7 Ways to Protect Attorney-Client Privilege in Investigations

Last Updated: November 1, 2026

Table of Contents

• Why Attorney-Client Privilege Fails in Internal Investigations
• The Work-Product Doctrine in Investigations: What It Covers Beyond Privilege
• Step 1: Establish the Attorney-Client Relationship Before the First Interview
• Step 2: Define the Investigation's Legal Purpose in a Written Engagement
• Step 3: Deliver an Investigation Upjohn Warning in Every Employee Interview
• Step 4: Build a Privileged Investigation Report With Controlled Distribution
• Step 5: Prevent Waiver of Attorney-Client Privilege in Digital Systems
• What to Do When Privilege Is Challenged or Materials Are Disclosed
• Frequently Asked Questions

Why Attorney-Client Privilege Fails in Internal Investigations

Most companies lose attorney-client privilege before anyone realizes it's gone. The leak rarely comes from a dramatic courtroom ruling. It comes from a routine email, a copied HR manager, or an interview nobody warned the employee about.

Attorney-client privilege is the legal protection that keeps confidential communications between a client and their lawyer out of the hands of opposing parties. In an internal investigation, that protection can cover witness interviews, factual findings, and legal analysis. But it only applies when the rules are followed from day one.

Privileged investigations often collapse when the company treats the investigation like an HR task instead of a legal one. The fix is a workflow, not a memo.

Below, we break down the seven steps that keep privilege intact, plus the digital and interview risks that quietly destroy it.

The Work-Product Doctrine in Investigations: What It Covers Beyond Privilege

The work-product doctrine in investigations protects materials prepared in anticipation of litigation, even when no lawyer is directly involved in creating them. It is broader than privilege in one key way: it can shield an investigator's notes, witness statements, and factual summaries that privilege alone might not reach.

Here's the distinction that matters in practice:

• Privilege protects confidential communications between client and counsel.
• Work-product protection shields documents prepared because litigation was reasonably anticipated.
• Overlap happens when counsel directs the investigation, giving materials both layers of protection.

What most guides miss is that work-product protection is not automatic. It depends on showing that litigation was expected when the document was created. A report written in the ordinary course of business gets far less protection than one prepared at counsel's direction.

Watch out: mixing routine business records with investigation materials in the same file can weaken both protections. Keep them separate from the start.

Step 1: Establish the Attorney-Client Relationship Before the First Interview

Privilege begins with a real attorney-client relationship. That means engaging counsel in writing before the first witness is contacted, not after a problem surfaces.

The corporate client is the company, not the individual employee. Counsel represents the organization, and that relationship must be documented clearly. A common mistake is assuming a general retainer covers investigative work. It usually doesn't.

Our recommendation: have outside counsel issue a written engagement letter that names the investigation, defines who is directing it, and states that the work is legal advice. For the investigative work itself, see Corporate Investigations from Special Solutions, Ltd.

Step 2: Define the Investigation's Legal Purpose in a Written Engagement

A written engagement does more than assign a task. It records the legal purpose of the investigation, which is the foundation for both privilege and work-product protection.

The engagement should state:

• Why the investigation is being conducted, tied to a legal risk or anticipated litigation
• Who directs the work and who receives the findings
• The scope, including what is and isn't being examined
• How documents and interview notes will be handled

Without a documented legal purpose, opposing counsel will argue the investigation was ordinary business activity. That argument often wins. The engagement letter is your first line of defense.

Step 3: Deliver an Investigation Upjohn Warning in Every Employee Interview

An investigation Upjohn warning tells an employee, before questioning, who the lawyer represents and how the interview may be used. It is the single most overlooked step in workplace investigations, and the one most likely to be litigated later. The name comes from *Upjohn Co. v.

The warning should make four things clear, in this order:

Start a confidential consultation →

• Who counsel represents. Counsel represents the company, not the employee. The employee is a witness, not a client.
• What is protected and who controls it. The conversation may be protected by attorney-client privilege, but the company, not the employee, holds and can waive that privilege.
• What the employee may and may not do. The employee should keep the discussion confidential and should not discuss it with coworkers, but is free to consult their own personal attorney.
• What happens if the employee is later a subject. If the employee's own conduct becomes a focus, the company may share information with the government or take positions adverse to the employee, and the employee may want independent counsel.

Deliver the warning the same way every time, and document that you did. Before interviews begin, review this guidance on Hiring Investigators for Internal Fraud Cases, including scope and evidence handling. A common pattern is a one-page written acknowledgment the employee signs and dates, paired with a verbal recitation on the record.

If the employee objects, declines to sign, or asks for their own lawyer, stop and escalate to counsel before continuing. An interview conducted over objection is exactly the fact pattern that invites a later challenge.

Step 4: Build a Privileged Investigation Report With Controlled Distribution

A privileged investigation report is only as protected as its distribution list. The more people who see it, the weaker the protection becomes.

Keep the circle small and on a need-to-know basis. That usually means counsel, a limited number of executives, and the investigators. Do not copy the whole management team "for awareness."

