
Attorney-client privilege and attorney-client confidentiality are closely related, but they are not the same.
Privilege is usually about whether certain communications can be forced into disclosure in legal proceedings. Confidentiality is a broader ethical duty that affects how lawyers protect information related to the representation of a client.
This guide is for educational purposes only. Rules vary by jurisdiction, and law firms should consult ethics counsel or applicable local rules for specific decisions.
Quick Comparison
Question | Attorney-Client Privilege | Attorney-Client Confidentiality |
What is it? | A legal protection for certain confidential lawyer-client communications | A lawyer's ethical duty to protect information relating to representation |
Main purpose | Protect legal advice communications from compelled disclosure | Protect client trust and client-related information |
Scope | Narrower | Broader |
Applies mainly when? | Legal demands, discovery, testimony, subpoenas, litigation, investigations | Daily legal work, communications, files, billing, technology, operations |
Covers all client information? | Usually no | Often much broader, subject to rules and exceptions |
Can it affect time entries? | Sometimes, if the entry reveals privileged communication | Yes, if the entry reveals sensitive client-related information |
What Is Attorney-Client Privilege?
Attorney-client privilege generally protects confidential communications between a lawyer and client made for the purpose of seeking or giving legal advice.
A simple example:
A client sends a lawyer a confidential email asking for legal advice about a contract dispute.
That communication may be privileged if the requirements are met.
Privilege is important because it allows clients to speak openly with lawyers. But it is not unlimited. The exact requirements, exceptions, waiver rules, and scope depend on jurisdiction and context.
What Is Attorney-Client Confidentiality?
Attorney-client confidentiality is broader.
Under ABA Model Rule 1.6, lawyers generally must not reveal information relating to a client representation unless the client gives informed consent, disclosure is impliedly authorized, or another rule-based exception applies. The rule also requires reasonable efforts to prevent unauthorized disclosure of, or unauthorized access to, information relating to the representation of a client.
A simple example:
A lawyer learns sensitive business information while representing a client.
Even if that information is not a privileged communication, the lawyer may still have confidentiality duties related to it.
Main Difference Between Privilege and Confidentiality
The simplest difference is:
Attorney-client privilege protects certain communications from compelled disclosure.
Attorney-client confidentiality protects client-related information more broadly in the lawyer's professional conduct.
This distinction matters because a law firm may face confidentiality obligations even when privilege does not apply.

Examples
Scenario | Typical protection | Practical handling |
Client asks for legal advice in a private email | Usually privileged and confidential | Restrict access and avoid unnecessary disclosure |
Lawyer's internal litigation-strategy notes | May involve privilege or work product; confidential | Keep inside approved matter systems |
Public court filing | Usually not privileged | Public availability does not make casual reuse appropriate |
Billing entry revealing legal strategy | Confidential and potentially privilege-sensitive | Use a balanced description |
Calendar event naming a sensitive investigation | Usually confidential | Use restrained titles and access controls |
Administrative communication | Often not privileged but may remain confidential | Share only as needed for the work |
Why This Difference Matters for Law Firm Operations
Law firm operations create many records that are not traditional legal memos but may still contain sensitive client information.
Examples include:
Operational record | Main risk to manage |
Time entries and billing descriptions | Unnecessary disclosure of advice, strategy, or sensitive facts |
Calendar events and matter names | Exposure of client identity or confidential matter context |
Task codes and workflow notifications | Revealing the nature or stage of sensitive work |
Internal and prebill comments | Privileged or strategic detail copied into broader systems |
Draft descriptions and AI summaries | Unreviewed language containing excessive detail |
Document activity logs | Metadata that reveals sensitive work patterns |
A law firm's confidentiality obligations can apply across these operational records, not just formal legal advice documents.

Privilege, Confidentiality, and Legal Billing Descriptions
Billing descriptions need to be clear enough for review, but careful enough to avoid unnecessary disclosure.
Weak because too vague:
Worked on matter.
Risky because too detailed:
Analyzed weaknesses in client's liability position based on damaging internal email from CFO.
Better:
Analyzed liability issues and prepared strategy notes for client discussion.
The better description gives useful context without exposing unnecessary sensitive detail.
Privilege, Confidentiality, and Time Entries
Time entries can create risk when they include too much detail about legal advice, strategy, facts, or sensitive client issues.
A good time entry should usually identify:
The type of work performed
The general subject
The matter purpose
The duration
The correct client or matter
Any required billing code
It should usually avoid:
Detailed legal strategy
Sensitive admissions
Privileged advice content
Names that are unnecessary for billing review
Direct quotations from client communications
Excessive detail about confidential investigations
Privilege, Confidentiality, and AI Legal Tools
AI tools can affect both privilege and confidentiality depending on how they are used.
Law firms should evaluate:
Governance question | Control to expect |
Model training | Client data is not used for shared training without authorization |
Retention and deletion | The firm can control how long inputs and outputs remain |
Access | Permissions limit who can view matter-related information |
Collection scope | The tool avoids unnecessary screen, keystroke, or document capture |
Human review | Lawyers review outputs before use or release |
Client requirements | The workflow can follow billing and confidentiality guidelines |
The practical rule is simple: AI should support lawyer judgment, not bypass it.
How to Reduce Risk in Timekeeping and Billing Workflows
Law firms can reduce confidentiality and privilege risk by creating clear standards for operational records.
Useful practices include:
Risk-reduction practice | How to apply it |
Balanced descriptions | Explain work value without revealing legal advice or strategy |
Prebilling review | Check time entries before they reach invoices or clients |
Approved tools and access | Limit matter data to vetted systems and authorized users |
Monitoring restraint | Avoid invasive collection that captures unnecessary information |
Training and guidance | Teach lawyers how privilege and confidentiality affect entry language |
Client and ethics review | Check client rules and consult ethics counsel for firmwide policy |
How MIRA Fits This Workflow
MIRA helps law firms capture work activity, review time entries inside Microsoft Teams, and prepare clearer billable descriptions before entries are saved or released.
This matters because timekeeping should not blindly push raw activity into billing. Lawyers should be able to review, edit, merge, remove, save, or release entries based on professional judgment.
For confidentiality-sensitive work, that review step is not just a convenience. It is part of a responsible workflow.
For a connected workflow, explore AI Timekeeping for Lawyers.
Frequently Asked Questions
What is the difference between attorney-client privilege and confidentiality?
Attorney-client privilege usually protects certain confidential lawyer-client communications from forced disclosure. Attorney-client confidentiality is a broader ethical duty to protect information relating to the representation of a client.
Is all confidential client information privileged?
No. Some client-related information may be confidential but not privileged. Privilege is usually narrower and depends on specific legal requirements.
Is attorney-client privilege broader than confidentiality?
Usually no. Confidentiality is generally broader because it can cover information related to representation, not only privileged communications.
Can billing descriptions reveal privileged information?
Yes, they can create risk if they include too much detail about legal advice, client communications, or strategy. Billing descriptions should be clear but carefully written.
Can a time entry be confidential?
Yes. A time entry may contain client matter details, strategy, task descriptions, or other sensitive information related to representation.
Should law firms use AI tools for privileged or confidential information?
Law firms should evaluate AI tools carefully before using them with privileged or confidential information. They should consider data use, retention, access controls, security, and lawyer review.
What is a safer way to write sensitive billing descriptions?
Use descriptions that explain the work at a useful level without exposing unnecessary legal strategy, privileged communication, or sensitive facts.
Does MIRA replace lawyer review?
No. MIRA is designed to support time capture and review. Lawyers remain in control of what gets edited, saved, or released.

