3 September 2019

Using Legal Professional Privilege

When dealing with a data subject access request (SAR), one of the things that may be considered, especially in the business of law firms and legal advisors, is whether the information requested is under legal professional privilege.

When dealing with a data subject access request (SAR), one of the things that may be considered, especially in the business of law firms and legal advisors, is whether the information requested is under legal professional privilege (LPP). There is a tendency for law firms to simply classify everything that they hold about a person as under LPP, but this is far from correct.

There are two situations that can arise: 1) A SAR from the client of the law firm looking for their own information; or 2) a SAR from the opponent of the client. In the first case, the law firm cannot generally claim any LPP about the personal information they hold of their client and must produce the information in the normal way. In the case of a SAR by an opponent, the situation becomes more complex.

Of course, if you are a business and have consulted a solicitor on a legal matter to get advice, any personal information within that request is under LPP. So, for example, if you have an employee dispute and you have had advice from a solicitor, the employee (or ex-employee) cannot gain access to those communications under a SAR.

LPP can only be used to withhold information from a SAR, if such information could be withheld from a court or tribunal proceeding under the part 31 of the civil procedure rules. Such privileged information can fall into two categories: Advice Privilege and Litigation Privilege. It is a requirement for Advice Privilege, that the communication between the lawyer and client must exist in a proper legal context.

Litigation Privilege only applies to documents that are prepared in anticipation of litigation and where such a litigation is a real and likely prospect. A document cannot become privileged by entry into litigation, only if it is prepared with the litigation in mind.

There is no automatic exemption of documents or other information in a litigation scenario, it must be assessed on each piece of information requested.

If you use LPP as a reason to withhold, the ICO is able to serve you with an Information Notice – this will put you on strict proof to demonstrate to the ICO how the information falls into the LPP category.

Does your UK business need a mediator or support with data protection and GDPR? Tell us how we can help you.

Call us to start the conversation on 029 2000 2339 or email contact@iolis-legal.com

Contact us
3 August 2020
How should your organisation handle a leak to the media?
Finding out that the media has confidential information about your organisation from a leak can feel devastating. The fall-out can include significant reputational damage and serious legal problems, as one professional sport governing body has recently discovered.…
Read More
20 July 2020
Mediation could be a quicker, less costly solution than an employment tribunal.
As the UK opens up again after the COVID-19 lockdown, many public services will face dealing with substantial backlogs. For the already under pressure employment tribunal system, it’s yet another major problem. The system has been under significant strain since…
Read More
17 June 2020
Should you use thermal scans to check your employees or customers for COVID-19?
Millions of workers are heading back to offices, factories, and shops as Britain slowly emerges from lockdown. Now, companies and organisations are facing a dilemma: should they use body temperature cameras to attempt to screen staff and customers who might have…
Read More
16 June 2020
3 Major Considerations for Disclosing 3rd parties in a subject access request
Have you tried to deal with whether to disclose a third-party as part of a subject access request response (SAR)? This article explains the complexities that often arise when there are other people mentioned in material that needs to be returned as part of a SAR. …
Read More
9 June 2020
Performance data in professional sport
Great advances have been made in the way elite athlete performance data is collected and analysed. But when using this data there are many legal factors to consider to ensure that the rights of the athlete are protected.  The area of data protection law in sport…
Read More
5 June 2020
3 Ways to Build a Marketing List Under GDPR
Are you no longer collecting email addresses on your website becuase of GDPR? Let us show you how you can still build your list and stay on the right side of the law!  Are you confused about collecting email addresses on your website? Are you unsure about the rules…
Read More
© 2020 IOLIS Ltd. Reg. in England & Wales Num.11968202 For reg. address see contact details | Website designed, hosted, and maintained by Jötnar Systems