Privilege Clawback and Rule 502 Checklist: A Practical Checklist

Most privilege disasters in the reported cases were preventable with a page of text and a day of sampling. Defendants in one leading decision asked for a clawback order, then told the court they no longer needed it. The law firm in another had been counsel in the very case warning that keyword searches must be sampled. This list exists so that nobody has to be the next example.

How to use this checklist

Work through Phases 1 to 3 at the start of every federal case with document discovery. Keep Phases 4 to 7 handy, because when you need them, you will need them within the hour. Tasks are written for the lawyer responsible for discovery, but most can be delegated, and the first column of any good discovery plan is who owns each one.

Rule citations are to the federal rules. In state court, check the state's waiver rule, snap-back procedure, and ethics rule, and remember that Fed. R. Evid. 502(c) and (f) affect how federal and state proceedings interact. A shorthand: Rule 502(b) is the default test, Rule 502(d) is the court order, Rule 502(e) is the private deal, and Rule 26(b)(5)(B) is the procedure while the dispute is pending.

For the reasoning behind these items, see Rule 502 and Inadvertent Production: Waiver, Clawback Agreements, and Why Every Case Needs a 502(d) Order. For the narrative sequence, see Recovering an Inadvertently Produced Privileged Document: A Practical Guide. For forms, see Clawback Toolkit: 502(d) Orders, Clawback Notices, and Privilege Review Protocols.

Phase 1: Before the Rule 26(f) conference

• Identify the forum and its waiver law. Fed. R. Evid. 502 governs disclosures in federal proceedings or to federal offices and agencies, including on state-law claims under Rule 502(f). Fed. R. Evid. 501 sends the question whether something is privileged in the first place to state law where state law supplies the rule of decision. Note: Mt. Hawley Insurance Co. v. Felman Production, Inc., 271 F.R.D. 125 (S.D. W. Va. 2010) applied West Virginia privilege law and Rule 502 for waiver.
• Check local rules and the judge's standing orders. Many courts have model orders with clawback language. Compare them against the items in Phase 2 rather than assuming they are enough.
• Map earlier disclosures of the same material. Rule 502(d) covers disclosure "connected with the litigation pending before the court." Note prior agency productions, pre-suit exchanges, public records responses, and related cases. Note: Disclosure outside a federal proceeding may fall outside Rule 502(b) altogether. See Talismanic Properties, LLC v. Tipp City, 309 F. Supp. 3d 488 (S.D. Ohio 2017) (public records responses).
• Identify the client's lawyers. Get names, nicknames, assistants, former counsel, outside firms, and email domains from the legal department. irth Solutions, LLC v. Windstream Communications LLC, 2017 WL 3276021 (S.D. Ohio Aug. 2, 2017). Note: In Irth, the firm believed it knew all of the in-house lawyers involved, and it did not.
• Learn the client's system quirks. Email footers, shared mailboxes, assistants who forward for executives, chat, and how legal holds work. Rhoads Industries, Inc. v. Building Materials Corp. of America, 254 F.R.D. 216 (E.D. Pa. 2008) (footer contained "privileged" and "confidential").
• Check litigation hold status. Preservation sets the review population. See Litigation Holds, Spoliation, and Rule 37(e): Preserving Electronic Evidence Before It Costs You the Case.
• Pick your discovery lead, and vet the vendor. Competence and supervision duties under Model Rules 1.1 and 5.3 follow you to the vendor; Mt. Hawley attributed review failures to counsel along with the client.
• Decide what is too dangerous to rely on an order for. List the handful of custodians, topics, or document types where even a clawback would not undo the harm of being read.

Red flag: A protective order on your desk with "non-waiver" in the heading. Read the words. A confidentiality order may say nothing about Rule 502, and a non-waiver line may not displace Rule 502(b).

