The Control Group Test: An Ultimate Guide to Corporate Attorney-Client Privilege

LEGAL DISCLAIMER: This article provides general, informational content for educational purposes only. It is not a substitute for professional legal advice from a qualified attorney. Always consult with a lawyer for guidance on your specific legal situation.

Imagine a corporation is a giant ship sailing through treacherous waters. The captain, the first mate, and the navigator make up the “bridge crew.” They are the only ones who can give orders that change the ship's course. When the ship's lawyer comes aboard to discuss a potential iceberg ahead (a lawsuit), the conversations with this bridge crew are top-secret and protected from outsiders. This is the essence of the Control Group Test. It's a legal rule used in some states to decide which conversations between a company's employees and its lawyers are covered by attorney-client_privilege. Under this test, the privilege is narrow: it only protects communications with the high-level employees who form the company's “control group”—the decision-makers who have the authority to seek legal advice and, more importantly, act on it. If you're a regular crew member who just saw the iceberg, your conversation with the lawyer might not be protected under this strict test, even if you have critical information. Understanding this test is vital for any business owner or employee, as it dictates whose voice is shielded by confidentiality and whose can be exposed in a legal battle.

• Key Takeaways At-a-Glance:
• Narrow Protection: The Control Group Test provides a very narrow scope of attorney-client_privilege within a corporation, protecting only communications between lawyers and top-level employees who can actually act on the legal advice.
• Employee Risk: For most employees outside this small circle, the Control Group Test means their conversations with company lawyers may not be confidential and could be discoverable by opposing parties in a lawsuit.
• State-Specific Rule: The Control Group Test is a state-level rule and has been rejected at the federal level; businesses operating in multiple states must know which test applies where to avoid accidentally waiving privilege.

The concept of attorney-client_privilege is one of the oldest and most revered principles in Anglo-American law, dating back centuries to its English common_law roots. It was designed to encourage clients—originally, just individuals—to be completely candid with their lawyers without fear of their secrets being exposed. However, the rise of the modern corporation in the 19th and 20th centuries created a legal puzzle: who is the “client” when the client is a massive, faceless entity like a company? Is it every single employee, from the CEO to the janitor? Courts struggled with this question. Early on, they often treated corporations like individuals, but this became unworkable as companies grew into complex hierarchies. The fear was that if the privilege was too broad, corporations could create vast zones of secrecy by simply routing all sensitive information through their legal department, effectively hiding misconduct from regulators and litigants. In response to this concern, courts began developing tests to limit the scope of corporate privilege. The Control Group Test emerged as a popular solution in the mid-20th century. It offered a clear, predictable, and restrictive standard. The landmark case often cited for formalizing this test is *City of Philadelphia v. Westinghouse Electric Corp.* (1962). The court in that case reasoned that if an employee was low-level and could not realistically cause the corporation to act on a lawyer's advice, they were merely a witness, not a representative of the “client.” The “client,” the court argued, was only the small circle of senior management who steered the corporate ship. This test became the dominant standard in many jurisdictions for decades due to its simplicity. It was easy for a judge to look at an org chart and decide who was “in” and who was “out.” However, this simplicity came at a cost. Critics argued that it prevented corporate lawyers from gathering full and frank information from the front-line employees who often knew the most about a potential legal problem. This tension set the stage for a major showdown at the supreme_court_of_the_united_states.

Unlike many legal doctrines defined by a single act of Congress, the Control Group Test is a product of “common law,” or judge-made law. Its rules are found in the written decisions of courts, not in a legislative statute. The framework for all privilege issues in federal court is federal_rule_of_evidence_501. This rule is unique because instead of laying out a specific code for privilege, it states that in most federal cases, privilege is “governed by the principles of the common law as they may be interpreted by the courts of the United States in the light of reason and experience.” This language gave federal courts, and ultimately the Supreme Court, the flexibility to evaluate and reject the Control Group Test in favor of a more functional approach. However, Rule 501 also contains a critical clause: when a case is in federal court based on diversity_jurisdiction (meaning the parties are from different states), the court must apply the privilege law of the state whose substantive law governs the case. This means that even today, a lawyer in federal court in Illinois might have to argue a case using the Illinois state Control Group Test, while a lawyer in a federal court in California would use that state's broader test. This makes understanding the jurisdictional differences absolutely critical.

