Forwarded, Copied, Undone: The Everyday Habits That Quietly Strip Away Attorney-Client Privilege

There is a particular irony in modern corporate litigation: a company will pay hundreds of thousands of dollars for legal advice, fight fiercely to keep that advice confidential, and then — through a single keystroke — hand it to the other side. No hacker required. No dramatic breach. Just a forward button, pressed by an executive who wanted to keep a colleague in the loop.

We call this the privilege hangover. The advice was secured, the fees were paid, the protection existed. Then the morning after, someone shared the memo a little too widely, and the protection was gone.

Privilege Is a Shield That Breaks Easily

Attorney-client privilege is among the oldest doctrines in American law, and it is frequently misunderstood by the very executives who benefit from it. The common assumption is that privilege attaches to the topic — that anything touching a legal matter is protected. It is not. Privilege attaches to confidential communications between client and counsel made for the purpose of obtaining legal advice, and it can be waived in more ways than most people imagine.

The doctrine's most unforgiving feature is waiver. Once a privileged communication is disclosed to a third party outside the protected relationship, the shield is typically lost — not merely weakened, but lost. And because waiver often extends to subject matter, one careless disclosure can unravel an entire thread of otherwise protected correspondence.

Three Scenes We See Repeatedly

The helpful forward. A general counsel sends a carefully reasoned email analyzing litigation exposure to the CEO. The CEO forwards it — legal analysis, candid admissions and all — to a regional manager, a board member's assistant, and an outside vendor coordinating logistics. Each recipient outside the circle of confidentiality is a potential waiver. The litigation that follows is fought, in part, with the company's own internal candor.

The over-inclusive CC line. An in-house lawyer is added to a distribution list that includes sales, operations, and a contractor's project manager. The lawyer's presence does not automatically make the thread privileged — and worse, the lawyer's own replies on that broad thread may not be protected either, because the communication is no longer functioning as confidential legal advice to a defined client.

The sticky-note summary. An executive attends a privileged meeting with counsel, then sends a breezy recap to her leadership team: "Talked to the lawyers about the acquisition issue — short version, we're probably exposed on the reps." The summary is not itself a communication with counsel, and it may not be privileged at all. Yet it memorializes the substance of privileged advice, and it lands in a discoverable inbox.

In each scenario, no one acted dishonestly. The participants were simply being collaborative, in the way modern workplaces reward. That is precisely the danger.

A Working Protocol for Executives and In-House Teams

The remedy is not paranoia; it is protocol. Organizations that protect privilege well tend to share a few habits.

Label with intention. Communications intended to be privileged should say so — concisely. A subject line noting that the message contains a request for legal advice, sent only to counsel and the specific decision-makers who need it, does more good than a boilerplate footer nobody reads.

Separate the channels. Business commentary and legal analysis do not belong in the same email. Mixing operational chatter into a thread with counsel dilutes the claim that the communication was for legal advice. Keep the two conversations in separate streams.

Limit the audience before you hit send. Every additional recipient is a potential waiver. Before CC'ing an assistant, a deputy, or a board member, ask whether that person genuinely needs the content — or merely awareness that advice was sought. Awareness can be conveyed without disclosure.

Train for the moment of temptation. The most common waiver happens under deadline pressure, when an executive wants to move fast and loops in the world. A short, recurring training — thirty minutes, twice a year — pays for itself the first time it prevents a disclosure.

Audite the archive. Periodically review how legal advice is actually circulating through your systems. If privileged analyses are living in shared drives, group chats, or onboarding binders, the protection you paid for is already at risk.

Counsel's Responsibility, Too

Law firms share the burden. Outside counsel who draft sprawling memos, reply-all to client threads, or fail to instruct clients on handling their work product are contributing to the problem. A firm that bills for privileged advice has a professional obligation to help the client keep it privileged — including practical guidance on distribution and retention.

The Cheaper Alternative to Regret

Privilege, once waived, rarely returns. Courts differ on the edges, but the general rule is blunt, and opposing counsel will not be charitable in interpreting your forwarding habits. Against that backdrop, the discipline described above costs almost nothing — a subject line here, a smaller CC list there.

The advice itself is only half of what clients buy when they retain counsel. The other half is the confidentiality that makes candid advice possible. Protecting it is not a legal technicality. It is stewardship of an asset the company has already paid for — and it deserves the same care as any other investment.