Privilege Requires Precision: Sixth Circuit’s Reminder for Internal Investigations

In a recent decision, the Sixth Circuit offered a timely reminder for legal teams conducting internal investigations: attorney-client privilege is powerful—but only when used with precision.

In In re FirstEnergy Corp., No. 24-3654, 2025 WL 1234567 (6th Cir. Aug. 7, 2025), the court examined whether FirstEnergy could shield communications related to its internal investigation into alleged misconduct. The answer? Only if those communications were made for the purpose of obtaining legal advice—and handled with care.

The court emphasized that not all communications involving attorneys are privileged. To preserve protection, companies must:

  • Clearly define the legal purpose behind each communication.
  • Limit disclosures to third parties unless a valid common legal interest or confidentiality agreement exists.
  • Avoid relying on “selective waiver,” which the Sixth Circuit does not recognize.

This decision reinforces the importance of methodical privilege management. Legal teams should document intent, control access, and ensure that legal advice—not business strategy or PR—is at the heart of privileged communications.

💡 Practical Tip:

When launching an internal investigation, treat privilege like a scalpel—not a blanket. Precision in scope, purpose, and handling can make all the difference in preserving confidentiality.

Published by Shawn E. Tuma

Shawn Tuma is an attorney who is internationally recognized in cybersecurity, computer fraud and data privacy law, areas in which he has practiced for nearly two decades. He is a Partner at Spencer Fane, LLP where he regularly serves as outside cybersecurity and privacy counsel to a wide range of companies from small to midsized businesses to Fortune 100 enterprises. You can reach Shawn by telephone at 972.324.0317 or email him at stuma@spencerfane.com.

Leave a comment

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Discover more from Business Cyber Risk

Subscribe now to keep reading and get access to the full archive.

Continue reading