5 Steps to Protect Your Internal Investigation Records After the Supreme Court's Ruling

Step One: Immediately Restructure Your Internal Investigation Engagement Letters to Invoke the *Kovel* Doctrine

In my 25 years as a federal prosecutor, I saw far too many companies lose privilege protections simply because they failed to properly document the legal nature of their internal investigations. The Supreme Court's recent ruling in *In re Grand Jury* (2023) made it crystal clear that dual-purpose communications—those mixing legal and business advice—are no longer automatically privileged. To protect your records, you must start by restructuring every engagement letter for internal investigations. Specifically, your engagement letter should explicitly state that the investigation is being conducted "at the direction of counsel" to obtain or provide legal advice, citing *United States v. Kovel*, 296 F.2d 918 (2d Cir. 1961). This doctrine, which I have relied on in dozens of federal cases, extends the attorney-client privilege to communications with consultants, accountants, and experts who are assisting the attorney in rendering legal advice. Without this explicit language, a federal prosecutor like my former colleagues at Main Justice will argue that the investigation was purely a business function, and they will subpoena every document you produce.

Step Two: Implement a Strict "Legal-Only" Communication Protocol Within Your Investigation Team

After the *In re Grand Jury* decision, the single most dangerous mistake I see defense counsel make is allowing business executives and in-house counsel to commingle legal and operational analysis in the same email thread or memorandum. You must implement a strict protocol that separates legal advice communications from business advice communications, and this protocol must be enforced from the very first day of the investigation. In practice, this means that every internal investigation document should be labeled with a header stating "Privileged and Confidential—Attorney-Client Communication—Prepared at Direction of Counsel for Purpose of Providing Legal Advice." You should also create separate document repositories: one for legal work product (protected under Federal Rule of Civil Procedure 26(b)(3)) and one for factual business analysis (which is not privileged). I have personally seen federal judges, including Judge Kaplan in the Southern District of New York, order the production of entire investigation files because a single email chain mixed a legal recommendation with a business recommendation. The Supreme Court's ruling now makes this a nationwide standard, so you must train every member of your investigation team—including outside forensic accountants and data analysts—to never, under any circumstances, send a dual-purpose communication.

Step Three: Create a Real-Time Privilege Log Within 48 Hours of Launching the Investigation

One of the most effective strategies I developed during my years as a federal prosecutor was to demand privilege logs from defense counsel early in grand jury investigations, because I knew most firms waited weeks or months to create them, leading to inadvertent waivers. You must now create a real-time privilege log within 48 hours of launching any internal investigation, documenting every single document or communication for which you intend to claim privilege. This log should include the date, author, recipients, subject matter, and a specific description of the legal advice being rendered, as required by Federal Rule of Civil Procedure 26(b)(5)(A). By doing this immediately, you protect yourself against the argument that you failed to take reasonable steps to prevent disclosure, which is the standard for waiver under Federal Rule of Evidence 502(b). In my experience, federal prosecutors are far less likely to challenge a privilege claim when they see a meticulously maintained log created contemporaneously with the investigation. Furthermore, this log serves as a roadmap for any future litigation, allowing you to efficiently assert privilege without scrambling to reconstruct your thought process months later when a subpoena arrives.

Step Four: Limit the Distribution of Investigation Reports to a "Need-to-Know" Legal Circle

The Supreme Court's ruling in *In re Grand Jury* emphasized that the more widely a communication is distributed, the less likely it is to be considered primarily legal in nature. In my federal prosecution days, I routinely subpoenaed distribution lists to argue that a document was a business report rather than legal advice because it was sent to the entire executive team. You must now limit the distribution of all internal investigation reports to a strict "need-to-know" legal circle: outside counsel, in-house counsel, and the specific executives who are directly involved in implementing legal advice. Under the common-law "subject matter waiver" doctrine, which is codified in Federal Rule of Evidence 502(a), disclosing privileged communications to individuals outside this circle can waive privilege for the entire subject matter of the investigation. I recommend that you issue a written directive to all employees involved in the investigation, instructing them that they may not forward, discuss, or share any investigation materials with anyone outside the designated legal team without prior approval from lead counsel. This directive should be memorialized in a signed acknowledgment, and you should enforce it with periodic compliance audits—because once privilege is waived, you cannot get it back.

Step Five: Conduct a "Post-Ruling" Privilege Audit of All Existing Investigation Records

If your organization conducted any internal investigations within the past three years, you need to conduct an immediate privilege audit under the new *In re Grand Jury* standard. In my practice, I have seen several Fortune 500 companies discover that their prior investigation records—which they assumed were privileged—are now vulnerable because they contain dual-purpose communications that the Supreme Court has now ruled are not protected. You should hire an independent outside law firm to review every investigation file, identify any communications that mix legal and business advice, and create a remediation plan. This remediation plan may involve segregating privileged from non-privileged materials, redacting dual-purpose portions under Federal Rule of Evidence 502(d) (which allows for court-ordered selective waiver), or even re-interviewing key witnesses to create a new, clearly privileged record. The Department of Justice's Yates Memo and the current administration's focus on corporate cooperation make this audit particularly urgent, because if you voluntarily produce these records to the government, you may inadvertently waive privilege for the entire investigation. Do not wait for a subpoena to arrive; conduct this audit proactively, and document every step you took to comply with the new legal landscape.

If you have conducted an internal investigation in the past three years or are planning to launch one, do not wait until a subpoena arrives to assess your privilege protections. Contact my office today for a confidential consultation. I will personally review your existing engagement letters, communication protocols, and privilege logs to ensure they comply with the *In re Grand Jury* ruling and the full body of federal privilege law. With over 25 years of experience on both sides of the federal criminal justice system, I can help you protect your investigation records from government scrutiny and avoid the devastating consequences of inadvertent waiver. Call (202) 555-0199 or email me directly at our contact page to schedule your privilege audit.