Client legal privilege obligations for Australian law firms
Client legal privilege protects confidential communications made for the dominant purpose of giving or obtaining legal advice, or for use in existing or anticipated litigation. In Australian federal proceedings the Evidence Act 1995 (Cth) sets out the statutory test; at common law, Daniels Corporation and Esso Australia Resources remain the leading authorities. Privilege belongs to the client and can easily be waived.
Coverage
Every Australian law practice, in-house legal team and individual practitioner who creates, stores or transmits privileged communications on behalf of a client.
Legal basis
Evidence Act 1995 (Cth) Division 1 of Part 3.10 (and the uniform Evidence Acts in NSW, VIC, TAS, ACT, NT). Common law principles from Esso Australia Resources Ltd v Commissioner of Taxation (1999) 201 CLR 49 and Daniels Corporation International Pty Ltd v ACCC (2002) 213 CLR 543.
The obligations
Identify the dominant purpose before claiming privilege
Assess whether the dominant purpose of the communication is legal advice or litigation — not merely a substantial or secondary purpose.
Mark privileged documents clearly
Identify privileged communications on their face (for example, "Privileged and Confidential — Legal Advice") so staff and third parties are alerted.
Keep privileged material confidential
Ensure privileged advice is disclosed only to those who need it for the legal purpose — widening circulation risks inadvertent waiver.
Avoid waiver through partial disclosure
Do not refer to the gist or conclusion of legal advice in board minutes, ASX releases or commercial negotiations without considering waiver.
Manage privilege in investigations and reports
Structure internal investigations so the dominant purpose of the resulting report is legal advice, with clear instructions to investigators.
Protect privilege when using third-party providers
If the firm uses translators, experts, counsel or technology providers, ensure contractual confidentiality and that disclosure is for the privileged purpose only.
Address privilege for in-house lawyers
Confirm in-house lawyers are acting in their legal (not commercial) capacity, and maintain sufficient independence for advice to attract privilege.
Handle regulator requests carefully
When responding to a regulator's notice, claim privilege where appropriate, identify documents withheld, and avoid inadvertent waiver during voluntary co-operation.
Audit privilege on document production
Before producing documents in discovery or under subpoena, run a privilege review and keep a privilege log recording the basis of each claim.
Recover inadvertently disclosed material promptly
If privileged material is disclosed by mistake, act quickly to assert privilege, seek return of the documents, and document the steps taken.
What happens if you do not comply
Loss of privilege exposes the client to forced disclosure of sensitive advice, can found a professional negligence claim against the firm, and can lead to disciplinary findings of unsatisfactory professional conduct.
Reporting requirements
There are no routine reporting obligations, but firms should be able to produce privilege logs and evidence of privilege management to courts, regulators and clients on request.
What firms should do today
- Standardise privilege markings across document templates, email footers and matter management systems
- Train non-legal staff on how privilege works and how inadvertent waiver happens
- Use a written scoping letter for investigations that makes the dominant legal purpose clear
- Maintain a privilege log template and use it whenever documents are produced to a regulator or court
- Review privilege issues at the start of any dispute, investigation or transaction with regulator exposure
Compliance with Quillio
Quillio keeps privileged material on Australian-hosted infrastructure and never uses client content to train public models — an important consideration when privileged communications are processed by any AI tool. See /resources/security.
This guide is general information about client legal privilege in Australia only — not legal advice. Privilege questions are fact-specific and should be referred to experienced litigation or regulatory counsel.
Build compliance into your stack.
Quillio is built around AU compliance from the ground up — SOC 2 Type II + ISO 27001 + Australian data sovereignty. The free trial requires no credit card.
Start your free trial