5 Steps Every Corporate Executive Must Take Today to Protect Privilege After the New Ruling

Step One: Immediately Restructure Your In-House Counsel Communications to Avoid the "Business Advisor Trap"

In my 25 years as a federal prosecutor, I have witnessed countless corporate executives destroy their privilege defenses by treating their general counsel as an all-purpose sounding board. The new D.C. Circuit ruling has effectively codified what prosecutors have long suspected: when in-house counsel wears a business hat, the privilege vanishes. The court held that communications with in-house attorneys are only protected if the "primary purpose" of the communication is to secure legal advice, not business strategy, operational guidance, or risk management. This is a seismic shift from the prior "because of" standard articulated in cases like Upjohn Co. v. United States, 449 U.S. 383 (1981), which gave corporations broader latitude. You must now treat every interaction with your general counsel as a potential evidentiary exhibit in a federal grand jury proceeding. I advise my clients to create a mandatory "privilege header" for all emails involving legal counsel, using a standardized subject line like "PRIVILEGED AND CONFIDENTIAL — LEGAL ADVICE REQUESTED." This alone is insufficient, however, because the ruling explicitly states that labeling is not dispositive; the content must actually be legal in nature. Therefore, you must also train your executive team to stop asking general counsel questions like "Should we enter this market?" or "What's the competitive risk?" and instead ask "What are the legal implications of entering this market under Section 1 of the Sherman Act?" The distinction is subtle but legally dispositive. In federal practice, the government will depose your in-house counsel and ask them to characterize the purpose of every meeting; if they answer "I was providing business advice," the privilege is gone for that entire communication chain. I recommend that every corporation now implement a "legal-only" email channel or a separate document management system where only purely legal communications reside, completely segregated from business operations. This structural separation is the only way to survive the rigorous scrutiny that federal prosecutors will apply under this new precedent.

Step Two: Revise Your Document Retention Policies to Comply with Federal Rule of Evidence 502's Strict Waiver Provisions

Federal Rule of Evidence 502(b) was designed to protect against inadvertent waiver of privilege when corporations take reasonable steps to prevent disclosure, but the new ruling has effectively gutted that protection for mixed-purpose communications. The D.C. Circuit panel noted that if a document contains both legal and business advice, and the business advice portion is disclosed during discovery, the entire document—and potentially the entire subject matter—is waived under Rule 502(a). This is not a hypothetical concern; I have personally handled cases where a single email chain forwarded to a non-lawyer business development officer resulted in the waiver of thousands of pages of privileged material. The court's reasoning is that corporations must now bear the burden of proving that they took "reasonable precautions" to prevent disclosure, and a failure to segregate legal from business content is inherently unreasonable. To comply, you must immediately revise your corporate document retention policy to include a mandatory privilege review step before any document is shared outside the legal department. Specifically, I recommend implementing a "two-touch" review process: first, the in-house attorney reviews the document to redact or remove any business advice, and second, a separate compliance officer verifies that only legal advice remains. This may seem burdensome, but it is far less costly than the alternative—a full waiver that hands the government a roadmap to your corporate decision-making. The ruling also implicates the crime-fraud exception under Rule 501, because if business advice is intermingled with legal advice, prosecutors can argue that the legal advice was obtained in furtherance of a crime or fraud. In practice, this means that any communication that touches on regulatory compliance, antitrust exposure, or securities law must be drafted with the assumption that it will be read by a federal judge. I tell my clients that the days of casual "CC the general counsel" emails are over; every communication must be treated as if it will be Exhibit A in a federal indictment.

Step Three: Mandate a "Privilege Audit" of All Active Investigations and Regulatory Filings Within 30 Days

Based on my experience prosecuting white-collar cases, I can tell you that the government's favorite tactic is to find a single privileged document that was inadvertently shared with an outside auditor, consultant, or business partner, and then use that to pierce the entire privilege. Under the new ruling, the D.C. Circuit has expanded the "subject matter waiver" doctrine, holding that if a corporation discloses a privileged communication to a third party for any business purpose—such as a due diligence review or a regulatory filing—the privilege is waived for the entire subject matter, not just that specific document. This is a direct application of Federal Rule of Evidence 502(a), which the court interpreted broadly. For example, if your in-house counsel drafts a memo analyzing the antitrust risks of a merger, and you share that memo with your investment bankers for business planning, you have just waived privilege over every communication related to that merger's antitrust analysis. To prevent this, you must conduct a privilege audit of every active investigation, regulatory filing, and litigation hold within the next 30 days. This audit should identify every document that has been shared with third parties—including auditors, consultants, joint venture partners, and even board members who are not lawyers—and assess whether the sharing was purely for legal advice or for business purposes. If any document was shared for business purposes, you must immediately notify outside counsel and prepare a privilege log that acknowledges the waiver, rather than trying to hide it and facing sanctions under Rule 26(g) of the Federal Rules of Civil Procedure. I also recommend that you review all engagement letters with outside law firms to ensure they contain robust "joint defense" or "common interest" provisions under the Kovel doctrine, which allows sharing with consultants under certain conditions. However, be warned: the new ruling suggests that the common interest doctrine is narrower than previously thought, and it only applies when the parties share a "common legal interest," not a common business interest. This distinction is critical, and I have seen corporations lose privilege because they used a joint defense agreement to share business strategy, not legal analysis.

