Witness interviews and legal holds are among the most sensitive aspects of…
Information collected during an internal investigation is inherently sensitive. Its collection must comply not only with the European General Data Protection Regulation (GDPR), but the information obtained must be circulated with caution.
One principle must guide the entire process: the strict confidentiality of the internal investigation, including the investigation report itself.
The internal investigation report should be circulated only to a limited number of individuals within the company. Restricting distribution indeed minimizes the risk of rumors spreading within the company and, more importantly, prevents the potential external dissemination of sensitive information that could damage the company’s reputation.
As a matter of principle, an internal investigation report should not be disclosed to authorities nor to the external auditors without prior authorization from the relevant internal decision-making body.
That said, a company may decide to disclose the report to judicial authorities in the context of judicial cooperation, especially with a view to negotiating a Convention Judiciaire d’Intérêt Public – a kind of French DPA - if applicable.
In the absence of a clear statutory framework, the applicability of French legal professional privilege to internal investigations remains a matter of debate.
Under French law, communications and documents exchanged between a lawyer and a client involved in criminal proceedings are, in principle, protected by legal privilege. Accordingly, an internal investigation launched after a company has been formally implicated in criminal proceedings would normally fall within the scope of that protection.
However, significant uncertainty remains when the company is not yet under investigation. Although the preliminary article of the French Code of Criminal Procedure extended legal professional privilege to legal advice provided by lawyers, the French supreme court (in French, “Cour de cassation”) has adopted a restrictive approach. The court has issued decisions that appear inconsistent, creating uncertainty as to the exact scope of privilege.
Soft law instruments further reflect this divergence. Guidelines issued by the Financial Public Prosecutor’s Office and the French Anticorruption Agency denies the application of legal professional privilege to internal investigations. By contrast, guidance from lawyers’ representative bodies, including the Conseil national des barreaux, supports the application of privilege to such investigations conducted by lawyers.
For this reason, Bill. No. 2208 submitted to the French National Assembly on 9 December 2025 but not enacted yet seeks to clarify the issue. The reform intends to extend legal professional privilege to internal investigations conducted by lawyers, characterizing them as legal advice relating to the rights of the defense.
Pending legislative clarification, we regularly accompany our clients on how to navigate the evolving and sometimes contradictory contours of French legal professional privilege in the context of internal investigations.
