Negotiating a Protective Order and Filing Under Seal: A Practical Guide

Summary. Get the order right early; earn the seal document by document.

The distinction that governs everything

Keeping material private between the parties is easy. Federal Rule of Civil Procedure 26(c) permits a protective order for good cause, parties usually stipulate, and courts enter them routinely.

Keeping material out of the public record once filed is hard. It is governed by the public right of access, the parties cannot waive it by agreement, and the designation under the protective order establishes nothing.

Every mistake in this area comes from treating the second question as answered by the first.

PART ONE: NEGOTIATING THE ORDER

Step 1 — Decide what tiers you need

Do not create tiers you do not need. Each adds administrative burden and another category to argue about.

The custom tier is underused. Where a party genuinely needs a technical employee to evaluate the other side's material, a fourth tier with named individuals, review at counsel's offices, no retained copies, and a time-limited bar on competing work is frequently acceptable to both sides and to the court.

Step 2 — Negotiate the terms that matter

Who may see Confidential material. The recurring fight is whether in-house counsel qualifies. The answer should turn on whether that person participates in competitive decision-making. Where they do, a prosecution or competitive-decision bar may be the price of access.

The challenge procedure. Negotiate three things:

• Who bears the burden. Put it on the designating party. This is standard and it is the most important term for a party receiving a large production.
• The timeline. Conferral, then a defined period for the designating party to move.
• Status pending resolution. Material stays protected until the challenge is resolved.

Expert disclosure. Whether experts must be identified before receiving material, and whether the other side may object. A party required to disclose a consulting expert to obtain documents has given up work product protection it might have kept.

The prosecution bar. Scope of technology, duration, and barred activities. This can disqualify a client's regular patent counsel; negotiate with that in mind and confirm with the client before agreeing.

Third-party protections. Notice before filing or using another entity's material, and standing for that entity to object.

Source code procedures, in detail: location, machine specifications, printing limits, logging, who may attend, and how excerpts are handled.

Filing. Reference the local rules and state expressly that designation does not entitle a party to file under seal. Many districts now require this; including it prevents a later argument.

Government demands. What happens when a party receives a regulatory or grand jury demand — notice and an opportunity to object, subject to any legal prohibition on giving notice.

Survival and disposal. That the order survives final disposition, that the court retains jurisdiction, and a defined period for return or destruction with a certification requirement.

Step 3 — Get a Rule 502(d) order separately

Federal Rule of Evidence 502(d) permits a federal court to order that disclosure does not waive privilege in that proceeding or in any other federal or state proceeding. This is the only mechanism that protects against waiver as to non-parties.

A clawback agreement between the parties is not enough. Obtain the order.

A well-drafted 502(d) order states that disclosure does not waive privilege in any proceeding, that the producing party need not demonstrate it took reasonable steps to prevent disclosure, and that the order applies regardless of the care exercised.

Courts enter these routinely. Ask.

PART TWO: DESIGNATING

Step 4 — Designate narrowly, because credibility is the asset

Over-designation is common, tolerated, and costly. A party that marks everything Highly Confidential burdens the other side, complicates every filing, and has no credibility when a genuine trade secret needs protection.

A workable discipline:

• Default to no designation for anything already public — marketing materials, regulatory filings, published documents.
• Confidential for non-public business information generally.
• AEO only for material whose disclosure to a competitor's business personnel would cause harm no order can undo: current pricing, current cost, current process specifications, customer-specific terms, and security information.
• Review a sample before bulk designation. Ten minutes categorizing a hundred documents tells you whether the whole production is AEO or whether 6% of it is.

Deposition testimony: most orders provide a default protection period after the transcript is available, during which specific portions must be designated. Calendar it. The period is short and the default expires.

Late designation is available under most orders for material inadvertently produced unmarked, but it is not a strategy. A party that produces without designating, watches the material get used, and then designates has a weak position.

Step 5 — Challenge over-designation efficiently

Do not challenge everything. Sample and categorize:

1. Select 150–250 documents across custodians and date ranges.
2. Sort into categories: already public; routine internal; historical financial; current competitive; genuinely sensitive.
3. Send a letter attaching the categorization, challenging the categories that are plainly over-designated, and asking the producing party to re-review the production applying the same categories.
4. Do not allege bad faith. Offer a path that is cheaper for them than defending designations document by document.

