Skip to content

Legal Privilege

What is Legal Privilege?

The protection of communications between an attorney and client from disclosure, relevant to incident investigations and compliance matters.

Compliance and Regulatory

Each of these is named in at least one of the same controls as legal privilege. The number is how many controls name both.

What the standards actually require on legal privilege

Requirements naming legal privilege across 6 standards, quoted from the control text.

The Jamaica Data Protection Act 2020 (Act No. 7 of 2020) is Jamaica's first comprehensive data protection legislation passed by the Jamaican Parliament 16 June 2020 + assented to by the Governor-General 30 June 2020 + published in the Gazette 1 July 2020.

JM-DPA2020-Scope-Application-Sec1-3-31Dec2021-PartialEffective-1Dec2023-MandatoryCompliance-Territorial-Extraterritorial · Jamaica Data Protection Act 2020 - Scope + Application + Sections 1-3 + Commencement 1 December 2021 Partial + 1 December 2023 Mandatory Compliance + Territorial + Extraterritorial Application + Definitions →

Effective management of legal risk rests on the ISO 31000 principles read for legal risk, with a ninth, equity, added. Integrated: legal risk management is integral to governance and management and embedded in strategic planning, decision-making and management...

iso-31022-2020::4 · Principles: the eight ISO 31000 principles applied to legal risk, plus equity →

Every person may review the personal information about them held in a database, personally, through a written-authorised representative or a guardian;

israel-protection-of-privacy-law-5741-1981::13 · Section 13: right of access to personal information →

On request an organisation must, as soon as reasonably possible (the regulations and guidelines set 30 days, with notice of any longer time), provide the individual with their personal data in its possession or control and information about the ways the data h...

pdpa-singapore::21 · Access to personal data →

A person who appears to exercise control over a computer or computer system that the Commissioner believes may meet the CII criteria must, within the period in the notice, provide the information required (the system's function, who and what it serves, its des...

singapore-cybersecurity-act-2018::S8 · Provide information to help the Commissioner decide whether a system is CII →

A licensee, and anyone acting for it, must provide within the specified period any information MAS requires about its payment services business, including its operations and pricing;

singapore-payment-services-act-2019::S16 · Provide information MAS requires by notice →

Questions people ask about legal privilege

What is Legal Privilege?
The protection of communications between an attorney and client from disclosure, relevant to incident investigations and compliance matters.
Why is Legal Privilege important for compliance?
Legal Privilege is a key concept in Compliance and Regulatory. Understanding legal privilege helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Legal Privilege?
Legal Privilege appears in the requirement text of Jamaica Data Protection Act 2020, ISO 31022:2020, Israel Protection of Privacy Law (5741-1981), PDPA Singapore, Singapore Cybersecurity Act 2018. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Legal Privilege?
Explore our compliance framework pages to see how legal privilege applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Legal Privilege applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.