Phase 2: Get the order

• Raise privilege at the conference. Fed. R. Civ. P. 26(f)(3)(D) requires the discovery plan to address privilege claims, including the timing and method of complying with Rule 26(b)(5)(A), and whether to ask for an order under Rule 502. Also see Rule 26 Initial Disclosures and Discovery Planning: A Practical Checklist.
• Propose a mutual Rule 502(d) order. Mutuality removes most objections. Ask that it be incorporated in the scheduling order under Fed. R. Civ. P. 16(b)(3)(B)(iv). Rule 502(e): an agreement alone binds only its parties.
• Say it is entered under Rule 502(d), and quote the rule. In re Testosterone Replacement Therapy Products Liability Litigation, 301 F. Supp. 3d 917 (N.D. Ill. 2018) relied on language making the order an order "under Rule 502(d)."
• Cover disclosure "whether inadvertent or otherwise," regardless of care. Edgar v. Teva Pharmaceuticals Industries, Ltd., No. 2:22-cv-02501 (D. Kan. Aug. 5, 2024); explanatory note to Rule 502(d).
• State that Rule 502(b) does not apply. Some courts require concrete directives. Maxtena, Inc. v. Marks, 289 F.R.D. 427 (D. Md. 2012).
• Spell out the post-notice procedure. Who does what, by when, and what happens with derived data, in terms that mirror Rule 26(b)(5)(B).
• Cover deposition use. Provide that use at a deposition without objection does not waive unless a stated time passes after the party learns of it, and set that time. Certain Underwriters at Lloyd's, London v. National Railroad Passenger Corp., 218 F. Supp. 3d 197 (E.D.N.Y. 2016). Note: Even with this language, object anyway. Courts are split on the default. Compare Amtrak with Testosterone.
• Add nonparties. Allow subpoena respondents to invoke the order, or get a supplemental order, as in the proposed stipulated order in City of Sterling Heights Police & Fire Retirement System v. Reckitt Benckiser Group PLC, No. 1:20-cv-10041 (S.D.N.Y. Sept. 16, 2022).
• Strip inadvertent conditions. Delete covenants like "each party shall review its documents before production" unless you want them to be read as a condition. Northrop Grumman Systems Corp. v. United States, 120 Fed. Cl. 436 (2015).
• Exclude intentional use as a sword. Courts will not enforce a shield for deliberate waiver. Potomac Electric Power Co. v. United States, 107 Fed. Cl. 725 (2012). A carve-out makes the order easier to obtain.
• Address AI handling in the same order or the protective order. Morgan v. V2X, Inc., No. 25-cv-01991 (D. Colo. Mar. 30, 2026) shows one court's terms.
• If the other side refuses, move. Rule 26(c)(1) good cause, on a specific showing of volume and burden. Rajala v. McGuire Woods, LLP, 2010 WL 2949582 (D. Kan. July 22, 2010). Note: Courts keep discretion. See United States v. Captive Alternatives, LLC, No. 8:22-cv-00406 (M.D. Fla. Aug. 29, 2023) (denied in an IRS summons enforcement proceeding).
• Confirm entry. Get the signed order, and treat nothing as protected until it is on the docket. A proposed order protects no one.
• Do not produce before entry. If a production is due first, seek a short extension or an interim stipulation that the order will reach back.
• Do not abandon the request. Don't withdraw because the schedule improved. Victor Stanley, Inc. v. Creative Pipe, Inc., 250 F.R.D. 251 (D. Md. 2008).

Red flag: Someone proposes skipping the order because the case is small. The email in irth Solutions said "a formal court order under Fed. R. Evid. 502(d) was not necessary based on the scale of the case," and 43 documents were lost.

Red flag: Your own "quick peek" proposal. Rule 502(d) contemplates it, but the other side then reads everything. Sedona's commentary opposes compelled peeks, and Fairholme Funds, Inc. v. United States, 134 Fed. Cl. 680 (2017) ordered one anyway on unusual facts. Decide deliberately.

Phase 3: Build and run the privilege review

Do this even with a good order, because the order protects the privilege but doesn't erase what the other side read.

