Why Email Confidentiality Notices are Useless


You have most likely come across a confidentiality notice automatically pasted at the end of email correspondence.

They certainly are annoying.

More annoying still are those trails of emails sent back and forth when the parties hit “reply” a few times and a brief email chat becomes a 10-page string loaded with repetitive boilerplate notices.

I use one which looks similar to or exactly like the ones sent by many other attorneys:

CONFIDENTIALITY NOTICE: This facsimile/e-mail message is intended only for the person or entity to which it is addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender and destroy all copies of the original message. If you are the intended recipient but do not wish to receive communications through this medium, please so advise the sender immediately.

Does this prophylactic effort actually protect anyone’s confidentiality, or is it just plain stupid?

Some commentators suggest as much. (See goldmark.com, Jeffrey Goldberg, 8/14/03 [“counting the ways” in which email confidentiality notices are “stupid.”]). The reasons for why attaching a confidentiality notice to emails may be considered a waste of effort and space at least and a serious mistake at worst include: (1) it gives an ambiguous directive; (2) it projects a contradictory intent; (3) it has no legal effect; and (4) it can eviscerate any legal effect that it might otherwise have.

The ambiguous directive of the confidentiality notice says that the “unauthorized” recipient is prohibited from reviewing or distributing the email message, while also directing that take action by contacting the sender and destroying the message.

How do I know that I am not the intended recipient unless I review the message?

Since the message was, in fact, addressed to me (because that’s how I got it), then aren’t I the de facto intended recipient? How do I know that I’m not supposed to review the message until after I have read it and then found the notice at the end of the message? And, who are you, Sender, to tell me what is prohibited; what authority do you have to tell me what to do with the emails sent to my address?

Very often, confidentiality notices at the end of email messages directly contradict the intent of the sender.

For example, the information contained in the email is a press release or corporate memo, directing the recipient to disseminate its contents to other employees. And what does “may contain confidential or privileged material” mean? Is it or isn’t it confidential? How am I supposed to know what portions of the message are or are not confidential or privileged? Recently, I took on a lawsuit where it turned out that my new legal adversary was an old friend. My friend/new adversary sent me an email, stating that he was glad to have me as his adversary so that we could make head-way on some protracted issues in the case and, in the same email, made friendly inquiries about me and my family. At the end of the email was a confidentiality notice. Common sense told me that nothing in that particular email could be deemed confidential. Nor did any privilege exist, no matter what the email contained.

Nearly all of my legal adversaries send me emails with a confidentiality notice at the end of their emails. The problem for them is that there is no way their messages are kept confidential. In fact, we, as attorneys, are looking for those emails which contain incriminating admissions and/or contradictory statements that can be used against our adversaries. Such correspondence is used in court all the time as evidence to support legal positions and, if the court papers are filed online as in Federal Court proceedings, these communications are available to anyone who wishes to see them.

So, there are some prime examples of why confidentiality notices at the end of emails are totally useless. Now, here’s why they are simply a bad idea: First, it can lull the sender into a false sense of security by the very harshness of the message’s tone and implied legal implication of “prohibition.” A confidentiality notice has no inherent legal effect.

Second, if used routinely, they can make all of your email communications non-confidential. If you make all of your email communications confidential, when it is clear that you do not have a “reasonable expectation of confidentiality” for every message you write, then you are not making specific efforts to protect certain information, as distinguished from all information. You must intend to protect certain information as confidential.

Only when such notices are used carefully and sparingly do they have a chance to actually protect confidential information transmitted by email. The basic legal standard is a “reasonable expectation of confidentiality,” which does not exist by the mere force of the words in the notice; such an expectation must be accompanied by another reason for having such an expectation.

To simplify, your author suggests that you keep the following in mind when you want to attempt to keep information confidential. Common sense should tell you that you cannot force someone to keep your secrets just by demanding that they do. There must be some outside agreement or requirement that your secrets will be kept by a particular recipient. Therefore, the confidentiality notice is like a reminder or a back-up of sorts, indicating that you are proceeding under a previously-established agreement between you, the sender, and another party, who is the recipient; it reaffirms your commitment to keep your secrets secretive.

About the Author:
Mona Conway is a New York attorney who focuses on business transactions and litigation for small commercial enterprises through her practice Conway Business Law Group, P.C. Mona’s clients rely on her expertise for all their legal needs, from incorporation, business purchases, leases and shareholder agreements to dispute negotiation and litigation to protect their business interests. To find out more, visit www.conwaybusinesslaw.com.