Emails to lawyers are generally confidential, but that protection is not automatic and it is easier to lose than most people realize. Two separate legal rules do the work: attorney-client privilege, which stops a court from forcing your lawyer to reveal what you wrote, and the lawyer’s ethical duty of confidentiality, which stops the lawyer from sharing it voluntarily. Whether either protection actually applies to a given email depends on who you sent it from, who else saw it, and what you were asking about.
Privilege and Confidentiality Are Not the Same Thing
People use these words interchangeably, but they cover different ground.
Attorney-client privilege is a rule of evidence. It keeps a court from compelling your lawyer, or you, to disclose your communications in litigation. It only covers direct communications made for the purpose of getting or giving legal advice.
The duty of confidentiality is a professional ethics rule. It applies to everything a lawyer learns about you during the representation, not just what you told them directly, and it applies outside of court too. Under the Model Rules of Professional Conduct, a lawyer cannot reveal information relating to your representation unless you give informed consent, disclosure is necessary to carry out the work, or a specific exception applies.1American Bar Association. Rule 1.6: Confidentiality of Information
So an email can lose privilege (meaning it becomes usable in a lawsuit) while your lawyer still has a professional duty not to gossip about it. The two protections overlap, but losing one does not automatically mean losing the other.
What an Email Needs to Qualify as Privileged
Three conditions have to be met.
The email has to be a communication between you and a licensed attorney. The primary purpose has to be seeking or providing legal advice. And you have to have sent it with a reasonable expectation that it would stay private.
That middle requirement is where a lot of emails fail. Copying a lawyer on a message about a business deal or an internal policy does not turn the message into legal advice. If the lawyer is functioning as a business advisor rather than a legal one, no privilege attaches. This comes up constantly with in-house counsel, where legal input and business input run together.
The third requirement, the expectation of privacy, is where email itself becomes a problem. A message from your personal, password-protected account to your lawyer’s professional address meets it. The same message from a shared family computer that anyone in the house can open may not.
Emails to a Lawyer You Haven’t Hired Yet
You do not need a signed engagement letter for protection to start. Under the professional conduct rules, anyone who consults a lawyer about possibly hiring them is a “prospective client,” and what they share during that consultation is protected.2American Bar Association. Rule 1.18: Duties to Prospective Client Your first “I have a situation, can you help” email is covered even if the lawyer turns you down or you decide to hire someone else.
One thing to be aware of: what you tell a lawyer during a consultation may disqualify that lawyer from later representing someone on the other side. Some lawyers handle this by asking you to sign a short agreement before the consultation limiting how much sensitive information you share. The rules permit that kind of arrangement if the lawyer keeps the information intake reasonably narrow, walls themselves off from the matter if a conflict shows up, and gives you written notice.2American Bar Association. Rule 1.18: Duties to Prospective Client
How You Can Destroy the Privilege Yourself
The privilege belongs to you, which means you are the one most likely to lose it. The legal term is waiver.
The easiest way to waive privilege is to forward your lawyer’s advice to someone else. The moment you send that email to a friend, a spouse, a colleague, or a business partner, you have shown that you did not intend to keep it secret, and a court will likely treat the privilege as gone for that message. The same reasoning applies to copying a non-lawyer on the original email, whether by CC or BCC. A third party who is not essential to the legal representation breaks the confidentiality that privilege requires.
There is a narrow exception. If the person you are sharing with has a genuinely shared legal interest, such as a co-defendant coordinating strategy through their own lawyer, the privilege may survive under the common interest doctrine. This is not a loophole for looping in whoever seems relevant. Both sides need a real, aligned legal interest, and the communication has to relate to it.
Then there is subject matter waiver. When you intentionally disclose one privileged email on a topic, a court may find you have waived privilege over all related communications on that same subject. Federal Rule of Evidence 502(a) limits how far that spreads by asking what is fair given the circumstances, but the point stands: once you crack the privilege in one place, the crack can travel.3Legal Information Institute. Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product; Limitations on Waiver
Work Email Is the Biggest Trap
Emailing your lawyer from a company email address or a work computer is one of the riskiest choices you can make with a confidential communication. Many employers reserve the right to monitor everything sent and received on company systems. If your employer has a policy like that and you agreed to it, even by accepting an employee handbook you barely read, a court may find you had no reasonable expectation of privacy in those emails at all.
