TOP TRENDING THE MAGAZINE. Menu. 1 of 6 6/7/16 4:38 PM. Keep it Simple, Legal. A New Role Bridging Business and Legal at Shell

Similar documents
Development of your Company s Record Information System and Disaster Preparedness. The National Emergency Management Summit

Top Ten Tips for Managing e-discovery Vendors

NYDFS Cybersecurity Regulations: What do they mean? What is their impact?

COUNTY OF RIVERSIDE, CALIFORNIA BOARD OF SUPERVISORS POLICY. ELECTRONIC MEDIA AND USE POLICY A-50 1 of 9

Acceptable Use Policy

Privacy Policy... 1 EU-U.S. Privacy Shield Policy... 2

Policies & Regulations

Mark Your Calendars: NY Cybersecurity Regulations to Go into Effect

Elements of a Swift (and Effective) Response to a HIPAA Security Breach

MEMORANDUM AND ORDER ON PLAINTIFFS' MOTION TO COMPEL

Data Breach Preparation and Response. April 21, 2017

5/6/2013. Creating and preserving records that contain adequate and proper documentation of the organization.

Acceptable Use Policy

Putting It All Together:

CONFLICT OF INTEREST SYSTEMS

BYOD (Bring Your Own Device): Employee-owned Technology in the Workplace

Information Security Incident Response Plan

Managing Your Record Retention Policy Safely

1. Right of access. Last Approval Date: May 2018

Case 2:07-cv MMB Document 123 Filed 11/26/2008 Page 1 of 7 IN THE UNITED STATES DISTRICT COURT FOR THE EASTERN DISTRICT OF PENNSYLVANIA

Understanding Privilege in an Electronic World BY JEFFREY E. DUBIN AND SAM A. BENSON, JAVITCH, BLOCK & RATHBONE, LLC

Federal Rules of Civil Procedure IT Obligations For

encrypted, and that all portable devices (laptops, phones, thumb drives, etc.) be encrypted while in use and while at rest?

s, Texts and Social Media: What Physicians Need to Know

BENEFITS of MEMBERSHIP FOR YOUR INSTITUTION

Data Protection Policy

Forensic analysis with leading technology: the intelligent connection Fraud Investigation & Dispute Services

THINGS YOU NEED TO KNOW BEFORE DELVING INTO THE WORLD OF DIGITAL EVIDENCE. Roland Bastin Partner Risk Advisory Deloitte

CAET Privacy Policy August

DCU Guide to Subject Access Requests. Under Irish Data Protection Legislation

GDPR: A QUICK OVERVIEW

Management: A Guide For Harvard Administrators

A Privacy and Cybersecurity Primer for Nonprofits Nonprofits in the Digital Age March 9, 2016

UWC International Data Protection Policy

Data Privacy & Protection

Information Security Incident Response Plan

DFARS Cyber Rule Considerations For Contractors In 2018

Newsletters We may send out newsletters to our customers providing them with articles and information which we believe may be of interest to you.

ORA HIPAA Security. All Affiliate Research Policy Subject: HIPAA Security File Under: For Researchers

8/28/2017. What Is a Federal Record? What is Records Management?

Canadian Anti-Spam Legislation (CASL) Campaign and Database Compliance Checklist

New York DFS Cybersecurity Regulation:

Shielding the Organization from Data Risk & E- Discovery Failures

Credit Card Data Compromise: Incident Response Plan

1. General provisions

DETAILED POLICY STATEMENT

Forensic analysis with leading technology: the intelligent connection Fraud Investigation & Dispute Services

Checklist for Rule 16(c) Pretrial Conference for Computer-Based Discovery

Records Management and Retention

To Document or Not to Document: That is the Question DPLE 182

Protecting Personally Identifiable Information (PII) Privacy Act Training for Housing Counselors

NEW YORK CYBERSECURITY REGULATION COMPLIANCE GUIDE

Polemic is a business involved in the collection of personal data in the course of its business activities and on behalf of its clients.

Data Management and Security in the GDPR Era

BERKELEY COLLEGE Social Media Policy

2017 Data Security Incident Response Report. Be Compromise Ready: Go Back to the Basics

TITLE SOCIAL MEDIA AND COLLABORATION POLICY

Data Processor Agreement

2. What is Personal Information and Non-Personally Identifiable Information?

Department of Defense Public Affairs Guidance for Official Use of Social Media

Electronic Discovery in Employment Cases: What Every Employer Needs to Know. Presented By: Shannon Cohorst Johnson

Managing and Electronic Records: A Transition Priority

TechTarget, Inc. Privacy Policy

IDENTITY THEFT PREVENTION Policy Statement

EMPLOYEE COMPUTER, , AND INTERNET USAGE POLICY

New York Department of Financial Services Cybersecurity Regulation Compliance and Certification Deadlines

Privacy Statement. Your privacy and trust are important to us and this Privacy Statement ( Statement ) provides important information

SOC for cybersecurity

University Policies and Procedures ELECTRONIC MAIL POLICY

Employee Privacy, Digital Evidence, and the CFE. Kenneth C. Citarella, M.B.A., J.D., CFE Managing Director, Investigations Guidepost Solutions LLC

GDPR Processor Security Controls. GDPR Toolkit Version 1 Datagator Ltd

Developing Issues in Breach Notification and Privacy Regulations: Risk Managers Are you having the right conversation with the C Suite?

