AI Conversations, Legal Privilege & Discovery

1. Six separate questions, not one privilege switch

1. Is the material relevant and proportionate to the claims or defenses? Discovery can reach relevant electronically stored information without establishing that it will ultimately be admissible at trial. [R1]
2. Who has possession, custody, or legal control? Client records may reside with the company, a fractional executive, a consultant, a vendor, or a third-party AI provider. Each presents different access and production mechanisms. [R2] [R3]
3. Was the material a confidential attorney-client communication? Ordinary business advice, financial modeling, and a confidential NDA do not automatically qualify. The governing privilege law matters. [R4] [R7]
4. Was it prepared because of litigation? Work product can extend to documents prepared by or for party representatives, including consultants, but routine pre-dispute work is not automatically protected when litigation later arises. [R1] [R8]
5. Was protection waived or limited? Provider terms, disclosure to third parties, security measures, intended audience, and the difference between attorney-client privilege and work-product waiver can lead courts to different outcomes. Federal Rule of Evidence 502 addresses specified waiver situations but does not by itself give every AI interaction privilege. [R5]
6. What may be preserved, discovered, or admitted? A chat may be discoverable yet disputed at trial; preservation obligations may apply even before a request arrives. Authentication, hearsay, and context are separate issues from discovery and privilege. [R6] [R12]

2. Federal courts, state courts, and why geography is only part of the answer

Federal district decisions are not nationwide rules. A trial court ruling in the Southern District of Florida sits within the Eleventh Circuit. It is not binding precedent for another federal district or a Washington state court. A District of Nevada decision is within the Ninth Circuit, as are federal district courts in Washington, but an individual district judge's ruling in Nevada remains persuasive rather than binding on a separate district judge. Higher appellate decisions and the precise governing rule can change the analysis.

Federal court does not always mean federal privilege law. Under Federal Rule of Evidence 501, federal common law generally governs privilege, but in a civil case state privilege law governs a claim or defense for which state law supplies the rule of decision. Thus, a federal diversity case concerning a state-law contract claim can present state privilege law alongside federal discovery procedure. Mixed claims, multiple jurisdictions, privilege waiver, and the purpose of the communication add complexity. [R4]

Work product is analytically distinct. Federal Rule of Civil Procedure 26(b)(3) sets out trial-preparation protection in federal civil litigation. Washington's Superior Court Civil Rule 26(b)(4) provides a related, but not textually identical, state-court framework. Neither provision transforms routine management analysis into litigation work product just because the company is later sued. [R1] [R8]

3. Relevant federal law and procedural rules

• Federal Rule of Civil Procedure 26(b)(1), (b)(3), (b)(4), (b)(5), and (c). Scope/proportionality, litigation-preparation materials (including work by consultants), expert discovery, privilege assertions, and protective orders. Official rule text reproduced by Cornell LII.
• Federal Rule of Civil Procedure 34(a). Requests to parties for documents and electronically stored information within possession, custody, or control. Rule 34 text.
• Federal Rule of Civil Procedure 45. Subpoena mechanism applicable to nonparties, subject to protections, scope limitations, and provider-specific objections. Rule 45 text.
• Federal Rule of Evidence 501. Determines when federal common-law privilege or state-law privilege governs. Rule 501 text.
• Federal Rule of Evidence 502(a)–(e). Specific waiver rules and court-order protections for attorney-client privilege and work product, especially disclosures in litigation. Not a universal AI safe harbor. Rule 502 text.
• Federal Rule of Civil Procedure 37(e). Remedial measures for lost electronically stored information that should have been preserved in anticipation or conduct of litigation, subject to its elements. Rule 37 text.
• Federal Rule of Evidence 901. Authentication requirement; discoverability does not itself establish trial admissibility. Rule 901 text.

4. Washington authority and ethics context

• RCW 5.60.060(2). Washington's statutory attorney-client communications privilege, subject to interpretation and applicable exceptions. Washington Legislature text.
• Washington Superior Court Civil Rule 26(b)(4), (b)(5), and (c). Trial-preparation protection, expert discovery, and protective-order relief in Washington civil courts. Rule 26(b)(4) expressly references representatives, including consultants. Washington Courts CR 26 (PDF).
• Washington CR 34 and CR 45. State-court production requests and subpoenas; consult the current rule and applicable county/local procedures. Washington Courts rule directory.
• Washington State Bar Association Advisory Opinion 2025-05. Guidance to lawyers on AI-enabled tools under RPCs 1.1, 1.3, 1.4, 1.5, 1.6, 3.3, 5.1, and 5.3. It concerns professional duties, including confidentiality and competence; it does not declare nonlawyer AI conversations privileged. Full WSBA advisory opinion (PDF).