This usually works, because re-review is less expensive than litigating designations, and because the categorization makes the over-designation undeniable.

If it does not work, move under the order's procedure, with the burden on the designating party, and attach the categorization as the exhibit.

Reserve the fight for what matters. After the bulk is resolved, there will be a genuine dispute about a few hundred documents. That is the dispute worth briefing, and it is frequently resolved by designing access — a custom tier — rather than by winning.

PART THREE: SEALING

Step 6 — Plan filings around confidentiality

Before drafting a dispositive motion, decide what must be filed. Many arguments can be made without attaching the most sensitive documents. A brief that describes a document's effect, cites it, and attaches a redacted version frequently works as well as one attaching the whole thing.

Understand the escalating standards:

The consequence: attaching a confidential document to a summary judgment brief converts it into a judicial record subject to the strongest presumption, and the protective order designation does not answer the question.

Step 7 — Draft the sealing motion properly

Courts deny these constantly, and the denials share one feature: the motion asserts confidentiality rather than establishing it.

What a granted motion contains:

A document-by-document table.

A declaration from a business person. Not from counsel. Someone who can explain why the information is valuable, how it is protected internally, and what a competitor could do with it.

Narrow tailoring. Proposed redacted public versions of everything that can be redacted, with only specific figures and parameters obscured. Courts respond well to this and badly to a request to seal a brief in its entirety.

An acknowledgment of the standard. State whether the document accompanies a dispositive or non-dispositive motion, recite the applicable showing, and address it. A motion that cites only the protective order is not credible.

A concession. Identify the exhibits that should not have been designated and file them publicly. It costs nothing and it establishes that the rest of the request is considered.

What gets sealed routinely: trade secrets satisfying 18 U.S.C. § 1839; current non-public financial data; personally identifying information; third parties' material produced under compulsion; statutorily protected material.

What gets refused routinely: merely embarrassing information; historical financial data; material disclosed elsewhere; settlement terms presented for approval; anything designated without articulated reason.

Step 8 — Redact carefully

A redaction failure is worse than not sealing. Once an inadequately redacted filing is on the public docket, it has been indexed and possibly copied.

Protocol:

• Redact in the source document, then convert; do not draw boxes over text in a viewer.
• Confirm the underlying text is removed, not merely obscured — search the redacted file for the redacted terms.
• Check metadata, comments, tracked changes, and hidden columns in spreadsheets.
• Second-reader check by someone who did not do the redaction.
• Verify the filed version, after filing, by downloading it from the docket.

PART FOUR: CLOSING OUT

Step 9 — Maintain the access log

Why it matters: if a violation is alleged, reconstructing who saw what is difficult and the reconstruction is not credible. If a disqualification motion follows, this log is the defense.

Include: every lawyer, paralegal, expert, consultant, vendor, and party employee. Track experts against the disclosure obligations in the order.

Step 10 — Handle the disposal obligation

Return-or-destroy provisions are routinely missed because nobody owns them after the case closes.

• Calendar the deadline at final disposition.
• Identify every holder: firms, experts, vendors, translation services, copy services, and the client.
• Certify in the form the order requires.
• Note the retention exceptions — most orders permit counsel to retain one archival set and pleadings, and litigation holds in other matters may require retention.

Step 11 — Prepare for an unsealing motion

It may come years later, from a party who was not in the case.

• Get the documents and read them. Nobody remembers what is in Exhibit 34.
• Reassess honestly. Concede what is no longer sensitive; it improves the position on the rest.
• Build the declaration you should have built originally.
• Offer redaction where full sealing is no longer defensible.
• Address the passage of time directly — explain why the information remains sensitive now.
• Notify third parties whose material is at issue.

The prevention is a properly supported original motion. An order entered on a document-by-document showing with a business declaration is far more durable than one entered on a stipulation.

A worked sealing motion

Ostrander Diagnostics moves for summary judgment against Kestrel Biosystems in a contract and trade secret case. The motion attaches fifty-four exhibits, of which thirty-eight are designated Confidential or Highly Confidential.

