Data Protection Act 2018, Schedule 2, Part 4, paragraph 19 provides:
‘The listed GDPR provisions do not apply to personal data that consists of—
(a) information in respect of which a claim to legal professional privilege or, in Scotland, confidentiality of communications, could be maintained in legal proceedings, or
(b) information in respect of which a duty of confidentiality is owed by a professional legal adviser to a client of the adviser.’
Privilege is a right to resist the compulsory disclosure of information, and in particular documents which:
(i) contain legal advice; or
(ii) were created for the dominant purpose of obtaining information or advice, in connection with actual or contemplated litigation.
(Shlosberg v. Avonwick Ltd [2017]).
Under English law, whether or not a communication is privileged is a procedural question and thus governed by the law of the forum (see further Dicey, Morris and Collins, paragraph 7-022).
The primary forms of legal professional privilege are:
(i) ‘legal advice privilege’, which attaches to certain communications between a lawyer and a client; and
(ii) ‘litigation privilege’, which attaches to certain communications between a lawyer or client on the one hand and a third party on the other.
A lawyer, in-house or external, must be acting in their professional capacity before privilege will attach to any legal advice delivered.
The content of the communication must be ‘legal advice’.
For ‘legal advice’ which is not about litigation, the communication will only be privileged if made between lawyer and client.
Where ‘legal advice’ is sought or delivered through an agent, i.e. as a conduit, what may look like a communication between a lawyer and a third party which would not attract legal advice privilege, may in fact be a communication between a lawyer and an agent of the client.
Privileged material may be shared without loss of privilege.
However, once confidence in a communication is lost, privilege falls away because confidence is an essential ingredient of privilege.
Common interest privilege allows a client (‘A’) to share information with a third party (‘B’).
If B has a common interest in the subject matter of the communication then B can also claim privilege in it. (See further, ‘Fiduciaries and legal professional privilege’ by Gareth Tilley, Barrister, Serle Court, London, Trusts & Trustees, Vol 24, No.3, April 2018, 243-249).
SRA Guidance states:
‘Paragraph 6.3 of the Code of Conduct for Solicitors, RELs and RFLs and of the Code of Conduct for Firms (referred to collectively as (“the Codes”) requires you to keep the affairs of current and former clients confidential unless disclosure is required or permitted by law or the client consents.
This duty of confidentiality exists as an obligation under both common law and data protection legislation as well as being one of the core professional principles set out in section 1(3)(e) of the Legal Services Act 2007 and professional standards in our Codes.
The Courts have stated that the duty to preserve confidentiality is unqualified, in that it is a duty to keep the information confidential, not merely to take all reasonable steps to do so. It is not limited to the duty not to communicate the information to a third party. …
The duty of confidentiality applies to information about your client’s affairs irrespective of the source of the information. …
Confidentiality will attach to all information given to you, by your client or a third party, in connection with the retainer in which you or your firm are instructed. Should you have information unrelated to the retainer this may not be covered by your duty.’
NB also the Freedom of Information Act 2000 s.36(2)(b) which provides:
‘Information to which this section applies is exempt information if, in the reasonable opinion of a qualified person, disclosure of the information under this Act—
(b) would, or would be likely to, inhibit—
(i) the free and frank provision of advice, or
(ii) the free and frank exchange of views for the purposes of deliberation …’