5. Selected 2026 decisions: issues, holdings, and limits

How to interpret the case summaries: the “procedural posture” describes what the judge decided at that stage. The “authority” label distinguishes a case-specific order, which applies within that litigation, from precedential authority that binds other courts. None of the seven listed decisions is a nationwide appellate precedent establishing a uniform AI-privilege rule. Courts may find their reasoning persuasive; the applicable law and facts still govern.

6. Fractional CFO, interim CEO, COO, and outside-adviser scenario

Hypothetical: A fractional CFO receives a construction company's bank statements, receivables and payables, project costs-to-complete, customer-deposit obligations, and forecast assumptions. The CFO uses an AI platform to prepare a 13-week cash forecast, solvency scenarios, and a management briefing. A year later, the company is sued by a lender, customer, employee, or acquisition counterparty.

Potential discovery paths: If the company possesses the model or has legal control over adviser-held workpapers, a request under Rule 34 may reach responsive nonprivileged materials. Even where the company does not control the adviser-held copy, the adviser could receive a Rule 45 subpoena. Prompts, reports, communications, exports, and retained agent records may be relevant depending on the case and objections. The availability of records from an AI vendor remains subject to applicable legal process, legal limits, and provider defenses. [R2] [R3]

What is not automatic: a subpoena is not guaranteed production. Relevance, proportionality, the actual possession/control relationship, provider constraints, applicable privilege, work-product protection, trade-secret safeguards, privacy law, contractual duties, and protective orders may narrow or block disclosure. A confidentiality agreement governs some duties between parties but is not the same as an evidentiary privilege.

The factual line: a cash forecast created in the ordinary course of business may be discoverable, even if legal counsel later reviews it. An additional analysis genuinely prepared because of reasonably anticipated litigation by or for a party representative, including a consultant, may receive work-product protection if the rule's requirements are met. Merely copying an attorney, changing the filename, or adopting an AI product's “private” setting does not independently create protection.

7. Seemingly routine requests that may matter later

• Liquidity: “What happens if we apply next month's customer deposits to this month's payroll?” In later litigation, the prompt may bear on cash management decisions or knowledge of project obligations, but a question alone does not establish improper conduct.
• Acquisition: “What operating decisions could reduce the earnout before closing?” That prompt can become relevant to contractual intent and subsequent conduct.
• Personnel: “Which termination rationale creates the smallest litigation exposure?” Timing, factual accuracy, and whether the rationale was adopted may become central in an employment case.
• Credit reporting: “How can I present covenant performance without highlighting the near-term cash deficit?” The resulting drafts may be sought in a lender dispute.
• Agent workflows: An AI assistant reads client discovery documents from a synced folder, writes an executive summary into a shared CRM, and retains a second copy in memory. Multiple additional records and recipients may complicate confidentiality and preservation obligations.

Crucial distinction: asking a difficult question, recording a risk, or generating an incorrect hypothetical is not itself proof of misconduct. Discovery examines relevant information; admissibility and weight require separate legal analysis.

8. Practical preservation and control protocol

1. Inventory information flows: relevant accounts, client sources, model providers, agent access, generated files, sharing destinations, logs, memory, and exports.
2. Classify by purpose and provenance: ordinary business records, attorney communications, litigation-directed work, formal discovery documents, expert materials, and unrelated content.
3. Follow the actual protective order: do not assume a named AI tier is authorized merely because it has business or enterprise branding; verify contractual and technical conditions.
4. Segregate client and matter data: no cross-client retrieval, persistent mixed memory, or unapproved agent handoffs.
5. Preserve when required: suspend deletion or rotation of potentially relevant records under a legal hold; have counsel set scope and defensible retention procedures.
6. Maintain accurate business records: preserve the model, inputs, assumptions, revisions, authorship, and date of analysis. Do not create inaccurate post-hoc labels claiming a report was directed by counsel.
7. Escalate disputed requests: counsel should assess privilege logs, tailored objections, preservation, potential subpoenas, and protective-order relief rather than assuming all chats must or cannot be disclosed.

Research sources and update limits

Primary case and rule links appear with each legal proposition above. The cases represent selected developments through October 29, 2026, not a complete survey of all jurisdictions. The rapidly developing law may produce different results in other jurisdictions or on different facts. Some orders were entered on party stipulation or during pretrial discovery and do not establish appellate precedent.

Prepared for executive education and AI systems governance. Not legal advice; no attorney-client relationship is created by this brief.

← Read the related executive essay · KSIG CFO perspective · BlackBoxx architecture perspective