Label the report clearly as legal advice prepared at counsel's direction. Separate factual findings from legal analysis so each layer of protection is visible. Limited distribution is not about secrecy for its own sake. It is what keeps the privilege defensible if it is ever tested.

Step 5: Prevent Waiver of Attorney-Client Privilege in Digital Systems

Waiver of attorney-client privilege rarely happens in a conference room. It happens in shared drives, chat threads, forwarded emails, recorded calls, and, increasingly, AI assistants that ingest whatever is pasted into them. The practical problem is that modern work tools are built to share by default, so privilege protection has to be engineered into the systems, not just the memo.

Third-party disclosure is the fastest way to lose protection. Every time a privileged document lands in an unprotected inbox, a public channel, or a vendor's model, the argument for waiver gets stronger. The controls below map to the tools where disclosure actually happens:

Risk	Control	Why It Matters
Shared drive exposure	Named-user access only, with access reviews	Limits third-party disclosure
Chat channel leaks	Keep privileged talk out of general channels; use private channels with counsel	Reduces waiver risk
Auto-deletion	Apply legal holds	Preserves protected materials
Email forwarding	Staff training and labeling	Stops accidental disclosure
Meeting recordings	Default off for privileged sessions; store in counsel-controlled repository	Recordings are discoverable and easy to forward
AI tools	Prohibit pasting privileged content into public models; use enterprise tools with no-training terms	Ingesting privileged text into a third-party model is a disclosure
Mobile and personal devices	Require company-managed apps for investigation communications	Personal accounts are hard to preserve and easy to leak

A few mechanics matter more than the table:

• Label at creation, not later. Apply a consistent legend, for example, "Privileged & Confidential, Attorney Work Product, Prepared at the Direction of Counsel", to reports, interview memos, and email threads from the first draft. A label added after a dispute is worth far less.
• Separate repositories. Keep investigation materials in a counsel-controlled workspace, not the general legal or HR drive. Mixing routine business records with investigation materials in the same folder weakens both privilege and work-product protection.
• Preserve, don't just restrict. A legal hold that suspends auto-deletion is what keeps the privilege defensible when you later have to produce a privilege log. Coordinate the hold with your retention schedule so nothing is destroyed on a timer. See How to Build a Document Retention Policy That Withstands Legal Scrutiny for a defensible schedule and legal hold guidance.
• Vendor and consultant access. Outside investigators and e-discovery vendors can be brought inside the privilege circle, but only under a written engagement with counsel and a confidentiality agreement. Ad hoc access by an IT vendor is a disclosure.

Confidentiality in digital systems is where many modern investigations run into trouble. For a deeper guide, see Maintaining Confidentiality in Corporate Investigations.

What to Do When Privilege Is Challenged or Materials Are Disclosed

When privilege is challenged, speed and documentation decide the outcome. Courts look at whether the company treated the material as confidential from the start.

Your response plan should include:

• Identify exactly what was disclosed and to whom
• Document the steps taken to contain the disclosure
• Confirm the material was prepared for legal advice or anticipated litigation
• Preserve a clean chain of custody for any evidence involved

If materials have already been disclosed, the priority shifts to keeping the underlying evidence admissible. Authentication and chain of custody become critical.

A challenge is not the end of the investigation. It is a test of whether the workflow was followed.

---

Privilege is fragile, and one misstep in an interview or a shared folder can undo months of careful work. Special Solutions, Ltd. provides discreet investigative services with documented evidence compiled into reports suitable for legal proceedings. Start a confidential consultation to discuss your investigation.

Frequently Asked Questions

How do you maintain attorney-client privilege during an internal investigation?

Keep counsel in charge from the start. Have an attorney engage the investigators, define the legal purpose in a written scope, and route all findings through counsel. Mark documents as privileged and confidential, distribute them only on a need-to-know basis, and deliver an Upjohn warning in every employee interview. Avoid copying HR, IT, or outside consultants on privileged communications unless counsel directs it, because each extra recipient is a potential argument for waiver.

Does hiring an attorney make an internal investigation privileged?

No. Courts look at the primary purpose of the investigation. If the work is driven by business or compliance goals rather than legal advice, privilege may not attach even with counsel involved. The investigation must be directed by counsel, tied to a legal purpose such as anticipated litigation or a regulatory inquiry, and documented that way. A written engagement letter and a clear scope memo are the strongest evidence that the purpose was legal from day one.

Can a privileged investigation report lose protection if it is shared with executives?

It can. Sharing the report beyond the client group, meaning those who need it to make legal decisions, weakens the claim. Limit distribution to the general counsel, the board or audit committee where appropriate, and counsel's own team. Send summaries rather than full reports to business leaders when possible, keep a distribution log, and instruct every recipient in writing not to forward the document. A single careless forward can support a waiver argument.

Are employee interviews during an investigation protected by attorney-client privilege?

Often yes, but only when counsel directs the interview and the employee understands who the lawyer represents. Under the Upjohn framework, communications from employees to company counsel can be protected when made at the direction of the company for the purpose of obtaining legal advice. The interviewer should state that counsel represents the company, not the employee, and that the conversation is privileged and should stay confidential. Document that warning in the interview notes.