Internal investigations often begin when a business has more questions than answers. A whistleblower email, suspected fraud, a data incident, a competition concern, an employee complaint or a dispute with a commercial partner can all require fast fact-finding. Yet speed creates risk. If the investigation is not structured properly from the start, sensitive legal analysis, interview notes and draft findings may later become disclosable to a regulator, claimant, employee, auditor or opposing party.

Legal professional privilege is not a filing label. It is a substantive protection for certain confidential communications, and it can be lost through careless handling. For Jamaican businesses, directors, compliance teams and in-house counsel, the safest approach is to build privilege into the investigation plan before the first interview is scheduled.

This article provides a practical framework for protecting privilege during an internal investigation. It is general information, not legal advice on any specific matter.

Start by understanding what privilege does, and what it does not do

Privilege is often confused with confidentiality. They overlap, but they are not the same. A document can be confidential and still not privileged. A privileged document must usually be confidential, but confidentiality alone will not protect it from disclosure if litigation, regulatory review or court-ordered production follows.

For a wider explanation of how confidentiality differs from privilege in legal practice, Henlin Gibson Henlin has also discussed client confidentiality and file handling in the context of legal offices and client files.

Jamaica’s legal system is grounded in common law, and common law privilege principles are highly relevant to internal investigations. The Judicial Committee of the Privy Council has described legal professional privilege as a fundamental protection in cases such as B v Auckland District Law Society. In practice, privilege allows clients to communicate candidly with lawyers so that they can receive proper legal advice and prepare for disputes.

The two categories most relevant to internal investigations are legal advice privilege and litigation privilege.

Privilege does not conceal pre-existing documents, underlying facts or evidence of wrongdoing. It also does not protect communications made to further fraud, crime or other iniquity. A sound investigation preserves privilege without obstructing lawful disclosure obligations.

Define the legal purpose before the investigation begins

The first privilege question is not whether a document has the words privileged and confidential at the top. The first question is why the investigation exists.

If the purpose is purely operational, such as improving HR processes or checking stock controls, legal privilege may be harder to establish. If the purpose is to obtain legal advice about potential liability, regulatory exposure, contractual rights, employment consequences, data protection obligations or anticipated litigation, that purpose should be clearly recorded at the outset.

A written investigation mandate should usually address the legal issue being examined, the role of counsel, the authorised recipients of legal advice and the expected form of reporting. The mandate should not be over-engineered, but it should make clear that legal advice is being sought where that is the case.

For serious matters, external counsel can add independence and help preserve privilege from the beginning. In-house counsel may also give privileged legal advice, but the distinction between legal advice and business advice must be maintained. If an in-house lawyer is acting as a commercial decision-maker, privilege may be more difficult to claim over those communications.

Keep legal advice separate from business decision-making

Many privilege problems arise from email habits. A senior manager sends one long thread to ten recipients, copies the legal department and asks for views on legal risk, public relations, customer messaging, finance, HR and operations. That kind of mixed-purpose communication is difficult to defend.

The English Court of Appeal decision in R (Jet2.com) v Civil Aviation Authority is often cited in common law discussions because it addressed privilege in multi-addressee emails and the dominant purpose of communications. Although Jamaican advice should be taken on Jamaican privilege issues, the practical lesson is straightforward: copying a lawyer does not automatically make a communication privileged.

Use separate channels for separate purposes. Legal advice requests should be directed to counsel and limited to those who need to participate. Business implementation can then be handled in a separate communication that does not quote, paraphrase or forward the legal advice unless counsel approves.

This matters at board level too. Directors need enough information to discharge their duties, but board packs and minutes should be drafted with care. Minutes can record that legal advice was received and considered without reproducing the substance of that advice unnecessarily.

Control who is in the client group

In corporate investigations, the client is the company, but a company acts through people. Privilege can become uncertain when too many employees, consultants or affiliate representatives are treated as part of the legal advice chain.

At the outset, identify the individuals authorised to instruct counsel, receive advice and assist counsel in obtaining information. This group may include directors, general counsel, senior compliance personnel or specific executives depending on the matter. The group should be no larger than necessary.