The first attempt

Ostrander's associate files a two-page motion to seal all thirty-eight, attaching the protective order and stating that the documents "have been designated confidential pursuant to the Protective Order entered by this Court and contain sensitive commercial information."

Denied in a three-paragraph order. The court notes that the documents accompany a dispositive motion, that the presumption of access is at its strongest, that a protective order designation does not establish a compelling reason, and that the motion offers no showing as to any individual document. Ostrander is given fourteen days to refile.

The second attempt

Partner Adaeze Mwangi-Lindqvist takes it over and does four things.

One: she reads the exhibits. Nobody had. Of the thirty-eight, eleven are documents Kestrel produced that Ostrander is not entitled to designate at all; six are Ostrander's own marketing materials designated in error; nine are historical financial summaries from 2019–2021; and twelve contain genuinely sensitive current material.

Two: she builds the table.

Three: she gets the declaration. From Ostrander's VP of Research and Development, not from counsel. Three pages: what the assay protocol represents, how it is protected internally, why the specific parameters are the valuable part, and what a competitor could do with them. Similar treatment for the source code excerpt and the active customer pricing.

Four: she prepares redacted public versions of nineteen exhibits, obscuring only specific figures and parameters. Each is attached to the motion so the court can see exactly what would be public.

The refiled motion

• Public filing of seventeen exhibits Ostrander had designated and should not have.
• Notice to Kestrel as to eleven exhibits Kestrel designated, giving Kestrel the opportunity to support its own designations. Kestrel supports six and withdraws five.
• Redaction requested for nineteen exhibits, with the proposed public versions attached.
• Full sealing requested for six exhibits: the assay protocol, the source code excerpt, and four current customer contracts.
• Six pages of argument, acknowledging the compelling-reasons standard and addressing it category by category.

Granted in full, ten days later.

What the exercise cost and what it revealed

The refiled motion took about nine days of associate and partner time — roughly $38,000. The first motion took two hours and was denied.

The more useful finding was that seventeen of Ostrander's own designations were wrong. Adaeze uses the categorization to run a designation audit across the whole production, which de-designates about 30% of it and — the part that matters — makes the remaining designations credible when Kestrel challenges them.

Her note to the file: "The table is the motion. Everything else is explanation."

Handling the AEO problem

Attorneys-eyes-only designations create a practical problem that surfaces in every competitor case: the client cannot see the evidence.

What this costs:

• Case assessment becomes counsel's judgment rather than an informed business judgment.
• Technical documents cannot be evaluated by the people who understand the technology.
• Damages analysis proceeds without the finance team's input on whether the numbers make sense.
• Settlement decisions are made by a client who has not seen the case.

Approaches, in order of preference:

Challenge the designations. Much AEO material does not warrant it. Sample and categorize, and reserve the fight for the genuinely sensitive documents.

Negotiate a custom tier. Two or three named individuals, approved in advance, reviewing at outside counsel's offices, taking no copies, subject to a time-limited bar on competing work. This is frequently acceptable to both sides because it addresses the actual risk — a competitor's engineers taking knowledge back to their own product work — rather than imposing a blanket prohibition.

Use experts as the bridge. A retained technical expert may see AEO material and may explain the technology to the client in general terms without disclosing the designated content. This works better than it sounds, provided everyone is careful about the line.

Prepare summaries. Counsel may describe the effect of documents without reproducing them. Slower and less precise, but it permits informed client decisions.

For the designating party: recognize that blanket AEO designation invites a challenge you will lose on most documents, and that a custom tier proposed early is cheaper than the motion practice that otherwise follows. Where the concern is genuine — current process specifications, active pricing — a narrow designation with a proposed access mechanism is more likely to hold than a broad one.

A working sequence

Third-party material

A party that produces another entity's confidential information under compulsion has obligations to that entity, and the mechanics are frequently mishandled.

When it arises: documents received from a customer, supplier, or partner under a confidentiality agreement; material produced by a non-party under a Rule 45 subpoena; and information the producing party holds subject to a third party's designation from another case.

