The exceptions to disclosure standards fall into a handful of recognized categories: privileged communications in legal proceedings, the Fifth Amendment right against self-incrimination, government secrecy provisions, trade secret and contract-based confidentiality, healthcare privacy under HIPAA, and situations where the information isn’t material or is already public. Each category has its own rules, and each has its own limits. Claiming an exception you don’t qualify for can land you in as much trouble as disclosing something you should have kept confidential.
Privileged Communications in Legal Proceedings
Courts generally expect parties to produce relevant evidence, but certain relationships carry a recognized privilege that shields their communications from forced disclosure. The reasoning is consistent across privileges: society gets more from people speaking freely in those relationships than it would from extracting the conversations later.
Attorney-Client Privilege
Confidential communications between you and your lawyer, made for the purpose of getting or giving legal advice, are protected from disclosure. The privilege belongs to the client, so only you can waive it. It covers conversations, emails, and letters made in confidence to your lawyer or your lawyer’s agents. It does not protect the underlying facts, only the communication of them. If you tell your attorney where a document is stored, the document itself isn’t privileged, but your conversation about it is.1Legal Information Institute. Attorney-Client Privilege
Doctor-Patient Privilege
Information you share with a physician during treatment is generally shielded from disclosure. The communication has to occur within a professional medical relationship and be made in confidence. This privilege is a creature of state statute rather than federal common law, and its scope varies. Some states apply it broadly to all licensed healthcare providers; others limit it to physicians. Federal courts recognize it less consistently and often look to the underlying state law.2Legal Information Institute. Doctor-Patient Privilege
Spousal Privilege
Two separate protections apply to married couples. The marital communications privilege shields private statements made between spouses during a valid marriage, as long as the conversation was meant to be confidential. A separate testimonial privilege lets one spouse refuse to testify against the other in a criminal case.3Legal Information Institute. Marital Privilege
Neither form is absolute. The privilege breaks down when the communication was shared with a third party, when one spouse sues the other, or when one spouse is charged with a crime against the other spouse or their children.3Legal Information Institute. Marital Privilege
Clergy-Penitent Privilege
Every state and the federal court system recognize some form of clergy-penitent privilege, though the details differ. It generally protects confidential communications made to a member of the clergy in their spiritual or professional capacity. Some states let only the penitent hold and waive it; others let the clergy member hold it independently. Who counts as clergy and what counts as a protected communication vary by jurisdiction.
Work Product Protection
Separate from attorney-client privilege, the work product doctrine protects documents and materials prepared in anticipation of litigation. If your lawyer, a consultant, an insurer, or another representative prepares notes or analyses because a lawsuit is expected, those materials are generally shielded from discovery. The opposing side can overcome the protection only by showing a substantial need for the materials and an inability to obtain their equivalent elsewhere.
Even when a court orders disclosure of work product, it must still protect the mental impressions, legal theories, and strategic conclusions of the attorney. That inner layer is nearly absolute. One important limit: documents created in the ordinary course of business don’t qualify just because litigation later becomes possible. The prospect of litigation must have been the driving reason for creating them.
The Fifth Amendment Privilege Against Self-Incrimination
The Fifth Amendment prohibits the government from forcing you to give testimony that could incriminate you in a criminal case. The protection reaches beyond statements that would directly prove guilt; it also covers answers that could provide a link in a chain of evidence leading to prosecution.4Constitution Annotated. General Protections Against Self-Incrimination Doctrine and Practice
The privilege protects only testimonial disclosures, meaning your own words or statements. It does not extend to physical evidence like fingerprints, blood samples, or appearing in a lineup. Outside of custodial interrogation, you generally have to affirmatively invoke the privilege rather than simply remain silent. A witness who answers some questions and then tries to stop partway through may be deemed to have waived it.4Constitution Annotated. General Protections Against Self-Incrimination Doctrine and Practice
When Privileges Break Down
Privileges are not unlimited. Several well-established exceptions strip away the protection when keeping the information secret would undermine the privilege’s purpose.
The Crime-Fraud Exception
Attorney-client privilege does not protect communications made to further or conceal a crime or fraud. If you consult a lawyer to plan a future crime rather than to get legitimate legal advice, those communications lose their protection. The exception applies to ongoing and future wrongdoing. Conversations about past completed crimes stay privileged, because the whole point of the privilege is letting people seek legal help about things they’ve already done. The dividing line is intent: asking what could happen if you did something is different from asking a lawyer to help you do it without getting caught.