The United States is a patchwork of legal standards when it comes to corporate attorney-client privilege. The Supreme Court's decision in *Upjohn* (discussed in Part 4) established a new, broader standard for federal courts, but it did not force states to follow suit. Many states have chosen to stick with the older, more restrictive Control Group Test. This creates a complex compliance challenge for any company operating across state lines. Here is a comparison of how the privilege is handled in the federal system and four representative states:

As the table shows, a business's ability to conduct a confidential internal investigation can vary dramatically depending on its location. A conversation that is fully protected in a Texas office could be discoverable in a lawsuit if it took place in the Illinois office.

To truly understand the Control Group Test, you must break it down into its constituent parts. It's a deceptively simple name for a rule with very specific requirements.

This is the heart of the test. The “control group” is not just a casual term for “management.” It has a precise legal definition that courts in states like Illinois apply strictly. To be part of the control group, an employee must typically meet two criteria:

• Top-Level Authority: The employee must be part of the corporation's top echelon. This almost always includes the Board of Directors and C-suite executives (CEO, CFO, COO, etc.).
• Power to Act: This is the crucial part. The employee must not only be in a position to seek legal advice but must also have the authority to cause the corporation to act on that advice. A mid-level manager might be able to ask the company lawyer a question, but if they can't single-handedly launch a new compliance program or settle a lawsuit based on the answer, they are likely not in the control group.

Hypothetical Example: MegaCorp is sued for a faulty product.

• CEO's conversation with the lawyer: The CEO asks the lawyer whether to recall the product. The CEO has the ultimate authority to order a recall. This conversation is privileged under the control group test.
• Lead Engineer's conversation with the lawyer: The Lead Engineer, who designed the product and knows exactly why it failed, explains the technical details to the lawyer. The engineer can't order a recall. This conversation is not privileged under the control group test. Opposing counsel could demand to know exactly what the engineer told the company's lawyer.

Just like with any attorney-client_privilege claim, the communication must be for the primary purpose of seeking or rendering legal advice. If a CEO is talking to the company's General Counsel about the upcoming holiday party or asking for business advice on a marketing strategy, that conversation is not privileged. The communication must relate to a legal concern—assessing litigation risk, ensuring regulatory compliance, or responding to a government inquiry.

A common point of confusion for employees is assuming the company lawyer is *their* lawyer. This is incorrect. The lawyer's client is the corporate entity itself. The members of the control group are merely the authorized agents who can speak on behalf of that entity. This is why, during internal investigations, company lawyers will often give an `upjohn_warning` (or *Miranda* warning for corporations), explicitly telling an employee: “I represent the company, not you personally. This conversation is privileged, but the privilege belongs to the company, and the company can choose to waive it and disclose this conversation.”

In any legal dispute involving corporate privilege, several key parties are involved, each with different goals and responsibilities.

• The Corporation: The legal entity that holds the privilege. Its goal is to protect its confidential legal communications to defend itself effectively in litigation and conduct internal business without fear of exposure.
• The Control Group Member: An executive or director. Their goal is to get candid legal advice to make informed decisions for the company. They are the human embodiment of the “client” under this test.
• The Non-Control Group Employee: The vast majority of the workforce. They are often the key fact witnesses who know what actually happened on the ground. They have a duty to cooperate with the company's lawyers but have no personal claim to the privilege.
• Corporate Counsel (In-House and Outside): The lawyers advising the corporation. Their goal is to gather all necessary facts to provide sound legal advice. Under the Control Group Test, their job is much harder because they can't guarantee confidentiality to the non-control group employees they need to interview.
• Opposing Counsel: The lawyer for the other side in a lawsuit. Their goal is to get as much information as possible to prove their case. They will aggressively challenge claims of privilege and seek to depose non-control group employees to find out what they told the company's lawyers.
• The Judge: The ultimate arbiter. Their job is to apply the correct legal test for their jurisdiction to determine whether a specific communication is privileged or must be turned over to the other side.

This section is designed for business owners, managers, and in-house counsel operating in a state that uses the Control Group Test. The narrowness of this test requires a proactive and disciplined approach to communication.

Don't wait for a lawsuit. As a matter of corporate governance, your company should clearly identify which positions are considered part of its control group. This should be documented and reviewed periodically. Typically, this list will include the Board of Directors, CEO, President, CFO, COO, and General Counsel. Consult with an attorney to help define this group according to your state's specific case law.

