How To Keep Data Breach Investigation Reports Confidential

By Noah Gillespie and Kelly Koscuiszka (March 28, 2022, 5:58 PM EDT) -- Although internal investigations are a common first step when any incident comes to light, some courts have resisted providing data breach investigation reports the same continuing confidentiality protections typical of other internal investigation findings.

This article describes several recent cases and provides recommendations that will help keep the core investigative activities following a data breach protected.

These protections guard client decision making from adversaries.

The attorney-client privilege protects communications between a client and its lawyer made for the purpose of soliciting legal advice.[1] It "exists to protect not only the giving of professional advice to those who can act on it...

Stay ahead of the curve

In the legal profession, information is the key to success. You have to know what’s happening with clients, competitors, practice areas, and industries. Law360 provides the intelligence you need to remain an expert and beat the competition.


  • Access to case data within articles (numbers, filings, courts, nature of suit, and more.)
  • Access to attached documents such as briefs, petitions, complaints, decisions, motions, etc.
  • Create custom alerts for specific article and case topics and so much more!

TRY LAW360 FREE FOR SEVEN DAYS

Hello! I'm Law360's automated support bot.

How can I help you today?

For example, you can type:
  • I forgot my password
  • I took a free trial but didn't get a verification email
  • How do I sign up for a newsletter?
Ask a question!