Legal Professional Privilege in Australia: A Plain-English Guide

What must exist for privilege to apply?In broad terms, three things usually matter.

• The communication or document must be confidential. If it is widely circulated or shared carelessly, that protection may be lost.
• The communication’s dominant purpose must be legal: either to obtain or give legal advice, or to prepare for existing or reasonably anticipated litigation.
• The communication must be part of a lawyer-client relationship, although in litigation some communications involving third parties can also be protected if they were created for the dominant purpose of the case.

The two main types of privilege1. Legal advice privilege. This protects confidential communications made for the dominant purpose of obtaining or giving legal advice.

For example, if a business owner emails their solicitor asking whether a proposed termination of an employee could breach employment law, that email and the solicitor’s advice may be privileged. But copying a lawyer into an ordinary commercial email does not automatically make the email privileged. If the real purpose of the email is business discussion rather than legal advice, privilege may not apply.

2. Litigation privilege. This applies where documents or communications are created for the dominant purpose of existing litigation, or litigation that is reasonably anticipated.

For example, if a company receives a serious letter of demand and its lawyers obtain an expert report to assess likely liability for the expected court case, that report may be privileged. This form of privilege can extend beyond lawyer-client communications to some third-party materials, such as experts or investigators, where the dominant purpose test is met.

How privilege can be lost or may not applyPrivilege is powerful, but it is not absolute. It can be waived, meaning lost, if the client acts in a way that is inconsistent with keeping the communication confidential. A common example is forwarding legal advice outside the group of people who need to see it, or summarising that advice in a non-privileged business document. Privilege also does not protect the underlying facts themselves. A client cannot hide a fact merely because they told it to a lawyer. In addition, not every communication with an in-house lawyer will be privileged; the lawyer must be acting in a legal, not purely commercial or managerial, capacity.

How AI can affect privilegeAI adds a new risk because legal professional privilege depends heavily on confidentiality. If a non-lawyer copies legal advice, witness accounts, draft affidavits, strategy notes or a lawyer’s email into a public or consumer AI tool to “summarise it”, “improve it” or “explain it”, that may amount to disclosure to a third party outside the lawyer-client relationship. In Australia, that can be treated as conduct inconsistent with keeping the material confidential, which may waive privilege.

There is a second problem as well: asking an AI tool for legal analysis is not the same as communicating with a lawyer. So an AI-generated answer will not usually become privileged simply because it relates to legal issues, and sending that answer to your lawyer later may not fix the problem.

The level of risk depends on the tool and how it is configured. A secure system controlled within a legal practice or client environment may protect privilege as opposed to a public AI service whose terms allow storage, human review, vendor access, model training or broader reuse of inputs.

For a non-lawyer, the practical point is simple: if you do not know exactly how the tool handles your information, you should assume that uploading privileged material is dangerous.

Everyday examples

• Privileged: A homeowner sends their solicitor a confidential summary of a neighbour dispute and asks for advice about options under planning or nuisance law.
• Probably not privileged: The homeowner sends the same email to the solicitor, the real estate agent, a builder and several family members. The broad circulation may undermine confidentiality.
• Privileged: After a serious accident at work, a company’s lawyers ask an external expert to prepare a report for expected litigation.
• Probably not privileged: The company prepares an internal incident report mainly for safety compliance and operational review, even if it is later sent to lawyers. Its original dominant purpose may not have been legal advice or litigation.
• Not automatically privileged: An executive labels a document “privileged and confidential” but creates it mainly for commercial strategy. A label helps very little if the substance does not meet the legal test.

• Privilege at risk: A client receives a detailed advice letter from their solicitor and pastes it into a public AI chatbot asking for a “plain-English summary”. Even if the client did not mean to give up privilege, that upload may be treated as disclosure inconsistent with confidentiality.
• Not privileged just because it is legal: A manager asks AI, not a lawyer, “Can I dismiss this employee safely?” and then sends the AI’s answer to the company solicitor. The AI response itself will not usually be privileged, because it was not a confidential lawyer-client communication.
• Litigation risk: A party to a dispute uploads draft witness statements and a chronology prepared for their lawyers into a free AI tool so it can build a timeline. That step may expose highly sensitive material and undermine any privilege claim.
• Safer approach: Instead of uploading the documents, the client should ask their lawyer to explain the advice, or ask whether a secure, approved tool can be used without compromising confidentiality.

Practical takeawayFor non-lawyers, the safest way to think about legal professional privilege is this: it protects confidential legal communications, not every sensitive document. If you want the protection to apply:

• Keep communications limited to those who need to know,
• Make sure the purpose is genuinely legal, and
• Seek advice early when a dispute is on foot or likely.

In the AI era, there is an extra rule of thumb: do not paste your lawyer’s advice, draft evidence, or dispute strategy into public AI tools unless your lawyer has expressly approved a secure process. In Australia, those practical steps can make the difference between a document staying protected and having to be disclosed.