Attorney-client privilege is one of the most powerful legal protections available — but it's also one of the most misunderstood. For small business owners, these misconceptions can be expensive.
Here are the five most common mistakes we see, and how to avoid each one.
Mistake #1: "I Talked to a Lawyer Once, So Everything Is Privileged"
The reality: Privilege only covers communications made for the purpose of seeking or providing legal advice within an established attorney-client relationship.
A casual conversation with a lawyer friend at a dinner party? Not privileged. A quick question to your corporate attorney about a non-legal matter? Not privileged. An email to your lawyer that CC's three non-attorneys? Probably not privileged (you just waived it).
How to get it right: Privilege must be intentional. The communication must be:
- Between you and your attorney (not just any lawyer)
- For the purpose of legal advice (not business advice)
- Kept confidential (not shared with third parties)
Mistake #2: "My AI Legal Research Is Privileged Because I Used It for Legal Purposes"
The reality: This is the most dangerous misconception in 2026. Using ChatGPT, Claude, or any AI tool to research a legal issue does not create privilege. There is no attorney-client relationship with an AI tool, and no attorney is directing the analysis.
After United States v. Heppner, courts have been clear: AI-generated legal analysis without attorney involvement is fully discoverable.
How to get it right: If you need privileged legal analysis, the AI must operate as a tool under attorney supervision, within a real attorney-client relationship. This is the model ACPrivilege.ai uses — but standalone AI tools don't offer this.
Mistake #3: "Labeling Something 'Privileged' Makes It Privileged"
The reality: Stamping "ATTORNEY-CLIENT PRIVILEGED" on a document doesn't make it so. Courts look at the substance, not the label. A business memo labeled "privileged" that was written without attorney involvement, or that discusses business strategy without legal advice, won't be protected.
We've seen companies stamp their entire email archive as "privileged." Courts are not amused by this.
How to get it right: Privilege labels should be used — but only on communications that actually qualify. The label should match the substance: a communication with your attorney, seeking legal advice, kept in confidence.
Mistake #4: "My Attorney's Advice Stays Privileged No Matter What I Do"
The reality: Privilege can be waived — and it's easier to waive than most people think.
Common ways businesses accidentally waive privilege:
- Forwarding attorney advice to non-privileged parties (sending your lawyer's email to a business partner, vendor, or friend)
- Discussing privileged advice in front of third parties (mentioning what your lawyer said in a meeting with outsiders)
- Putting privileged information in non-privileged documents (copying attorney advice into a business memo or board presentation without marking it)
- Selective disclosure (sharing some privileged documents but not others — a court may find you've waived privilege for all related documents)
How to get it right: Treat privileged communications like classified information. Don't forward, don't discuss openly, and don't mix privileged content into non-privileged documents without careful consideration.
Mistake #5: "I Don't Need Privilege Until I'm in Litigation"
The reality: By the time you're in litigation, it's too late. Privilege must exist at the time the communication is made. You can't retroactively privilege a document or analysis.
This is especially relevant for:
- Contract reviews done before signing — if the deal goes south, your pre-signing analysis is discoverable unless it was privileged
- Compliance assessments — if a regulator comes knocking, your self-audit is discoverable unless attorney-directed
- Employment decisions — if an employee sues, your internal analysis of the situation is discoverable unless privileged
- AI legal research — any analysis you ran through AI tools is discoverable
How to get it right: Build privilege into your process before you need it. When you're evaluating a legal risk — reviewing a contract, assessing compliance, analyzing an employment situation — do it within an attorney-client relationship so the analysis is protected from day one.
The Cost of Getting It Wrong
The consequences of misunderstanding privilege aren't abstract:
- In contract disputes: Your pre-signing analysis becomes the opposing party's roadmap to proving what you knew
- In employment litigation: Your internal assessment of the situation becomes evidence of what you were thinking
- In regulatory investigations: Your compliance self-audit becomes the government's case-in-chief
- In IP disputes: Your freedom-to-operate analysis becomes evidence of willful infringement
The Simple Fix
For most small businesses, the fix is straightforward:
-
When you need legal analysis, get it through an attorney. The cost of a privileged consultation ($50–$450 through ACPrivilege.ai) is trivial compared to the discovery risk.
-
When you receive attorney advice, keep it confidential. Don't forward, don't share, don't copy into non-privileged documents.
-
When you use AI for legal research, do it under attorney supervision. The AI analysis is just as good — but now it's privileged.
-
When in doubt, ask your attorney whether a communication is privileged before sharing it.
Privilege isn't complicated. It just requires intentionality. Build it into your process now, and you'll never have to wish you had later.