multiple defendants coordinate legal strategy through their lawyers.

The requirements are strict. The shared interest must be legal, not merely commercial. The parties must be actively engaged in a joint effort to advance that legal interest at the time of the communication. A general desire to succeed in a case, or overlapping business goals, will not do. Courts are especially skeptical in transactional settings, where parties negotiating a deal against each other typically do not share a common legal interest until they face a shared legal threat from a third party.

Artificial Intelligence and Privilege

Generative AI has created a new risk. In United States v. Heppner, a federal court in the Southern District of New York ruled in February 2026 that documents a defendant created using a public AI chatbot were not privileged. The court hit all three foundational requirements. The AI is not a lawyer, so there was no attorney-client relationship. The platform’s terms of service permitted the company to collect user inputs and share data with third parties, including government regulators, destroying any reasonable expectation of confidentiality. And the defendant used the AI on his own, not for the purpose of obtaining legal advice from counsel.

The court went further. Even if the defendant had incorporated information from his actual lawyer into his AI prompts, he waived the privilege over that information by sharing it with the AI platform, “just as if he had shared it with any other third party.” Entering confidential case details into a public AI tool is functionally the same as telling a stranger. Your conversation with your lawyer about an AI’s output can still be privileged. Your conversation with the AI itself almost certainly is not.

The Communication Must Be for Legal Advice

Not every conversation with a lawyer is privileged. The privilege attaches only when the primary purpose is to seek or give legal advice. Call your attorney to discuss a stock tip, get their opinion on a restaurant, or chat about your weekend, and none of that is protected. More consequentially, when a lawyer sits on a company’s board and participates in a business strategy meeting, the communications at that meeting are likely not privileged, because the lawyer is acting in a business capacity rather than a legal one.

The hard cases involve communications that mix legal and business advice, which happens constantly in the corporate world. An in-house lawyer emailing the executive team about a proposed transaction might be giving legal analysis and business recommendations in the same message. Federal courts have not settled on one test, and the answer depends on the circuit.

  • Primary-purpose test. The Second, Fifth, Sixth, and Ninth Circuits ask whether the dominant reason for the communication was to give or receive legal advice. If business advice was the main point, no privilege.
  • Significant-purpose test. The D.C. Circuit asks whether obtaining legal advice was one of the significant purposes. This test is more protective and can cover mixed communications the primary-purpose test would not.
  • No privilege for dual-purpose documents. The Seventh Circuit has taken the hardest line, holding in the context of tax documents that a document prepared for both tax preparation and litigation gets no privilege at all.

The safest practical approach is to separate legal advice from business advice whenever possible. A standalone email addressing the legal risks of a transaction is far easier to protect than a single message weaving legal analysis into operational recommendations.

Exceptions That Can Override the Privilege

The privilege is powerful, but not absolute. A few well-established exceptions can strip it away even when every foundational requirement was met.

Crime-Fraud

If you consult a lawyer to help plan, carry out, or conceal a crime or fraud, those communications lose their protection. This is the most commonly invoked exception. The privilege exists to help people get honest legal advice, not to shield illegal activity. Asking your lawyer how to hide assets in bankruptcy, destroy evidence, or structure a fraudulent transaction falls squarely within the exception.

A nuance the exception is narrower than people assume. When a court applies it, the court strips protection only from the specific communications made in furtherance of the criminal or fraudulent conduct. It does not blow up the entire attorney-client relationship or expose every conversation you ever had with your lawyer. Your legitimate consultations remain privileged.

The party seeking to pierce the privilege must first show enough factual basis to give a reasonable person a good-faith belief that reviewing the communications might reveal evidence of crime or fraud. If the court agrees, it reviews the disputed communications privately before deciding whether to order disclosure. The attorney may also be called to testify about the relevant communications.