That does not mean other employees cannot be interviewed or asked for documents. It means they should not automatically receive legal advice or privileged work product. Where information is gathered from employees, counsel should manage the process and decide how interview notes, summaries and follow-up requests are created and stored.

A useful rule is need to know, not nice to know. Wider circulation increases the risk of waiver, leaks and later disputes about whether confidentiality was maintained.

Handle employee interviews with care

Employee interviews are often the heart of an internal investigation. They are also one of the easiest places to weaken privilege.

Before an interview begins, the interviewer should explain the nature of the interview clearly. Where counsel is conducting or directing the interview, employees should understand that counsel represents the company, not the individual employee, unless separate arrangements are made. They should also be told that any privilege belongs to the company and that the company may decide whether to maintain or waive it.

The warning should be firm but not intimidating. Employees should be asked to keep the interview confidential, but confidentiality instructions should not be framed in a way that prevents lawful reporting, cooperation with authorities or the exercise of employment rights.

Interview notes should be prepared deliberately. A verbatim factual transcript may be treated differently from a lawyer’s note reflecting legal impressions, strategy and analysis. If a written witness statement is needed for disciplinary, regulatory or litigation purposes, counsel should consider how and when it is prepared.

The safest interview process usually includes a short script, a record of who attended, a clear explanation of the interview’s legal purpose and secure storage of notes. Avoid informal side messages after the interview. A careless chat message summarising what the witness said may create a non-privileged record that undermines the controlled process.

Retain third-party experts through counsel where appropriate

Internal investigations frequently require external support. A cyber incident may require forensic IT specialists. A suspected accounting irregularity may require forensic accountants. A shipping or admiralty issue may require technical evidence. A competition, banking litigation or commercial litigation matter may require industry analysis.

Third-party work is not automatically privileged. The retainer structure, purpose and flow of communications matter. If a third party is needed to help counsel provide legal advice or prepare for litigation, counsel should usually be involved in the engagement terms.

The engagement letter should specify the legal purpose of the work, require confidentiality, direct the third party to report to counsel and restrict onward disclosure. The expert should understand that drafts, notes, data extracts and communications must be handled securely.

Public relations advisers need special caution. Reputation management may be commercially important, but PR advice is not necessarily legal advice. If communications with PR advisers are later claimed to be privileged, the company must be able to show the connection to legal advice or litigation strategy rather than general media management.

Protect documents, data and evidence from the first day

Privilege can be damaged by poor document control even where the legal structure is sound. Internal investigations should have a document protocol that covers collection, access, review, storage and deletion.

The protocol should preserve relevant materials while limiting unnecessary copying. If litigation is possible, a legal hold may be required so that emails, messaging records, contracts, logs and device data are not destroyed. At the same time, investigators should avoid mass circulation of sensitive material outside the investigation team.

Labels are useful but not conclusive. Marking a document privileged and confidential can signal intended treatment, but the legal test still depends on the nature, purpose and confidentiality of the communication. A non-privileged accounting record does not become privileged because it is placed in a privileged folder.

Data protection also matters. If an investigation involves employee data, customer data, financial information, device searches or surveillance material, the company should consider obligations under Jamaica’s Data Protection Act, 2020 and guidance from the Office of the Information Commissioner. Privilege should not be used as an excuse for excessive data collection. Collect what is relevant, restrict access and keep an audit trail.

Where the investigation involves proprietary know-how, formulas, customer lists, pricing models or other sensitive commercial information, privilege controls should work alongside trade secret controls. Businesses can strengthen that wider protection by using the kinds of confidentiality agreements, access controls and offboarding measures discussed in Henlin Gibson Henlin’s guide to trade secret protection for Jamaican businesses.

Draft investigation reports with the end in mind

The final report is often the most contested document in an internal investigation. Claimants, regulators, auditors, lenders and counterparties may all want to see it. Before the report is drafted, counsel and the company should decide who needs it, why it is being created and whether a written report is necessary.