Courts looking at this question generally weigh four factors drawn from a widely cited bankruptcy court decision: whether the company bans personal use of its systems, whether the company actively monitors email, whether third parties have access to the computer or account, and whether the employee was notified of the policy. In one Delaware case applying those factors, three of the four cut against the employees, and their emails to personal attorneys sent through company systems lost privilege.
If you need to email a lawyer about anything you would not want your employer reading, use a personal email account on a personal device, on a network your employer does not control. It is the single most effective step you can take.
When the Law Overrides Confidentiality
Even a properly protected communication can be pierced in certain situations.
Crime or Fraud in Progress
If you communicate with a lawyer to commit or further a crime or fraud, those communications are not privileged. Asking a lawyer how to hide assets from a judgment, structure a fraudulent deal, or destroy evidence falls inside this exception. Timing is the key. You can freely tell your lawyer about a crime you have already committed and need to defend against. You cannot use your lawyer to plan the next one.
Disputes Between You and Your Lawyer
If you sue your lawyer for malpractice or fight over a bill, the lawyer may reveal confidential information to the extent reasonably necessary to defend themselves.1American Bar Association. Rule 1.6: Confidentiality of Information A lawyer cannot mount a defense while gagged from discussing the representation at issue. The disclosure is limited to what the dispute actually requires.
Joint Representation
When two clients share one lawyer on the same matter, the privilege works against outsiders but not between the two clients. If the co-clients later end up on opposite sides of a lawsuit, everything they said during the joint representation becomes discoverable in that fight. Anyone entering a joint representation should know this before they start.
Preventing Serious Harm
Under the Model Rules, a lawyer may reveal confidential information if they reasonably believe disclosure is necessary to prevent reasonably certain death or substantial bodily harm.1American Bar Association. Rule 1.6: Confidentiality of Information The rule says “may,” leaving the call to the lawyer’s judgment. Some states make it mandatory. Either way, if an email reveals an imminent threat to someone’s life, confidentiality will not shield it.
Pasting Legal Emails Into AI Tools
Copying a lawyer’s email into ChatGPT or another AI system to get a summary or a second opinion feels harmless. It may not be. The legal question is whether putting privileged content into a third-party AI system counts as disclosing it to a third party, which would waive the privilege the way any other disclosure does.
Courts are split. In early 2026, a federal court in New York held that documents prepared using an AI assistant were not privileged, on the reasoning that sharing information with an AI system put it outside the attorney-client relationship. Weeks later, a federal court in Michigan came out the other way, treating AI programs as tools rather than people and holding that using a tool is not disclosure to a third party.
Until a court in your jurisdiction rules one way or the other, the safe approach is to keep privileged communications out of any AI tool your lawyer has not specifically approved. A waiver you create by pasting cannot be undone.
Practical Steps to Keep Your Emails Protected
- Use a personal email account on a personal device, on a network your employer does not control. Skip work email entirely for anything sensitive.
- Do not forward your lawyer’s advice or CC anyone else on your emails to your lawyer. If a business partner or family member needs to be in the loop, ask your lawyer to handle that communication directly.
- Put “Privileged and Confidential — Attorney-Client Communication” in the subject line. It does not create privilege by itself, but it shows you intended the message to be private, which matters if a court later has to decide.
- Ask about encryption for particularly sensitive matters. ABA Formal Opinion 477R treats unencrypted email as generally acceptable for routine communications while recognizing that some information warrants encryption or a different channel entirely.
- Keep legal emails focused on legal questions. A message that opens with “I need legal advice about…” is far easier to protect than one mixing legal questions with business instructions and personal updates.
None of this is complicated. Skipping any one of these steps is how most people lose a protection they thought they had.