Mandatory Reporting Obligations
Doctor-patient privilege yields in a number of situations where public safety outweighs individual confidentiality. All 50 states require healthcare providers to report suspected child abuse. Most also require reporting of elder abuse and neglect. Physicians must report certain infectious diseases to public health authorities, sometimes within hours of diagnosis. Gunshot wounds, specific injuries, and certain causes of death also trigger mandatory reporting.
Mental health professionals face an added duty. Following the Tarasoff line of cases, a majority of states impose a duty to warn or protect identifiable third parties when a patient makes a credible threat of serious violence. That duty overrides the confidentiality that would otherwise apply.
Government Withholding of Records
Federal law generally favors transparency through the Freedom of Information Act, but FOIA itself contains nine statutory exemptions that let agencies withhold records.
FOIA Exemptions
Classified national security information is exempt under FOIA’s first exemption, provided it has been properly classified under an existing executive order rather than merely labeled sensitive. Trade secrets and confidential commercial or financial information obtained from private parties are protected under the fourth exemption. Internal agency deliberations, including privileged legal advice, are shielded by the fifth exemption so agencies can have frank policy discussions without every draft memo becoming public.5Office of the Law Revision Counsel. 5 USC 552
The seventh exemption is among the broadest. It protects law enforcement records whose release could interfere with enforcement proceedings, deprive someone of a fair trial, reveal the identity of a confidential source, expose investigative techniques, or endanger someone’s physical safety.5Office of the Law Revision Counsel. 5 USC 552
The sixth exemption shields personal privacy, requiring a balance between the public interest in disclosure and the invasion of privacy that disclosure would cause. The remaining exemptions cover financial institution supervision records and geological data about wells.5Office of the Law Revision Counsel. 5 USC 552
The State Secrets Privilege
Beyond FOIA, the government can invoke the state secrets privilege to withhold evidence from civil litigation when disclosure would threaten national security. The Supreme Court established the framework in United States v. Reynolds (1953). Once the privilege is properly claimed, it overrides even a compelling need by the private party seeking the information.6Legal Information Institute. The State Secrets Privilege
Trade Secrets and Non-Disclosure Agreements
A trade secret is any information that derives economic value from not being generally known and that the owner takes reasonable steps to keep secret. Formulas, customer lists, manufacturing processes, software algorithms, and business strategies can all qualify. Both elements matter: the information must be genuinely valuable because competitors don’t have it, and the owner must actively protect it through access restrictions, password protections, and confidentiality agreements.7United States Patent and Trademark Office. Trade Secret Policy
Lose either element and you lose the trade secret. Information that becomes publicly known through legitimate means, such as independent discovery or reverse engineering, loses its protected status.8Legal Information Institute. Trade Secret
The federal Defend Trade Secrets Act gives trade secret owners a civil cause of action in federal court when misappropriation involves a product or service used in interstate commerce. Remedies can include injunctive relief, actual damages, and, for willful misappropriation, exemplary damages of up to twice the compensatory award. A court cannot use an injunction to prevent someone from taking a new job; any restrictions must be based on evidence of actual threatened misappropriation, not merely on what the person knows.9Office of the Law Revision Counsel. 18 USC 1836 – Civil Proceedings
NDAs are contracts that create a binding obligation to keep specified information confidential. A well-drafted NDA identifies what information is covered, who is bound, and how long the obligation lasts.10Legal Information Institute. Non-disclosure Agreement (NDA)
What NDAs Cannot Silence
This is where employers and employees routinely get the law wrong. Multiple federal statutes make clear that confidentiality agreements cannot silence people who report suspected legal violations to the government.
SEC Rule 21F-17 prohibits any person from taking action to impede someone from communicating with the Commission about a possible securities law violation. That includes enforcing or threatening to enforce a confidentiality agreement against a would-be reporter. Companies that put broad confidentiality language in employment agreements or severance packages without carving out an exception for SEC reporting risk enforcement action for the agreement itself, even if no underlying securities violation occurred.11eCFR. 17 CFR 240.21F-17 – Staff Communications With Individuals Reporting Possible Securities Law Violations
The Defend Trade Secrets Act contains its own whistleblower shield. Under federal law, an individual cannot be held criminally or civilly liable under any federal or state trade secret law for disclosing a trade secret to a government official or an attorney, as long as the disclosure is made in confidence and solely for reporting or investigating a suspected violation of law. The same protection extends to trade secret disclosures in a court filing, provided the filing is under seal.12Office of the Law Revision Counsel. 18 USC 1833
Employers must include notice of this immunity in any contract or agreement that governs the use of trade secrets or other confidential information. No NDA can prevent you from going to the government with evidence of wrongdoing, and no trade secret claim can be used to punish you for doing so through proper channels.
