Filter by Category

How to Preserve Attorney-Client Privilege During a California Workplace Investigation When HR Is Copied on Emails

In California, copying HR on an email with your lawyer can waive attorney-client privilege if HR isn’t necessary to obtain legal advice. Workplace investigations routinely involve HR, managers, and outside counsel, making privilege easy to lose by accident. This article explains how California privilege works during investigations, where HR fits, and practical steps to preserve confidentiality from the first complaint through final findings.

Workplace investigations in California often move fast: a complaint comes in, HR starts gathering facts, managers want updates, and counsel is asked to weigh in—sometimes all in the same email chain. That speed is exactly how attorney-client privilege gets compromised. When HR is copied on communications with counsel, the key legal question is whether HR’s involvement is reasonably necessary to obtain or implement legal advice, or whether HR is acting primarily in a business/employee-relations capacity.

Why HR “CCs” create privilege risk in California investigations

Attorney-client privilege protects confidential communications between a client and an attorney made for the purpose of seeking or providing legal advice. In the employer context, the “client” is the organization, acting through its authorized representatives. HR is often an authorized representative—but not always for every topic, and not always in every role.

In practice, California courts scrutinize:

(1) Purpose. Is the communication primarily to obtain legal advice (privileged), or primarily for business decision-making, employee relations, or general management (often not privileged)?

(2) Confidentiality. Was the communication kept confidential and shared only with those who reasonably need to know to obtain or carry out counsel’s advice?

(3) Distribution. The more recipients copied “for awareness,” the easier it is for an opposing party to argue the message wasn’t confidential or that it was shared beyond those necessary to the legal consultation.

California’s framework: attorney-client privilege and related protections

Attorney-client privilege (confidential legal communications)

California recognizes a strong privilege for confidential attorney-client communications. But privilege is not a blanket label you can apply by adding an attorney to a thread. A communication is privileged when it is confidential and made for legal advice. Copying HR doesn’t automatically destroy privilege—but it can if HR’s presence is not necessary to the legal consultation or if the email becomes a business discussion with a lawyer copied in.

Attorney work product (counsel’s impressions and strategy)

Separate from privilege, work product protection may apply to attorney impressions, legal research, and certain investigation materials prepared because of anticipated litigation. Work product can help, but it is not a substitute for privilege. If an email is mostly factual and widely distributed, courts may be less likely to treat it as protected, and the employer can still face disclosure obligations in litigation.

The “investigation report” trap

California employers frequently ask: “Is our investigation report privileged?” The safest answer is: not automatically. A report drafted as part of HR’s routine business process may be discoverable even if counsel later reviews it. Conversely, a report prepared at counsel’s direction for the purpose of legal advice and litigation risk assessment has stronger arguments for protection—especially if distribution is limited and the report is integrated into counsel’s legal analysis rather than used as a general HR document.

When copying HR helps privilege—and when it hurts

When HR can be appropriate (and safer)

Copying HR is often defensible when HR is acting as a necessary conduit for counsel’s legal advice, such as:

HR is gathering facts at counsel’s direction for counsel’s legal assessment.
HR is providing payroll, personnel file, or policy information counsel needs to advise on legal exposure.
HR is implementing counsel’s legal recommendations (e.g., corrective action steps, interactive process next steps) and needs the instruction to carry it out.

In these scenarios, HR is not just “interested”—HR is participating as part of the organization’s communication to counsel to obtain legal advice.

When copying HR creates waiver risk

Copying HR can undermine privilege when:

HR is included only for “visibility” or because HR is generally involved in employee relations.
The email includes non-essential recipients (multiple managers, payroll, IT, executive assistants), turning the message into a broad business broadcast.
The content is primarily a business discussion (e.g., “We should fire this employee because the team is frustrated”) with counsel copied as an afterthought.
The email mixes legal questions with routine HR updates, making it harder to defend the primary purpose as legal advice.

Privilege can be waived not only by sharing outside the organization, but also by internal over-sharing beyond those who need to know for the legal consultation. Over-inclusion makes it easier for a plaintiff to argue the communication wasn’t truly confidential.