• Write the protocol. A short written instruction set with examples. Coburn Group, LLC v. Whitecap Advisors LLC, 640 F. Supp. 2d 1032 (N.D. Ill. 2009); Datel Holdings Ltd. v. Microsoft Corp., 2011 WL 866993 (N.D. Cal. Mar. 11, 2011).
• Train reviewers, and put it in writing. Datel credited a tutorial.
• Staff with supervised experience. Non-lawyers are not per se unreasonable. Coburn; Amobi v. District of Columbia Department of Corrections, 262 F.R.D. 45 (D.D.C. 2009) rejects an all-or-nothing view of lawyer review. Note: A first-time reviewer with no detailed oversight weighed against the producing party in Rhoads.
• Design the screen. Lawyer names, firm domains, legal terms, and matter names, across body and metadata, not just address lines. Rhoads.
• Have someone qualified choose the terms, and write down why. Victor Stanley; United States v. O'Keefe, 537 F. Supp. 2d 14 (D.D.C. 2008).
• Check that all data is searchable. OCR images and PDFs first. Victor Stanley.
• Test terms against a sample. In re Seroquel Products Liability Litigation, 244 F.R.D. 650 (M.D. Fla. 2007) on sampling and quality assurance.
• Sample the "not privileged" pile before each production. An elusion test: pull a random sample and have a senior lawyer read it. Victor Stanley; Mt. Hawley. Note: Record sample size, how it was drawn, reviewer, results, and what you did about misses. Set the sample size with someone who knows the statistics. A low prevalence of privileged material makes small samples weak.
• Run multi-level review of what is coded privileged. Datel (first level, QC, privilege team).
• Treat threads, families, and duplicates consistently. Propagate privilege calls and check for conflicts between members.
• Validate any TAR or AI tool on this data. The explanatory note to Rule 502 allows that "advanced analytical software applications and linguistic tools" may be reasonable "[d]epending on the circumstances." See Rio Tinto PLC v. Vale S.A., 306 F.R.D. 125 (S.D.N.Y. 2015). Note: We found no reported decision yet ruling on an LLM-based privilege review under Rule 502(b)(2). Assume you need a declarant who can explain the prompts, model version, thresholds, validation, and human escalation.
• Confirm AI vendor terms before upload. No training on inputs, restricted third-party sharing, deletion on request. ABA Formal Op. 512; Morgan. See AI Confidentiality Toolkit: Acceptable Use Policies, Vendor Term Reviews, and Incident Playbooks.
• Log on a schedule. Rule 26(b)(5)(A) is mandatory, and an unlogged document may be lost. Rhoads. Use Preparing a Privilege Log: A Practical Checklist.
• Keep a review diary. Dates, terms, versions, batches, QC results, changes.
• QC the outgoing set. Immediately before release, run the privilege screen and withheld hash list against the actual export, not the review database. Note: A wrong-folder error caused the second production in Irth, a bad index caused the failure in Mt. Hawley, and a processing truncation caused the error in Datel.
• Get a lawyer's signature on each release. A named person signs off on each volume. Record it.

Red flag: Marking every page "confidential." The court in Mt. Hawley noted it as part of a sloppy production, and blanket marking gives you no help on privilege.

Red flag: A deadline that makes this impossible. Ask for more time or for relief before producing. Victor Stanley punished the party that complained later and never asked.

Phase 4: You find out you produced something (producing side, first 24 hours)

• Open a timed chronology. Who, what, when. It will become your declaration on Rule 502(b)(3).
• Read the order. Deadlines and procedures may differ from the default. Mt. Hawley (ten business days for recall; five for return).
• Stop pending productions in writing. Vendor and staff. irth Solutions.
• Confirm privilege. Is the document actually protected, and on what basis? If it's not, don't claim it. Courts look at privilege first. Coburn.
• Tell lead counsel and the client. Model Rule 1.4; ABA Formal Op. 481 on material errors. Consider the firm's general counsel and carrier.
• Call opposing counsel, then send written notice. Rule 26(b)(5)(B); Rule 45(e)(2)(B) for subpoenas. Use the notice in the toolkit.
• Identify by Bates number, and state the basis. The committee note asks for notice "as specific as possible."
• Include derived data and retrieval. Copies, extracted text, summaries, expert files.
• Preserve. You must preserve the information until the claim is resolved. Rule 26(b)(5)(B). Don't delete it from your own systems.
• Sweep for siblings. Hash, near-duplicate, thread, family, name in body text. The note requires following up on "obvious indications." Mt. Hawley.
• Send supplemental notices as you find more. Keep a table.
• Run the root cause analysis. Have a person who understands the system write down what failed.
• Update the privilege log. Rhoads found delay damaging. Provide clean replacement media after QC.
• Calendar the next step. If the other side refuses, you may need to move promptly. Coburn excused five weeks because of a written quarantine agreement.

