Attorney-client privilege in ediscovery: A step-by-step checklist for avoiding costly clawbacks

Protecting attorney-client privilege is one of the most critical — and costly — aspects of modern ediscovery. A single inadvertent production can cost millions of dollars, destroy cases, and result in professional discipline. With proper strategy and the right technology, you can protect privileged information even in the most complex discovery battles.

Here are the essentials. Download the full checklist below for the complete workflow.

Establish ESI protocols before discovery begins

Your first line of defense is negotiated before review even starts. 

• Negotiate a Federal Rule of Evidence 502(d) order — it prevents waiver even in other proceedings and should be requested early in the Meet and Confer process.
• At minimum, put a clawback provision in writing: return/destroy timelines, notification windows, and a process for disputed materials.

Structure your privilege review strategically

Treat privilege review in phases, not as one massive effort. Breaking it down will make review more manageable.

• Prioritize high-risk material first: attorney communications, in-house counsel materials, draft memos, and anything prepared in anticipation of litigation.
• Save routine business communications and low-risk custodians for later passes.
• Don't overlook drafts, attachments, and metadata — review full email threads and check metadata before production, since it can reveal attorney involvement.

Maintain a defensible privilege log

Your privilege log is your insurance policy if a dispute ever arises.

• Include document descriptions, dates, authors/recipients, the basis for each privilege claim, and a general subject matter — specific enough for opposing counsel to assess, general enough not to waive privilege.
• Update it throughout review, not just at the end, and skip boilerplate language.

Lock down security provisions

Courts have ruled that careless file-sharing waives privilege entirely.

• Use only approved litigation platforms — never consumer-grade file sharing.
• Require password protection and MFA, set link expiration dates, and encrypt confidential files before sharing.

Monitor communications and productions

Protecting privilege requires demonstrable effort, not boilerplate confidentiality notices.

• Maintain audit trails and run a final QC pass — with a second reviewer on attachments and drafts — before every production.
• If something privileged does go out, notify opposing counsel immediately and document every step you take to fix it.

Know what to do when you receive privileged materials

Rules vary by jurisdiction, so know your obligations before it happens.

• Under FRE 502: promptly return, sequester, or destroy the material, don't use it until the claim is resolved, and notify the sender.
• Document when you discovered it, how you notified the other side, and what happened next.

Get the full protecting privilege checklist

Protecting attorney-client privilege demands precision, consistency, and the right technology at every stage. Download the full checklist for pre-production assessment questions, a security self-audit, and a complete workflow your whole team can use.

{{protecting-privilege-checklist}}

Frequently asked questions on protecting privilege in ediscovery

What is attorney-client privilege in ediscovery? It’s the legal protection that shields confidential communications between a client and their attorney from disclosure. In ediscovery, that protection is at risk any time privileged documents get mixed in with the broader collection of business records under review — which is why a deliberate review and production strategy matters.

What is a clawback agreement? A clawback agreement is a negotiated arrangement between parties that requires the receiving party to return or destroy privileged material if it’s inadvertently produced. It typically specifies notification timeframes and how disputes over the material will be handled or resolved.

What does a FRE 502(d) order do? A Federal Rule of Evidence 502(d) order is a court order stating that privilege isn’t waived by disclosure during the litigation — and it can protect against waiver in other proceedings too, making it stronger protection than a clawback agreement alone.

What should a privilege log include? At minimum, it should include a description of the document (without revealing privileged content), the date, the author and recipients, the basis for the privilege claim, and a general subject matter description specific enough for opposing counsel to evaluate the claim.

What should you do if you receive privileged materials from the other side? Under FRE 502, you must promptly return, sequester, or destroy the material, avoid using or disclosing it until the privilege claim is resolved, and notify the sending party. State rules vary, so check your jurisdiction before proceeding.