Human resources professionals are often the first people to recognize when an ordinary workplace issue is becoming a legal one. An employee mentions retaliation. A leave request gets complicated. A termination suddenly feels risky. A wage-and-hour issue surfaces. Or a leader asks, “Can we do this?”

That is often the right time to involve counsel—not three weeks later, after the decision has been made and everyone is trying to reconstruct what happened. But bringing a lawyer into the conversation does not automatically make everything privileged. Attorney-client privilege can be enormously valuable in the employment context, but HR needs to understand what it protects, what it does not, and how easily careless communication can undermine it.

What the Privilege Actually Protects

The attorney-client privilege generally protects confidential communications between a lawyer and client made for the purpose of obtaining or providing legal advice. That protection matters because employers need to be able to speak candidly with counsel about risk, mistakes, strategy, and difficult personnel decisions without assuming those conversations will later become exhibits in litigation.

But the privilege protects communications, not the underlying facts. If an employee complained about harassment on Tuesday, that fact does not become privileged simply because HR tells counsel about it on Wednesday. The communication with counsel may be protected, but the underlying event remains a fact that may be discoverable.

“Privileged and Confidential” is Not a Magic Spell

One of the most common mistakes HR folks make is assuming that putting “ATTORNEY-CLIENT PRIVILEGED” at the top of an email somehow makes it privileged. It doesn’t. Neither does copying a lawyer on an otherwise ordinary business communication.

There is a meaningful difference between writing, “We have decided to terminate Sam on Friday. Jen, FYI,” and writing, “We are considering terminating Sam on Friday. He recently raised a retaliation concern. Before we make a decision, please advise us regarding the legal risks and any additional steps you recommend.” HR should be intentional about why counsel is being brought into the conversation and, where appropriate, make clear that legal advice is being requested.

Know When to Involve Counsel

Not every workplace issue requires a lawyer. But some situations should trigger an early legal-risk assessment, including discrimination, harassment, or retaliation complaints; complicated disability, leave, or religious accommodation issues; discipline or termination involving someone who recently engaged in protected activity; significant wage-and-hour concerns; workplace violence issues; executive-level terminations; reductions in force; and any situation where HR finds itself thinking, “This could become a lawsuit.”

The earlier counsel becomes involved, the more options the organization likely will have. Calling after a termination has occurred limits counsel to evaluating a decision that can no longer be changed. Calling beforehand gives counsel the opportunity to identify gaps in documentation, inconsistent treatment, timing concerns, accommodation obligations, investigation issues, or other risks that may still be manageable.

Keep the Circle Small

Privilege also depends on confidentiality. One of the easiest ways to create problems is by forwarding counsel’s advice too broadly. HR receives an email from counsel, forwards it to the department head, who forwards it to a supervisor, who adds another executive, and suddenly a confidential legal discussion has become a sprawling email chain.

Legal advice generally should be shared only with those who genuinely need it to carry out their responsibilities. Even then, consider whether they need the lawyer’s actual communication or simply need to know the decision or action they are expected to implement. HR also should avoid casual statements such as, “Our lawyer says this termination is fine.” Those summaries can create unnecessary issues and may reveal the substance of legal advice.

Be Careful with Investigations

Workplace investigations require particular care. Counsel may conduct an investigation as part of providing legal advice, but the organization should think at the outset about counsel’s role, why the investigation is being conducted, how it will be documented, and how the results may later be used.

That matters because an employer that later relies on the adequacy of an investigation as part of its defense may put aspects of that investigation at issue. The time to think through those privilege questions is before the investigation begins, not after litigation starts.

Sometimes, Stop Typing

HR professionals live in email, Teams, Slack, text messages, and other electronic communications. Those tools are convenient, but they also make it easy to create lengthy written records before anyone fully understands the facts.

Sometimes the best first communication with counsel is simply, “Can you call me?” A conversation gives HR the opportunity to explain what is happening, answer questions, and receive preliminary guidance before creating an unnecessary email narrative. Counsel can then help determine what should be documented and how.

HR should also be thoughtful about where privileged communications are stored or shared. Legal advice should not be casually copied into shared databases, collaborative workspaces, AI platforms, or other systems without considering confidentiality and access.

The Bottom Line

Attorney-client privilege is not something HR should first think about after receiving a demand letter. Used correctly, it gives employers and their lawyers space to have candid conversations, evaluate risk, correct mistakes, and make better decisions before workplace problems escalate.

The practical rules are straightforward: involve counsel early when legal risk appears, clearly seek legal advice, keep communications focused, limit who receives them, and do not assume that copying a lawyer or adding a “privileged” label creates protection. And when a matter is particularly sensitive, consider picking up the phone before hitting “send.”

The goal is not to label everything privileged. It’s to make sure the communications that truly need protection stay protected.