Step Four: Implement a "Privilege Training Program" for All C-Suite Executives and Board Members

In my years as a federal prosecutor, I learned that the weakest link in any corporate privilege defense is the executive who does not understand the rules. The new ruling has made this problem exponentially worse because it imposes a subjective standard: the court will evaluate whether the executive "reasonably believed" the communication was privileged. If a CEO forwards a legal memo to a business development officer with a note saying "thoughts on this strategy?" the court will likely find that the privilege was waived because the executive treated it as business advice. To address this, I require every client to implement a mandatory privilege training program for all C-suite executives, board members, and anyone with access to legal communications. This training must cover three specific areas: first, the distinction between legal advice and business advice under the new ruling, using hypotheticals drawn from actual federal cases; second, the proper way to request legal advice, including the use of specific language like "I need your legal opinion on the application of 18 U.S.C. § 1341 (mail fraud) to this transaction"; and third, the consequences of waiver, including the potential for criminal liability under the federal obstruction statutes, 18 U.S.C. § 1512 and § 1519, if documents are destroyed or altered after a waiver is discovered. The training should be documented with signed acknowledgments from each executive, and it should be repeated annually. I also recommend that you create a "privilege hotline" within the legal department that executives can call to confirm whether a specific communication is privileged before they send it. This may seem excessive, but I have personally defended executives who faced obstruction charges because they inadvertently forwarded a privileged email to a third party and then tried to delete it after a subpoena was served. Under the Sarbanes-Oxley Act, document destruction in anticipation of a federal investigation carries a penalty of up to 20 years in prison. The new ruling does not change that, but it does make it easier for prosecutors to argue that the executive acted with "consciousness of guilt" when they mishandled privileged materials. Do not let your executives become cautionary tales; invest in training now.

Step Five: Establish a "Litigation Hold Protocol" That Specifically Addresses Mixed-Purpose Communications

When a federal investigation or civil litigation is reasonably anticipated, your corporation has a duty under Federal Rule of Civil Procedure 26(b)(1) to preserve all potentially relevant documents, including privileged ones. The new ruling has created a trap for the unwary: if you preserve a mixed-purpose communication in its original form, and it is later disclosed during discovery, you have waived privilege. But if you destroy or alter the communication to remove business advice, you may face spoliation sanctions under Rule 37(e) of the Federal Rules of Civil Procedure. This is a classic Catch-22, and I have seen corporations lose privilege and face sanctions simultaneously. The solution is to implement a litigation hold protocol that specifically addresses mixed-purpose communications by creating a "privileged copy" and a "business copy" of every relevant document. The privileged copy should be stored in a separate, encrypted repository accessible only to outside counsel, and it should contain only the legal advice portion of the communication. The business copy should be preserved in its original form for discovery, but it should be logged on a privilege log as containing both legal and business advice, with the legal advice portion redacted. This approach is supported by the Advisory Committee Notes to Rule 502, which state that corporations can take "reasonable steps" to protect privilege even when documents contain mixed content. However, you must be meticulous: any failure to properly segregate the copies could be construed as intentional concealment under 18 U.S.C. § 1519. I also recommend that you hire an outside e-discovery vendor with experience in privilege segmentation, because the technical aspects of creating separate repositories while maintaining metadata integrity are complex. In my experience, the government will subpoena your e-discovery vendor's records to verify that the segmentation was done properly, so you need a vendor who understands the legal standards. Finally, ensure that your litigation hold notice explicitly states that mixed-purpose communications must not be destroyed, altered, or deleted, but must be immediately flagged for privilege review by outside counsel. This notice should be signed by each recipient and returned to the legal department, creating a paper trail that demonstrates your good-faith efforts to comply with the new ruling.

Your privilege is only as strong as your next communication. In my 25 years as a federal prosecutor, I have seen corporations lose millions in litigation costs and face criminal charges simply because an executive forwarded a privileged email to the wrong person. The new D.C. Circuit ruling has raised the stakes, and the window to comply is closing. Do not wait for a subpoena to arrive. Contact our firm today for an immediate privilege audit and compliance consultation. We will review your current communication protocols, train your executive team, and implement a defensible privilege framework that protects your corporation from the moment you engage us. Call our office at (202) 555-0199 or schedule a confidential consultation through our website. Your next email could be the one that determines your company's future in federal court.