A written report may be privileged if it is prepared for the purpose of legal advice or litigation, but privilege will depend on the circumstances. The report should identify its legal purpose, maintain confidentiality and avoid unnecessary distribution. Drafts should be controlled and stored securely.

In some cases, counsel may provide oral advice to the board or a committee, with minutes recording only that advice was received and considered. In other cases, a written privileged report may be essential. There may also be a separate non-privileged remediation plan for operational follow-up, such as policy changes, disciplinary steps, customer notifications or control improvements.

Do not blur those documents. A remediation plan that quotes privileged legal analysis may become more difficult to share with managers who need to implement changes. Conversely, a privileged report that includes extensive business commentary and broad operational recommendations may invite arguments that it was not created for a legal purpose.

Be cautious with regulators, auditors, insurers and counterparties

Privilege is often lost not at the investigation stage, but at the disclosure stage. A company may voluntarily share a report with an auditor, insurer, regulator, bank, commercial partner or prospective purchaser without considering waiver.

Disclosure can waive privilege, sometimes beyond the specific recipient or document intended. Confidentiality agreements may help, but they are not a complete answer in every situation. A regulator may also have statutory powers to require information, and the privilege analysis may differ depending on the power being used and the material requested.

Before sharing privileged material, consider alternatives. Counsel may be able to provide a non-privileged factual summary, an oral briefing, a redacted document or a limited response that preserves the privilege claim. If disclosure is legally required, the company should state its position carefully and avoid unnecessary voluntary expansion.

The same caution applies to insurers. Policies may require notification of claims or circumstances, but sending privileged investigation material without conditions can create avoidable risk. Notify promptly where required, but structure communications through counsel when legal advice is involved.

Think about cross-border privilege early

Many Jamaican businesses operate with regional or international connections. Parent companies, overseas subsidiaries, foreign regulators, international banks, shipping interests, technology vendors and cloud platforms can bring multiple privilege regimes into play.

Privilege rules differ across jurisdictions. The approach to in-house counsel, employee interviews, third-party experts and regulatory disclosure can vary significantly between Jamaica, England and Wales, the United States, the European Union and other Caribbean jurisdictions. A document protected in one jurisdiction may not receive the same treatment elsewhere.

Cross-border investigations should therefore identify at the start where documents are located, where proceedings may arise, which entities are involved and which lawyers are giving advice. If the investigation may affect more than one jurisdiction, local counsel should coordinate the privilege strategy rather than assuming one legal system’s rules will apply everywhere.

Practical checklist for preserving privilege

Privilege protection is strongest when it is practical, consistent and documented. The following checklist can help investigation teams identify common pressure points.

Frequently Asked Questions

Does marking a document privileged and confidential make it privileged? No. The label can help show an intention to keep the document confidential, but privilege depends on the document’s purpose, content, context and circulation.

Can an internal investigation report be privileged in Jamaica? It can be, but not automatically. The report should be created for the purpose of obtaining legal advice or preparing for litigation, kept confidential and shared only with those who need it.

Are communications with in-house counsel privileged? They may be privileged when in-house counsel is acting in a legal advisory capacity. If the communication is mainly commercial, operational or managerial, privilege may be harder to establish.

Can privilege be lost by sharing material with auditors or regulators? Yes, sharing privileged material can create waiver risk. The risk depends on the circumstances, the recipient, the legal powers involved and how disclosure is managed.

Does privilege allow a company to hide facts discovered during an investigation? No. Privilege protects certain communications and legal work product. It does not erase underlying facts, pre-existing documents or evidence that must lawfully be preserved or disclosed.

When to seek legal advice

Privilege decisions are easiest to get right before the investigation begins. Once sensitive emails have circulated widely, interviews have been conducted without warnings or reports have been shared externally, the risk is harder to repair.

If your organisation is facing a whistleblower complaint, suspected misconduct, a data incident, a commercial dispute or potential regulatory exposure, early legal structuring can protect both the investigation and the business. Henlin Gibson Henlin advises clients in Jamaica across areas including commercial litigation, compliance and risk, data privacy, intellectual property, banking litigation, arbitration and mediation. Seek tailored advice before creating or sharing sensitive investigation material.