Shaw Privacy Policy. 1- Our commitment to you

Privacy Policy. Effective date: 21 May 2018

Enterprise Vault & e-discovery

The Impact of Cybersecurity, Data Privacy and Social Media

Legal Considerations and Case Studies

PRIVACY POLICY Last Updated May, 2018

By Richard Boire March A Practioner s Viewpoint on Data Mining & Privacy Part 2

HIPAA Privacy, Security and Breach Notification

2018 HOT TOPICS LEGAL TRENDS IMPACTING PUBLIC TRANSIT

The Evolving Threat to Corporate Cyber & Data Security

DONE FOR YOU SAMPLE INTERNET ACCEPTABLE USE POLICY

Security Breach Notification Reflections on the U.S. Experience

Google Cloud & the General Data Protection Regulation (GDPR)

Avoiding the Pitfalls of Bring Your Own Device Policies

2018 Data Security Incident Response Report Building Cyber Resilience: Compromise Response Intelligence in Action

and Privacy HIPAA-Compliance Checklist

DATA PROTECTION AND PRIVACY POLICY

Investigating Insider Threats

Canada s Anti-Spam Law ( CASL ): It s the Law on July 1, 2014 questions for directors to ask

The GDPR Are you ready?

The Legal Health Record and E-Discovery: Where You Need to Be

LifeWays Operating Procedures

Vistra International Expansion Limited PRIVACY NOTICE

RUTGERS POLICY. Section Title: Legacy UMDNJ policies associated with Information Technology

GUIDELINES FOR SUBMITTING CONTINUING PROFESSIONAL EDUCATION (CPE) CREDITS

Procedures for responding to requests for personal data to support Data Protection Policy

The Trail of Electrons

VERSION 1.3 MAY 1, 2018 SNOWFLY PRIVACY POLICY SNOWFLY PERFORMANCE INC. P.O. BOX 95254, SOUTH JORDAN, UT

Transcription:

Menu TOP TRENDING 1 2 3 4 5 Keep it Simple, Legal A New Role Bridging Business and Legal at Shell GC Perspectives on Legal Operations LGBT Employee Considerations Outside the United States How to Act when Regulators Come Knocking THE MAGAZINE Our Current Issue Digital Docket Article Archive Back Issues Authoring Guidelines Editorial Calendar Subscribe 1 of 6 6/7/16 4:38 PM

An In-house Counsel s Guide to Protecting the Attorney Client Privilege By Alison Bost and Shawn Haque 2016-Mar-18 COMMUNITY Tips for Managing Your International Contracts Portfolio Image: The portable 'Cone of Silence' from the 1960s television series Get Smart. Credit: Michael Coté, Flickr The attorney client privilege, codified in Rule 501 of the Federal Rules of Evidence, is the oldest common law privilege for confidential communications. Its purpose is to encourage full and frank communication between attorneys and their clients and thereby promote broader public interests in the observance of law and administration of justice. The privilege recognizes that sound legal advice and advocacy serve public ends and that such advice and advocacy depend upon the lawyer's being fully informed by the client. The privilege exists to protect not only the giving of professional advice to those who can act on it but also the giving of information to the lawyer to enable her to give sound and informed advice. Worst Case Scenario Lessons Learned Compliance It Can Start with Contracts Breach Response Why Having a Plan B is So Important More > So how can in-house lawyers best protect this important privilege? And how can they avoid potentially compromising the attorney client privilege? Client-Attorney Relationships are Key Who is your client? Corporate counsel should always be able to answer that question clearly. Counsel cannot protect the attorney client privilege unless and until both the lawyer and the client are clear on who is the client. Without question, corporate counsel represents the corporate entity. But do you also represent any affiliates? Do you also represent any constituents, such as individual officers, directors, shareholders, or employees? What seems like an 2 of 6 6/7/16 4:38 PM