Red flag: The other side told you first. Courts weigh this against you, as in Victor Stanley and Mt. Hawley. It doesn't end the analysis, but it does mean your response needs to be especially fast and thorough.

Red flag: Your notice says "we inadvertently produced a damaging memo." Don't describe content, and don't confess to the quality of the review.

Phase 5: A privileged document shows up at a deposition

• Object at once, and say "privileged." Generalized reservations were insufficient in Amtrak.
• Name the basis and invoke the rule. Attorney-client, work product, Rule 26(b)(5)(B), and the order paragraph.
• Instruct the witness. Rule 30(c)(2) allows an instruction not to answer to preserve a privilege.
• Ask for the copies. Exhibit, reporter's set, and any electronic copies in a remote room.
• Take a short break if you need to verify. But object before leaving the room.
• Correct course quickly if you got it wrong. In Datel, counsel first said no privilege applied, then clawed back within hours after seeing the full thread, and avoided waiver. (The court still found most of the chain unprivileged on the merits.)
• Send written follow-up the same day. D'Andrea Brothers LLC v. United States, No. 08-286C (Fed. Cl. June 4, 2010).
• Sequester the transcript and video pages. Tell the reporter.
• Move to strike if testimony came in. Coburn.
• If you are taking the deposition, stop on a clear claim. Make your record and reserve. Don't push. Rico v. Mitsubishi Motors Corp., 42 Cal. 4th 807 (2007).
• Prepare witnesses for the possibility. Use Defending a Deposition Checklist: A Practical Checklist and Deposition Witness Preparation Checklist: A Practical Checklist.

Red flag: "I'll reserve my rights" followed by ten pages of testimony. That was the failure in Amtrak, even with a broad Rule 502(d) order. Testosterone went the other way on its order. You don't want to be the test case.

Phase 6: You received something that looks privileged (receiving side)

• Have a triage rule for reviewers. Tag, stop, escalate to one designated lawyer.
• Stop reading once it appears privileged and inadvertent. State Compensation Insurance Fund v. WPS, Inc., 70 Cal. App. 4th 644 (1999) requires this in California; other jurisdictions may not, but it's the safe course.
• Check your jurisdiction's Rule 4.4(b). The Model Rule requires prompt notice to the sender. Some states add more. EEOC v. George Washington University, No. 17-cv-1978 (D.D.C. Nov. 5, 2020) discusses D.C. Opinion 256. Note: ABA Formal Op. 05-437, as quoted in Mt. Hawley, says the Model Rule itself does not bar examining the material or require following the sender's instructions.
• Notify the sender. A short, neutral email. Reserve rights.
• On notice, sequester every copy. Rule 26(b)(5)(B). No further review. GWU.
• Do not use or disclose. Includes depositions, filings, expert files, and your client. GWU; Talismanic.
• Retrieve from others. Experts, co-counsel, client, vendors. Get written confirmations. Rico.
• Purge derived data from the platform. Search index, analytics, clusters, TAR training sets, AI summaries, embeddings, chat history. Get the vendor's written confirmation. Note: No reported case we have found squarely decides whether a derived summary or embedding is a "copy." The rule refers to "information," so treat them as covered.
• Segregate notes and work product that drew on it. Record who saw what.
• Evaluate the claim from the log and metadata. Don't reread. Is it privileged on its face? Is the production really a mistake? Does an order foreclose the care argument?
• Consider the crime-fraud exception only with a basis. United States v. Zolin, 491 U.S. 554 (1989).
• Decide whether to contest, in light of the cost. Consider what you would gain.
• Reply in writing by the deadline. State what you did and whether you dispute the claim.

Red flag: Taping "Do not look at" to a document you just read after notice. That was the agency's position in GWU, and the court held it violated the rule.

