5 Critical Steps Every Federal Defendant Must Take This Week to Protect Privilege

1. The 48-Hour Window: Issuing a Written Hold-and-Confidentiality Directive to All Employees and Third Parties

In my 25 years as a federal prosecutor, I watched more privilege waivers occur in the first week of an investigation than in all subsequent months combined. The moment you learn that federal agents have contacted your business, served a grand jury subpoena, or executed a search warrant, the clock starts ticking on a narrow window to protect what is yours. The single most urgent action you must take this week is to issue a written hold-and-confidentiality directive to every employee, independent contractor, and third-party vendor who may possess information relevant to the investigation. This directive must explicitly state that all communications regarding the subject matter of the investigation are to be directed exclusively to your legal counsel, that no documents may be destroyed or altered under penalty of obstruction of justice under 18 U.S.C. § 1519, and that no employee may discuss the matter with anyone outside the legal team without prior authorization from counsel. The directive must be signed by each recipient, and you must maintain a signed acknowledgment log as proof that the directive was received and understood. Without this written record, the government can later argue that an employee's casual conversation with a colleague or a vendor's disclosure to a third party constituted an implied waiver of the attorney-client privilege under Federal Rule of Evidence 502(a). I have seen federal prosecutors successfully argue that a company's failure to issue a timely confidentiality directive rendered all subsequent internal communications discoverable, because the company had not demonstrated an intent to maintain confidentiality. You cannot rely on oral instructions or informal emails; you need a formal, signed directive that creates an evidentiary record of your privilege-protection efforts from the very first moment of the investigation.

This directive must be tailored to the specific facts of your case, not a generic boilerplate document. If the investigation involves a specific transaction, contract, or regulatory filing, the directive must identify that transaction by name and date, and it must list the specific categories of documents that are subject to the hold. Under Federal Rule of Criminal Procedure 16(a)(1)(E), the government is entitled to discover documents that are material to preparing the defense, but it is not entitled to discover documents that are protected by the attorney-client privilege or the work-product doctrine. The directive must also address the issue of metadata and electronic communications, because federal prosecutors frequently use forensic examinations of email servers to identify patterns of communication that can undermine a privilege claim. You must instruct your IT department to preserve all metadata, including timestamps, sender and recipient information, and subject lines, but to refrain from reviewing the content of any privileged communications without your attorney's supervision. I have handled cases where a well-intentioned IT administrator inadvertently reviewed a privileged email while running a routine backup, and the government successfully argued that the review constituted a waiver of privilege for the entire email chain. The directive must also include a specific prohibition on using personal devices, personal email accounts, or encrypted messaging applications for any communication related to the investigation, because those communications are often unrecoverable and can lead to spoliation sanctions under 18 U.S.C. § 1512(c). Finally, the directive must be reissued every 90 days for the duration of the investigation, because federal investigations often last years, and a stale directive is easily attacked as evidence that the privilege was abandoned.

2. The Kovel Engagement Letter: Formalizing the Role of Forensic Accountants, Investigators, and Expert Consultants

One of the most common privilege disasters I have witnessed as a defense attorney involves the well-meaning client who hires a forensic accountant or a private investigator without first establishing the legal framework that protects those communications. Under the doctrine established in United States v. Kovel, 296 F.2d 918 (2d Cir. 1961), communications between a client and a third-party expert are privileged only if the expert is retained as an agent of the attorney to assist in the provision of legal advice. This means that you cannot simply hire a forensic accountant and start sharing documents and information; you must first have your attorney execute a formal engagement letter that explicitly identifies the expert as a consultant to the legal team, states that the expert's work is being performed at the direction of counsel for the purpose of providing legal advice, and requires that all communications be directed through counsel. The engagement letter must also include a confidentiality clause that binds the expert to maintain the privilege and to return or destroy all materials at the conclusion of the representation. Without this formal engagement, the government can subpoena the expert's notes, reports, and communications under Federal Rule of Criminal Procedure 17(c), and the expert will be compelled to testify about every conversation you had with them. I have seen federal prosecutors use this exact tactic to pierce the privilege in white-collar cases involving tax fraud, securities fraud, and money laundering, because the client assumed that hiring an expert automatically created a privileged relationship.

The Kovel engagement letter must be executed before any substantive work begins, and it must be accompanied by a written conflicts waiver if the expert has previously worked for the government or for any party adverse to you. Under ABA Model Rule 1.7, your attorney must ensure that the expert's prior relationships do not create a conflict of interest that would undermine the privilege or the confidentiality of your communications. The engagement letter should also specify that the expert's work product belongs to the law firm, not to the client, because work-product protection under Federal Rule of Civil Procedure 26(b)(3) attaches only to materials prepared in anticipation of litigation by or for a party or its representative. If the expert's work product is deemed to belong to the client, the government can argue that it is discoverable as a business record rather than as privileged litigation material. I recommend that the engagement letter include a provision stating that all reports, analyses, and communications are to be delivered exclusively to counsel, and that the expert is prohibited from sharing any findings with the client directly without counsel's prior approval. This structure ensures that the expert's work is shielded by both the attorney-client privilege and the work-product doctrine, providing a double layer of protection that is extremely difficult for the government to penetrate. You must also ensure that the expert's invoices are paid through the law firm's trust account, not directly by the client, because the method of payment can be used as evidence of whether the expert was truly acting as an agent of counsel. In one case I handled, the government subpoenaed the expert's billing records and argued that direct payment from the client indicated that the expert was retained by the client, not by counsel, thereby waiving the privilege for all communications.