easy question can be difficult in a particular application, such as in the context of an internal investigation. When you have identified who your client is for a particular matter, be sure to communicate that to your client and any others who might incorrectly believe they are also your client. For protection of the privilege in an internal investigation context, Upjohn requires communication about whom corporate counsel represents. In some circumstances, it may be desirable that the communication be in writing. In addition to knowing their clients, in-house lawyers also need to know themselves. For example, in-house counsel should make sure their bar licenses are active. Some courts have considered the status of a corporate counsel's law license in analyzing a claim of privilege and have denied the protection where that license is inactive. IN-HOUSE ACCESS Big Law Implicit Bias How Can it be Fixed? ACC Middle East, Legal Week Present Corporate Counsel Middle East Awards Compliance via Smartphone Stop Fighting It! Also, you should consider your title and what impact it may have on the privilege. Many in-house lawyers have both a legal title and a business title, such as Vice President and General Counsel. When communicating on legal matters, counsel should consider using only the legal title to keep the business title from blurring the line. The Email Trail Email policies and procedures are another key consideration in protecting the attorney client privilege. How often do you receive emails asking for advice and soliciting your legal opinion? If that is something that ever crosses your in box, you should consider training company employees on how to seek your advice. For example, words like "I need your legal advice" or "request for legal advice" will go a long way to preserving the privilege and are more effective than "I have a question." Such requests should also be addressed specifically to you or an attorney on your team rather than being directed to a business person with just a cc to the lawyer. And cc's should be given their own special consideration. Emails requesting or providing legal advice should include other business people only if necessary and then only as cc's. Attorneys also need to be aware of how to communicate when they send email. To protect the privilege when using emails, avoid communications with an "intermingled" business and legal purpose as much as possible. In other words, you should keep privileged legal discussions and non-privileged business discussions in separate emails chains as much you can. And speaking of email chains, counsel should consider disabling the reply all function as a means of protecting the privilege. At the very least, counsel should not let privileged discussions continue in a long email chain because, inevitably, the topic will stray and new people may be added to the email string thereby risking the privilege protection. 3 of 6 6/7/16 4:38 PM

Also, consider that many emails sent or received by lawyers are not privileged. For those non-privileged emails, consider cutting off and not using the standard privilege language that automatically attaches to most attorneys' email. Overuse of the privilege language on obviously non-privileged communications may dilute its effectiveness when we need it to apply to important privileged communications. Before sending out an email, consider who truly needs to see it. For ease of communication, attorneys and business people may often be placed together in an email group. What impact might communications to that mail group have on the privilege? If that mail group includes people who are not involved in a particular legal matter and do not have a reason to be included in legal communications, you should assume those communications will not be privileged. Counsel should train their team and colleagues to think deliberately about the distribution list when circulating materials intended to be privileged and to distribute them as narrowly as possible only to those with a need to know. Policies, Resources and Written Communications Sometimes the simple things are the most important. Just as counsel should not use standard privilege language on obviously non-privileged emails, it is worth taking the time specifically to mark written communications as "Confidential, Subject to the Attorney Client Privilege" when they really are. Having that designation on documents and emails certainly helps during discovery as they can be sorted by the key word "privilege." And once confidential, privileged communications have been made, they must be treated and maintained as confidential in order to preserve the privilege going forward. Also, be aware that not every international jurisdiction recognizes the privilege between an entity and its in-house counsel. For example, there is no such privilege protection under European Union law. What if corporate counsel renders advice in one jurisdiction but the ensuing dispute is litigated in another jurisdiction? To protect the privilege, corporate counsel must have the foresight to anticipate when litigation might occur in other jurisdictions and may need to research that local law to understand whether the privilege will apply. Company policies can help make employees and other personnel aware of situations where the company expects the privilege to apply and the importance of preserving the privilege. For example, any policy addressing internal investigations should include a statement that they are undertaken for the purpose of obtaining legal advice. Policies that describe the company hotline and reporting procedures should include language to the effect that any resulting investigations will be conducted at the direction of in-house counsel and for the purpose of providing legal advice to the company. Document retention policies should describe the various ways the company protects its privileged documents. Finally, in-house lawyers should remember that they have resources at their 4 of 6 6/7/16 4:38 PM

disposal to help them protect the attorney client privilege. Thus, in situations where it is especially important to preserve the privilege, you should consider looping in your outside counsel. Protecting the attorney client privilege in an in-house environment requires sound policies and procedures, a properly trained workforce and constant vigilance from the in-house attorney. But legal departments that put in this work on the front end will find it well worth their time if and when the privilege is needed. Compliance & Ethics Attorney-Client Privilege About the Author Alison Bost is the deputy general counsel of Womble Carlyle Sandridge & Rice, LLP. Shawn Haque is corporate counsel for Accenture Federal Services LLC. Related Items Top Ten Tips for Protecting the Privilege Privilege and Confidentiality Disclaimer Top Ten Cases Involving Ethical Issues for In-House Counsel Privilege in a Global Landscape Part II: International In-house Counsel The information in any resource collected in this virtual library should not be construed as legal advice or legal opinion on specific facts and should not be considered representative of the views of its authors, its sponsors, and/or ACC. These resources are not intended as a definitive statement on the subject addressed. Rather, they are intended to serve as a tool providing practical advice and references for the busy in-house practitioner and other readers. 5 of 6 6/7/16 4:38 PM

2016 ACC Docket.com Privacy Policy Terms of Use Media Kit 30-Somethings A Publication of the Association of Corporate Counsel 6 of 6 6/7/16 4:38 PM