The producing party's obligations:

• Check the underlying agreement. Most confidentiality agreements require notice before compelled disclosure and a reasonable opportunity for the owner to seek protection.
• Give notice promptly, in writing, with enough time for the third party to act.
• Do not designate on the third party's behalf without authority; the protective order should permit the third party to designate its own material.
• Object where the agreement requires it, and let the third party carry the fight if it wishes.

The receiving party's obligations:

• Treat third-party material as designated by whoever designated it.
• Give notice before filing or using it, if the order requires — well-drafted orders do.
• Recognize that the third party has standing to object and may appear.

Drafting the order to handle this: include a provision permitting any non-party producing material to designate it; requiring notice to that non-party before its designated material is filed; and giving it standing to move for protection or to oppose unsealing.

The recurring failure: a party files a competitor's confidential document, obtained from a mutual customer, without notifying the competitor. The competitor learns of it from the public docket, and the resulting motion practice is expensive and avoidable.

For subpoenaed non-parties: negotiate designation rights and notice provisions as a condition of production. A non-party has leverage before it produces and none afterward.

Confidentiality at trial

Everything above concerns pretrial. Trial is presumptively public, and parties who need secrecy there must plan for it months in advance.

The default is exposure. A document offered as a trial exhibit becomes part of the public record. Testimony describing confidential information is given in open court. The strongest presumption of access applies.

What is available:

Redacted exhibits. Offer the document with the sensitive figures obscured, where the redacted version supports the point. This is the most reliable approach and the one courts prefer.

Summaries. Present a summary exhibit with the underlying detail available to the court and the parties but not published. Requires the underlying material to be admissible and available.

Sealed exhibits. An exhibit admitted but not published to the gallery, with the sealed version in the record and a redacted version public. Courts grant this for genuinely sensitive material with a proper showing.

Closing the courtroom. The most difficult. Where a First Amendment right of access attaches, closure requires that it be essential to preserve higher values and narrowly tailored — the Press-Enterprise Co. v. Superior Court, 478 U.S. 1 (1986) standard. Courts close courtrooms for discrete portions of testimony about trade secrets with some regularity and rarely for more.

Sidebar and in-camera treatment for narrow questions.

Practical planning:

• Raise it at the pretrial conference, not on the morning of trial. The court needs to decide the mechanics in advance, and a party asking to close the courtroom during opening statements has not planned.
• Prepare redacted versions of every exhibit you expect to offer, in advance.
• Prepare witnesses on what may be said in open court and what requires a request to seal.
• Expect the press. Cases with sealed pretrial records attract attention at trial, and a media intervenor may appear to oppose closure.
• Decide what you would rather lose. Sometimes the honest answer is that the evidence is too sensitive to offer and the argument must be made without it. Deciding that in advance is better than discovering it during examination.

Mistakes that recur

Assuming a designation permits sealing. It does not.

Designating everything. It costs credibility exactly when it is needed.

A sealing motion with no table and no declaration. Denied, routinely.

Requesting to seal a brief in its entirety. Redact instead.

Relying on a clawback agreement without a 502(d) order.

Missing the deposition designation window.

Agreeing to a prosecution bar without checking whether it disqualifies the client's regular counsel.

Inadequate redaction. Second-reader check, always.

No access log, discovered when a violation is alleged.

Missing the disposal deadline.

Working with the client

Confidentiality practice imposes real burdens on a client, and the burdens are easier to bear when explained in advance.

What to tell the client at the outset:

"Your competitor's lawyers will see your documents." Under any protective order, outside counsel for the opposing party reviews the production. The order restricts what they may do with it; it does not prevent them from reading it. Clients are frequently surprised, and it is better to say so before production than after.

"You may not be able to see theirs." Where AEO designations apply, the client cannot review the other side's material. Explain what that means for case assessment and for settlement decisions, and explain what you will do about it — challenge designations, propose a custom tier, use experts as a bridge.

"Designation costs money and so does over-designating." A production review for designation is a second pass. Doing it carelessly shifts cost to the other side and then back again.

"Filing may expose it." The document you most want protected may be the one that decides summary judgment. Decide early whether the argument can be made without it.