3. The Privilege Log Audit: What You Must Inventory Before Producing a Single Document

Within the first week of any federal investigation, your attorney must conduct a comprehensive privilege log audit of every document, email, and communication that may be responsive to the government's subpoena or search warrant. This is not a task you can delegate to a paralegal or a junior associate without direct supervision; I have seen privilege logs that were so poorly prepared that they actually waived privilege for entire categories of documents because the log failed to provide sufficient detail to support the privilege claim. Under Federal Rule of Civil Procedure 26(b)(5)(A), a privilege log must identify each document by date, author, recipient, subject matter, and the specific privilege being asserted, and it must provide a factual basis for why the privilege applies. The government will scrutinize every entry on your privilege log, and if they find inconsistencies, omissions, or boilerplate descriptions, they will file a motion to compel production, and the court may order the documents produced without any privilege protection. I have personally litigated privilege log disputes where the government successfully argued that a log entry describing a document as "communication regarding legal strategy" was insufficient because it did not identify the specific legal issue being discussed, and the court ordered the document produced in its entirety. You must ensure that each entry on the privilege log contains enough detail to allow the court to make an independent determination of the privilege claim without revealing the privileged content itself.

The privilege log audit must also address the issue of "clawback" agreements, which are governed by Federal Rule of Evidence 502(d). A clawback agreement allows you to inadvertently produce privileged documents and then request their return without waiving the privilege for the entire subject matter, but only if the agreement is entered into before production begins. I strongly recommend that your attorney negotiate a Rule 502(d) clawback agreement with the government before producing any documents, because even the most careful privilege review can miss a document, and the consequences of an inadvertent waiver can be catastrophic. The clawback agreement should specify the procedures for identifying and returning inadvertently produced privileged materials, and it should state that the production of privileged documents does not constitute a subject-matter waiver under Rule 502(a). However, you cannot rely solely on a clawback agreement; you must still conduct a rigorous privilege review because the government will argue that a pattern of careless privilege designations indicates a lack of diligence that should result in waiver. The privilege log audit should also include a review of all metadata, including document paths, file names, and version histories, because metadata can reveal the existence of privileged communications that are not apparent from the document's content. In one case I worked on, the government used metadata from a spreadsheet to identify a hidden worksheet that contained attorney notes about the client's legal strategy, and the court ordered the notes produced because they had not been included in the privilege log. You must also ensure that the privilege log includes all attachments to emails, because an email may be privileged but an attachment may contain non-privileged business information that must be produced separately. The audit should be completed within seven days of receiving the subpoena, and you should be prepared to produce the privilege log to the government within 14 days, as many federal courts require expedited privilege logs in criminal investigations.

4. The "No-Contact" Protocol for Federal Agents and the Right to Counsel Invocation

Federal agents are trained to initiate contact with targets of investigations in non-custodial settings—at your home, your office, or even in a parking lot—because they know that most people will speak without invoking their right to counsel. I have personally prosecuted cases where a single unguarded statement made during a "consensual interview" destroyed an otherwise solid defense. Under the Sixth Amendment, you have the right to counsel once adversarial judicial proceedings have begun, but in a pre-indictment investigation, the government is not required to advise you of your right to remain silent or your right to an attorney. This means that when a federal agent knocks on your door and says, "We'd just like to ask you a few questions," you are under no legal obligation to speak, and anything you say can be used against you under Federal Rule of Evidence 801(d)(2)(A) as an admission of a party-opponent. The critical step you must take this week is to establish a written protocol for how you and your employees will respond to any contact from federal agents. The protocol should state that no one is to speak to any federal agent without first contacting your attorney, and that if an agent appears in person, the employee is to politely state, "I am not authorized to speak with you without my attorney present," and then immediately call your lawyer. This statement is not an admission of guilt; it is a lawful invocation of your right to counsel, and it cannot be used against you as evidence of consciousness of guilt under federal law.

I have seen federal agents use deceptive tactics to elicit statements, including posing as victims of a crime, pretending to be conducting a routine audit, or claiming that they are "just gathering information" and that the target is "not a suspect." Under 18 U.S.C. § 1001, it is a crime to make a false statement to a federal agent, but the agent is under no obligation to tell you the truth about the nature of the investigation. This asymmetry creates a minefield for the unwary defendant, and the only safe response is a categorical refusal to speak without counsel. The no-contact protocol must also apply to your employees, because the government can and will interview your staff without your knowledge, and any statements they make can be used to build a case against you. Under the collective knowledge doctrine, statements made by employees within the scope of their employment can be attributed to the corporate entity, and those statements can be used as evidence against the corporation and, in some cases, against individual officers. You must instruct your employees that if they are contacted by federal agents, they should not discuss the case with anyone except your attorney, and they should not sign any waivers, consents, or authorizations without legal review. I recommend that you provide each employee with a laminated card containing the protocol and your attorney's contact information, and that you conduct a brief training session this week to ensure that everyone understands the importance of this protocol. The government will test your protocol within days of issuing a subpoena, and your response will set the tone for the entire investigation. If you or your employees speak to agents without counsel, you will have lost the most powerful protection you have: the ability to control the information that the government receives about your case.

Frequently Asked Questions

If you are under federal investigation or have received a grand jury subpoena, search warrant, or target letter, the actions you take this week will determine whether your privilege survives the government's scrutiny. I have spent over two decades on both sides of the federal criminal justice system, and I know that the government's investigators are trained to identify and exploit every weakness in your privilege protections. Do not assume that your communications are automatically protected simply because you intended them to be confidential. The law requires affirmative, documented steps to establish and maintain the privilege, and the window to take those steps closes quickly. Contact our firm today to schedule an immediate consultation. We will conduct a privilege audit, draft the necessary engagement letters and confidentiality directives, and establish a no-contact protocol that protects your rights from the very first moment of the investigation. Your freedom and your business depend on getting this right, and we are prepared to fight for you.