Self-Defense

When a client sues their former lawyer for malpractice, files a bar complaint, or refuses to pay legal fees, the lawyer has to be able to respond. ABA Model Rule 1.6(b)(5) permits a lawyer to disclose confidential information to the extent reasonably necessary to establish a claim or defense in a dispute with the client, defend against a criminal charge or civil claim arising from the representation, or respond to allegations about the lawyer’s conduct.1American Bar Association. Rule 1.6 Confidentiality of Information

The key limit is proportionality. A lawyer defending a malpractice claim cannot dump the entire client file into the public record. The disclosure must be narrowly tailored to what is reasonably necessary to address the specific dispute. In fee collection cases, the lawyer can reveal enough to establish that the services were performed and the fees earned, but cannot use confidential financial information learned during the representation to locate and levy the client’s assets. Lawyers who threaten to reveal confidential information as leverage to force payment risk professional discipline.

The Privilege Survives Death

In Swidler & Berlin v. United States, the Supreme Court held that attorney-client privilege survives the client’s death.6Legal Information Institute. Swidler and Berlin v United States The Court reasoned that clients would be far less candid with their lawyers if they knew their communications could be pried open after they died. It rejected a balancing test for posthumous privilege in criminal cases, noting that such an approach would inject too much uncertainty into the rule. People need to know before they speak that confidentiality will hold.7Library of Congress. Swidler and Berlin v United States, 524 US 399 (1998)

The one recognized carve-out is the testamentary exception. When a deceased client’s heirs are fighting over a will or trust, the attorney may testify about the client’s intent regarding those estate documents. Courts justify this exception on the ground that it actually furthers the dead client’s wishes.

Work Product Is a Separate Protection

People often confuse attorney-client privilege with the work-product doctrine, and the difference matters because each protects different things and can be defeated in different ways. Attorney-client privilege covers communications between you and your lawyer. The work-product doctrine protects documents and materials prepared in anticipation of litigation or for trial, including research memos, case strategy notes, witness interview summaries, and draft reports.8Legal Information Institute. Attorney Work Product Privilege

Two practical differences stand out. Work-product protection can cover materials prepared by people other than the attorney, including paralegals, consultants, and investigators, as long as the materials were made to prepare for litigation. Attorney-client privilege covers only communications between the attorney and the client, plus necessary agents of either. And work-product protection can be overcome. If the opposing party shows a substantial need for the materials and cannot obtain the equivalent information without undue hardship, a court may order production.8Legal Information Institute. Attorney Work Product Privilege Attorney-client privilege generally cannot be pierced by a showing of need. The exceptions above are the only paths through.

One slice of work product gets near-absolute protection: materials revealing the attorney’s mental impressions, conclusions, opinions, and legal theories. Courts almost never order disclosure of this “opinion work product,” even when the opposing side can show substantial need. A lawyer’s handwritten notes about trial strategy and internal assessment of which arguments are strongest sit behind the highest wall the doctrine offers.

Practical Steps to Keep the Privilege Intact

Understanding the legal requirements is only half the job. Privilege gets lost through carelessness far more often than through any court ruling. A few habits make a real difference.

Label communications accurately. If an email genuinely contains or seeks legal advice, putting “Privileged and Confidential—Attorney-Client Communication” in the subject line signals your intent and helps anyone reviewing documents during litigation flag it for protection. Do not slap that label on every email you send. Overuse dilutes it, and a court will not honor the label on a message that plainly discusses routine business operations.

Keep the audience tight. Copy only people who need to be part of the legal conversation. Every extra recipient who is not your lawyer, your lawyer’s staff, or someone functionally necessary to the representation is a potential argument that you did not intend the communication to be confidential. If you need to share your lawyer’s advice with a business team, consider having the lawyer communicate directly with the relevant people rather than forwarding a privileged email.

Be careful with technology. Using a public AI chatbot to analyze legal issues, draft arguments, or summarize your lawyer’s advice can destroy privilege over anything you input, as Heppner made clear. Work email systems with employer-monitoring policies can similarly undermine your expectation of privacy. When in doubt, use a personal device and a personal email account for sensitive attorney-client communications, and ask your lawyer what security measures they use on their end.

Separate legal advice from business discussion. In a corporate setting, keep legal analysis in standalone communications rather than burying it in meeting minutes or operational emails. A clean separation makes it far easier to assert privilege over the legal portions without exposing everything else. When your in-house lawyer joins a meeting that covers both legal and business topics, have them send a separate follow-up email addressing only the legal issues.