"Some of this will become public." Courts deny sealing requests routinely. Set the expectation that not everything designated will stay out of the record.

What to ask the client for:

• A business declarant. Identify early the person who can explain why specific information is sensitive. Sealing motions fail without one.
• The internal protection story. How is this information protected inside the company — access controls, need-to-know, marking, agreements? A court asked to protect information the company does not protect itself will ask why.
• Realistic sensitivity assessments. Business people frequently over-claim sensitivity for the same reason lawyers over-designate. Push back; the credibility is worth more than the coverage.
• A named contact for disposal. Someone who will still be there when the case ends and the return-or-destroy obligation matures.

And one thing to tell them at the end: what to do differently. A client that emerged from litigation with its trade secrets intact usually did so because it could show a court how it protected them internally. That is a program worth building before the next case.

Frequently asked questions

Who should draft the protective order? Whoever will produce the most sensitive material has the most at stake and usually drafts. The other side should still negotiate the challenge procedure, the access tiers, and the expert disclosure provisions, because those are where the receiving party's interests live and they are frequently drafted unfavorably in a first draft.

Can we designate documents after we produce them? Most orders permit it for material inadvertently produced without a marking, on prompt notice. It is not a strategy. A party that produces unmarked, watches the material get used in a deposition, and then designates has a weak position and has damaged the credibility of its other designations.

What if the other side refuses to negotiate a reasonable order? Move under Rule 26(c) with a proposed order and a declaration explaining the specific harm from unrestricted disclosure. Courts resolve these quickly and generally adopt something close to the district's model. The dispute is rarely worth extended briefing.

Does the protective order bind non-parties who receive material? Only those who sign an undertaking as the order requires — which is why the undertaking requirement exists and why the access log matters. A vendor or consultant who received material without signing is a gap in enforcement.

Do we need a protective order if there is no obviously sensitive material? Usually yes. It is cheap insurance, and negotiating one after a dispute has arisen is harder than negotiating one at the Rule 26(f) conference.

Can we agree that designations are not challengeable? No court will enter that, and it would not bind non-parties on sealing anyway.

What if the other side designates our own documents? Designation rights belong to the producing party. Where a party's own documents are produced by another and designated, address it in the order — commonly, each party may designate its own material regardless of who produced it.

How long should a sealing motion be? Short, with the table doing the work. Five pages of argument plus the table and declaration is typical for a granted motion.

Can the court seal on its own? Courts occasionally seal sua sponte for personally identifying information or safety concerns, but the ordinary posture is that a party must move.

What if a court denies sealing for material we cannot expose? Options: withdraw the filing and make the argument without the document; seek reconsideration with a better record; seek review; or, rarely, accept the disclosure. Plan for this before filing, not after the denial.

Local rules and judge-specific practice

This is an area where the written rules vary more than the doctrine does, and where a filing that would be routine in one district is rejected in another.

Check before filing anything:

The local rule on sealing. Many districts now have one, and several prohibit sealing by stipulation, require a specific showing per document, require a proposed redacted version, or require that the motion itself be public. A motion that ignores the local rule is denied without reaching the merits.

The judge's standing order. Individual judges frequently impose additional requirements: page limits on sealing motions, a requirement to file the unredacted version conditionally under seal pending a ruling, a requirement that the designating party — rather than the filing party — support the seal, or a prohibition on sealing anything without a prior conference.

The mechanics of conditional filing. Districts differ on whether a party files the sealed version with the motion, lodges it separately, or files publicly after a ruling. Getting this wrong can put the material on the public docket.

The form of the protective order. Several districts publish a model, and departures from it may require explanation. Using the model where it works saves negotiation time and judicial patience.

The deadline for the redacted version. Many rules require a public redacted version within a short period of the sealed filing. Missing it can result in the sealed version being unsealed.

Whether the designating party must act. Some courts place the burden of supporting a seal on the party that designated the material, even where the other party filed it. This changes who drafts the motion and should be confirmed before a filing deadline.

Practical advice: read the local rule and the standing order before the filing deadline, not the night of it. Ask local counsel specifically about the judge's sealing practice — it is the sort of thing local counsel knows and outside counsel discovers.