Healthcare Privacy Exceptions Under HIPAA
The HIPAA Privacy Rule governs when healthcare providers, insurers, and their business associates can share your protected health information. The default rule is that your health data cannot be disclosed without your written authorization. The regulation then lists a dozen categories of exceptions where disclosure is permitted or required without your consent.
Covered entities may share your health information without authorization in situations including:
- Treatment, payment, and operations, such as sharing records with a specialist for a referral, with your insurer for billing, or internally for quality improvement.
- Public health activities, including reporting disease outbreaks, adverse drug reactions, or workplace injuries.
- Reporting suspected child abuse, elder abuse, or domestic violence to the appropriate authority.
- Responding to a court order or subpoena, identifying a suspect or missing person, or reporting certain types of injuries to law enforcement.
- Disclosing information necessary to prevent or reduce a serious and imminent threat to someone’s health or safety.
- Responding to discovery requests or subpoenas in judicial proceedings, subject to certain safeguards.
- Sharing information as needed to comply with workers’ compensation laws.
HIPAA and the doctor-patient privilege do different jobs. HIPAA regulates what healthcare entities may do with your data. The doctor-patient privilege governs what can be compelled in court. Both can apply at once, and satisfying one does not automatically satisfy the other.
Information That Never Triggered a Duty to Disclose
Some information is outside the disclosure rules from the start, either because it isn’t material or because it’s already public.
Materiality
In securities law, public companies must disclose information a reasonable investor would consider important when making an investment decision. The Supreme Court has defined a fact as material if there is a substantial likelihood that a reasonable investor would view it as significantly altering the “total mix” of available information. Facts below that threshold do not require disclosure.14U.S. Securities and Exchange Commission. Assessing Materiality: Focusing on the Reasonable Investor When Evaluating Errors
The same filter runs through contract law, tort law, and regulatory compliance. A fact that would not influence anyone’s decision is not one the law insists be disclosed. The SEC has emphasized that materiality is an objective assessment and cannot be reduced to a simple numerical threshold. A small dollar amount can be material if it relates to fraud; a large number can be immaterial if it fits the expected range of a company’s operations.15U.S. Securities & Exchange Commission. Staff Accounting Bulletin No. 99 – Materiality – Section: 1. Assessing Materiality
Publicly Available Information
Information already widely known or publicly accessible generally does not carry a disclosure obligation. A trade secret loses its protected status once it enters the public domain through legitimate means. In securities law, information already available to the market is considered priced in and does not require separate disclosure. In contract negotiations, facts that both parties already know or could easily discover are less likely to trigger a duty to disclose.7United States Patent and Trademark Office. Trade Secret Policy
Voluntary Waivers of Disclosure Rights
Parties can also agree by contract to waive or limit their right to receive information. Confidentiality clauses in business contracts, settlement agreements, and employment contracts create binding obligations where a party that would otherwise be entitled to disclosure agrees to forgo it. These rely on mutual consent rather than any inherent privilege.
For a waiver of disclosure rights to be enforceable, it generally has to be knowing and voluntary. In employment contexts, particularly where age discrimination claims are involved, federal law sets specific minimum requirements, including that the waiver be written in language the average person can understand. Courts look skeptically at waivers buried in fine print or signed under duress.
The Tax Trap in Settlement Confidentiality
Confidentiality in a settlement agreement can carry a tax cost that catches people by surprise. Under federal tax law, damages received on account of personal physical injuries or physical sickness are excluded from gross income.16Office of the Law Revision Counsel. 26 USC 104 – Compensation for Injuries or Sickness
When the settlement includes a confidentiality clause, though, the IRS may treat the portion of the payment attributable to that clause as separate from the injury damages. That portion would not qualify for the exclusion and would be taxable as ordinary income. If the agreement doesn’t allocate a specific dollar amount to confidentiality, courts will look at the payer’s intent to determine how much was really for the injury and how much was for the recipient’s silence.
If you’re negotiating a settlement with a confidentiality component, consider making the confidentiality mutual and supported by the parties’ mutual promises rather than by a separate payment, or allocate only a minimal amount to confidentiality with the understanding that portion will be taxed. Ignore this and a tax-free personal injury recovery can turn into a partially taxable one, with the bill arriving long after the money is spent.