Red flag: Your opposing counsel's memo is on your trial team's chat. Stop, escalate, and consider whether anyone needs to step back. Disqualification appears in Richards v. Jain, 168 F. Supp. 2d 1195 (W.D. Wash. 2001) and Maldonado v. New Jersey, 225 F.R.D. 120 (D.N.J. 2004).

Phase 7: Motion practice and review

• Meet and confer, and write it up. Rule 37(a)(1) certification; local rules.
• Seek a quarantine stipulation. Both sides agree to sequester and not to argue delay. Coburn.
• Decide who moves. Producing side: return and protection under Rule 26(c). Receiving side: determination under Rule 26(b)(5)(B).
• Present under seal or in camera only. Rule 26(b)(5)(B). Check the local rule. See Protective Order and Sealing Checklist: A Practical Checklist.
• Prove the privilege first. Declaration from the lawyer or client on purpose and confidentiality. Coburn; Mt. Hawley.
• Under Rule 502(b), prove each element with facts. Williams v. District of Columbia, 806 F. Supp. 2d 44 (D.D.C. 2011) lists what's expected: timing, reviewers' experience, supervision, rounds, volume.
• Choose declarants with personal knowledge. Irth noted the absence of the people who did the work. Consider non-trial counsel.
• Know the burden in your court. Generally the producing party: Williams; Testosterone. Rhoads puts it on the party claiming waiver.
• Address the five factors. Precautions, number, extent, delay, and interests of justice. Victor Stanley; Rhoads; explanatory note.
• Use the Rule 502(a) limit. No subject matter waiver from an inadvertent disclosure. Explanatory note; Irth.
• For work product, address substantial need. Rule 26(b)(3)(A). Coburn.
• Ask for relief on derivative use. Exclusion of testimony, and a bar on use of derived information.
• On a magistrate ruling, object within 14 days. Rule 72(a); clearly erroneous or contrary to law.
• Seek a stay immediately if ordered to produce. There's no collateral order appeal. Mohawk Industries, Inc. v. Carpenter, 558 U.S. 100 (2009). See Interlocutory Appeal Checklist: A Practical Checklist and 28 U.S.C. § 1292(b).
• After the ruling, fix the process. Add the failure to the protocol and record it.

Red flag: Filing the disputed document as a public exhibit to your motion. Even if you think it's not privileged, Talismanic shows the show-cause order that can follow, and Mt. Hawley discusses the same complaint.

Quick reference: which rule answers which question

This checklist is general information for orientation, and the answer for any particular document depends on your order, your court, and your facts, which a lawyer should review.

Related Documents

Related Articles

• Rule 502 and Inadvertent Production: Waiver, Clawback Agreements, and Why Every Case Needs a 502(d) Order: the doctrine and the case-by-case reasoning.
• Protective Orders, Confidentiality Designations, and Sealing: Secrecy and Its Limits in Federal Court: background on the order and on sealing.
• Data Breach Class Actions: Article III Standing, Negligence Claims, and Forensic Report Privilege: a common setting for privilege disputes.

Related Guides

• Recovering an Inadvertently Produced Privileged Document: A Practical Guide: the same ground in step-by-step prose, with examples.
• Negotiating an ESI Protocol and Managing E-Discovery Costs: where Phase 2 usually happens.

Related Checklists

• Preparing a Privilege Log: A Practical Checklist: the companion log task.
• Rule 26 Initial Disclosures and Discovery Planning: A Practical Checklist: the conference that starts this list.
• Protective Order and Sealing Checklist: A Practical Checklist: sealing mechanics.
• Defending a Deposition Checklist: A Practical Checklist: more on Phase 5.
• Deposition Witness Preparation Checklist: A Practical Checklist: prep for privileged-exhibit moments.
• Federal Deadline Calendaring and Recovery Checklist: A Practical Checklist: tracking the short deadlines here.
• Interlocutory Appeal Checklist: A Practical Checklist: after a loss.

Related Toolkits

• Clawback Toolkit: 502(d) Orders, Clawback Notices, and Privilege Review Protocols: the forms this list calls for.
• AI Confidentiality Toolkit: Acceptable Use Policies, Vendor Term Reviews, and Incident Playbooks: vendor terms for AI-assisted review.