Budgeting the confidentiality work

These costs are invisible in a litigation budget until they arrive, and clients experience them as unexplained overruns.

Where the money is actually saved:

• Narrow designation at the outset. It costs more once and saves in challenges, filings, and credibility.
• Keeping material out of filings. A sealing motion avoided is the cheapest sealing motion.
• Redaction over sealing. Faster to obtain, less likely to be revisited.
• A properly supported first sealing motion. A denied motion plus a refiled one costs more than doing it right once — and the denial is on the docket.
• Categorical privilege logging negotiated in the ESI protocol.
• One owner for designations, the access log, and the disposal deadline.

The line item clients question most is the sealing motion, because it produces no ruling on the merits. The answer is that a granted motion costs $25,000 and a denied one costs $25,000 plus the disclosure — and the disclosure is not recoverable.

Where to get help

The district's model protective order. Most districts publish one, and several publish a model ESI protocol alongside it. Starting from the model saves negotiation time and signals to the court that departures are considered rather than opportunistic.

The local rule on sealing. Read it before drafting anything. Several districts prohibit sealing by stipulation, require per-document showings, or impose specific mechanics for conditional filing.

The assigned judge's standing order and prior sealing rulings. A judge who has denied blanket sealing requests three times in the past year is telling you what the motion needs to contain. This research takes twenty minutes.

Local counsel. On sealing mechanics specifically — how the district handles conditional filing, whether the redacted version is due on a deadline, and whether the judge requires a conference. This is exactly the knowledge local counsel has and outside counsel discovers.

The client's own security program. A court asked to protect information will ask how the company protects it. Access controls, marking practices, confidentiality agreements, and need-to-know restrictions are the facts that support a sealing declaration, and they should be gathered before the motion rather than during it.

Vendors, on the mechanics. Redaction failures are the most common serious error in this area, and discovery vendors have processes and quality checks that a firm doing it manually does not. For any significant redaction set, use them.

Colleagues who have defended an unsealing motion. The experience changes how a practitioner drafts the original sealing motion, and the lesson is short: build the record now, because the person defending it in four years will have nothing else.

A note on remote and hybrid practice

Two developments have changed the mechanics of confidentiality practice without changing the doctrine, and both deserve a paragraph.

Remote depositions. A deposition conducted by videoconference raises questions a conference room does not: who else is in the room with the witness, whether the feed is being recorded by anyone other than the reporter, and how exhibits containing designated material are displayed and retained. Address all three in the protective order or in a separate remote-deposition protocol — a certification from each participant that no unauthorized person is present and no unauthorized recording is being made, a rule that exhibits are delivered through a controlled platform rather than emailed, and a requirement that exhibit access be revoked at the end of the session.

Cloud-hosted review and AI-assisted analysis. Most document review now happens in a hosted platform, and an increasing share involves machine-learning tools that process the corpus. A protective order drafted before these were common may not clearly permit either. Confirm that the definition of permitted recipients covers the hosting vendor and any subprocessor, that the order permits processing by automated tools under the receiving party's control, and — where a party intends to use a third-party model service — that the order addresses whether designated material may be transmitted to it at all. Producing parties increasingly negotiate for an express prohibition on submitting designated material to any external service that retains inputs or uses them for training, and that is a reasonable term to accept.

The practical instruction: if the order predates 2023, read it against how the case will actually be worked, and amend by stipulation rather than discovering the gap at a deposition.

Related documents

• Protective Orders, Confidentiality Designations, and Sealing: Secrecy and Its Limits in Federal Court
• Protective Order and Sealing Checklist: A Practical Checklist
• Confidentiality Toolkit: Protective Orders, Designation Challenges, and Sealing Motions
• Negotiating an ESI Protocol and Managing E-Discovery Costs
• Discovery Toolkit: A Roadmap and Resource Guide for Federal Discovery
• Internal Investigation and Upjohn Warning Checklist: A Practical Checklist
• Building a Trade Secret Protection Program Checklist: A Practical Checklist
• Litigation Hold and Evidence Preservation Checklist: A Practical Checklist