Attorney-Client Priviledge and email security
November 5th, 2008Is communication sent through insecure email protocols protected by attorney-client privledge? There is a great article, EMAIL, PRIVILEGE, CONFIDENTIAL INFORMATION AND INADVERTENT DISCLOSURES, written by Rebecca J. Foote of Ford Marrin Esposito Witmeyer & Gleser, LLP that outlines the legal community’s understanding as of 2003. Some interesting points:
- The Electronic Communications Privacy Act of 1986 was thought to allow unencrypted email to be used for privledged communications.
- Inadvertent disclosure is a grey area for email.
Courts have taken both fully waived (once inadvertantly disclosed the information is now public knowledge) and fully unwaived (receiving parties have to act as though they do not know the information exists), but the vast majority evaluate on a case-by-case basis. The center ground courts, Ms. Foote reports, generally look at:
- The reasonableness of the precautions taken to prevent inadvertent disclosure
- The time taken to rectify the error
- The scope of discovery
- The extent of the disclosure
- The overriding issue of fairness
So, if unprotected email has attorney-client privlege attached, why do you need a confidential email solution like email2?
It goes to the first two points covered. In 2003 email encryption technology was complex and expensive. In 2008, the confidentiality provided by email2 is quick, simple and affordable to implement. This lowers the burden of implementation and increases the level of precautions taken to protect the information. Second, email2’s recall function means the unintended transmission can easily be retracted.
Finally, while privledge may still exist, it is meaningless for information presented to the press. In two highly publicized cases this year, lawyers for Eli Lili and State Farm sent confidential communication to reporters. Having a system in place that controls who receives an email, allows an inerant email to be recalled, and provides a complete report of who read the message and when protects client’s confidential information. And as Ms. Foote concluded, “The ‘best’ solution is to avoid the unintended dissemination of privileged or confidential information.”