Practical protocol: preserving privilege when HR is copied on investigation emails

1) Define roles at the start: who is the “need-to-know” group?

Before substantive emails begin, identify the smallest group necessary to obtain and implement legal advice. In many investigations, that group might be: outside employment counsel (or in-house counsel), a designated HR lead, and one decision-maker. If you need a second HR team member for logistics, include them—if not, don’t.

Best practice: Create a short “investigation privilege team” list (names and titles) and instruct recipients not to forward communications outside that list without counsel’s approval.

2) Separate legal advice from business updates

A common privilege failure is combining legal questions and routine status updates in the same message chain. Consider creating two channels:

Legal channel: emails to counsel (and necessary HR/decision-makers) seeking legal advice, labeled and tightly distributed.
Operations channel: HR logistics, scheduling interviews, and non-legal updates, without counsel copied unless needed.

This separation reduces the chance that privileged threads become discoverable because they are dominated by business content.

3) Use clear subject lines and headers (without relying on labels)

Labels do not create privilege, but they help demonstrate intent and confidentiality. Use subject lines like:

“Privileged & Confidential – Request for Legal Advice re: Workplace Investigation”
“Attorney Work Product – Counsel-Directed Investigation Steps”

In the body, add a short header: “Prepared at the direction of counsel for purposes of obtaining legal advice. Do not forward.”

4) Ask legal questions explicitly

Privilege is stronger when the communication clearly seeks legal advice. Compare:

Risky: “FYI—here’s what we found. Thoughts?”

Better: “We are requesting legal advice regarding potential FEHA retaliation risk based on these preliminary facts. Should we interview X next, and what topics should we cover?”

When HR is copied, an explicit legal purpose helps show HR is included to assist counsel’s advice, not for general awareness.

5) Control forwarding and attachments (the hidden waiver)

Even if the initial email is privileged, forwarding it to additional recipients can waive confidentiality. Attachments are especially dangerous: HR may attach witness statements, drafts, or policy analyses that later circulate widely.

Best practice: Share sensitive materials via a restricted-access folder controlled by counsel or a designated administrator, with permissions limited to the privilege team. Avoid forwarding privileged emails; instead, summarize non-privileged action items in a separate operational message.

6) Be cautious with third parties (investigators, consultants, vendors)

Many investigations involve outside investigators, EAP providers, forensic vendors, or PR consultants. Sharing privileged communications with third parties can waive privilege unless the third party is truly necessary to facilitate legal advice (e.g., an interpreter or vendor helping counsel understand technical facts) and confidentiality is maintained.

If a third party must be involved:

Have counsel retain them when feasible.
Use a written engagement that specifies the purpose is to assist counsel in providing legal advice.
Limit communications to what is necessary and keep distribution tight.

7) Handle “HR as investigator” carefully: Upjohn-style warnings and interview notes

When HR interviews witnesses, employees often assume HR is their advocate. To reduce later disputes, organizations should consider using an “organization counsel” warning when counsel directs interviews or when the investigator is acting at counsel’s direction. The warning typically explains:

The investigator represents the company, not the employee.
The company may share information with counsel.
The company controls whether to keep or waive any privilege.

Also consider how interview notes are created and stored. If the purpose is to provide counsel with information for legal advice, label notes accordingly and restrict access. Avoid editorial commentary in widely shared HR files.

Specific California workplace scenarios where HR CCs are most dangerous

Scenario A: Complaint intake email copied to “HR Team,” counsel, and managers

An employee complains of harassment. HR forwards the complaint to a broad group—several HR staff, the manager’s manager, and counsel—asking “What do we do?” This broad distribution invites arguments that the email was not confidential.

Better approach: HR sends a narrow email to counsel and one decision-maker seeking legal advice; HR separately notifies operations about interim scheduling changes without including counsel.

Scenario B: Draft findings report circulated for “comments”

HR drafts an investigation summary and circulates it for input from multiple leaders and HR business partners, copying counsel. Later, the plaintiff requests “all drafts” and related communications.

Better approach: If counsel is directing the investigation, keep drafts within the privilege team and route comments through counsel. If the report is intended as a business record, assume it may be discoverable and draft accordingly.