Train your entire workforce, especially managers, on how to communicate about potentially sensitive legal issues.

• Limit Email Chains: The fastest way to break privilege is to forward a lawyer's advice to a wide group of non-control group employees. Create a policy that legal advice should not be forwarded.
• Label Communications: When a control group member sends an email to counsel seeking legal advice, it should be clearly labeled: “CONFIDENTIAL: ATTORNEY-CLIENT PRIVILEGED COMMUNICATION.” While this label isn't magic, it establishes the intent of the communication.
• Channel Information Upward: Instruct mid-level managers that if they discover a potential legal issue, they should report the facts up the chain to a designated member of the control group. That control group member should then be the one to engage with legal counsel.

When the company needs to investigate potential wrongdoing, the Control Group Test creates significant risk.

• Lawyer-Led, Control Group Directed: Any internal investigation should be formally initiated at the written direction of the control group for the express purpose of obtaining legal advice.
• Use “Upjohn Warnings”: Before interviewing any non-control group employee, the investigating lawyer must provide an `upjohn_warning`. This clarifies that the lawyer represents the company and that the privilege belongs to, and can be waived by, the company.
• Separate Factual vs. Legal: Instruct lawyers to keep their factual findings from employee interviews separate from their mental impressions and legal advice. Factual summaries might be discoverable, but the lawyer's analysis (protected by the `work-product_doctrine`) is more likely to be shielded.

For any potential legal claim, you must be aware of the `statute_of_limitations`, which is the deadline for filing a lawsuit. Knowing this deadline helps you prioritize which issues require immediate legal consultation and which can be handled through normal business channels, minimizing the risk of creating non-privileged communications.

• Corporate Communication Policy: This is a formal document distributed to all employees. It should clearly explain the company's policy regarding confidential information and communications with legal counsel. It should state that only designated individuals (the control group) are authorized to seek legal advice on behalf of the company and provide clear channels for employees to report concerns.
• Document Retention and Litigation Hold Policy: This policy dictates how company documents are stored and when they must be preserved. When litigation is anticipated, the legal department or a control group member should issue a `litigation_hold_notice`. This notice instructs employees to preserve all relevant documents and suspends normal document destruction routines. This is critical for defending the company and is a separate but related issue to privilege.

The evolution of corporate privilege in the U.S. is best understood through a handful of pivotal court cases.

• The Backstory: In the early 1960s, a massive price-fixing conspiracy among electrical equipment manufacturers came to light. Numerous lawsuits were filed. During the legal proceedings, the plaintiffs wanted to know what the defendants' employees had told the company lawyers.
• The Legal Question: Does a corporation's attorney-client privilege extend to every employee, or is it limited?
• The Court's Holding: The U.S. District Court for the Eastern District of Pennsylvania articulated for the first time a clear Control Group Test. Judge Kirkpatrick famously wrote, “If the employee who communicates with the corporate counsel is in a position to control or even to take a substantial part in a decision about any action which the corporation may take upon the advice of the attorney, then, in effect, he is the corporation… and the privilege would apply.” For all other employees, he said, they were simply witnesses.
• Impact on You Today: This case created the test. For decades, it was the dominant standard and is the direct intellectual ancestor of the rule still used in states like Illinois. It established the idea that rank and authority, not knowledge, were the keys to privilege.

• The Backstory: The Upjohn Company, a pharmaceutical manufacturer, discovered that one of its foreign subsidiaries had made questionable payments to foreign government officials to secure business. Upjohn's General Counsel conducted an internal investigation, sending a questionnaire to and interviewing dozens of employees, many of whom were low-level managers abroad. The internal_revenue_service (IRS) later demanded access to all of those communications. Upjohn refused, citing attorney-client privilege.
• The Legal Question: Does the narrow Control Group Test apply in federal court, or should there be a broader test to protect these internal investigation communications?
• The Court's Holding: The supreme_court_of_the_united_states unanimously and emphatically rejected the Control Group Test for federal cases. Justice Rehnquist, writing for the Court, argued the test was “frustrating the very purpose of the privilege” because it discouraged lawyers from uncovering the facts from the employees who knew them best. The Court adopted a more flexible, case-by-case approach that became known as the `subject_matter_test`. This test protects communications if they were made by employees at the direction of their superiors, regarding matters within the scope of their employment, and for the purpose of the corporation securing legal advice.
• Impact on You Today: *Upjohn* is the law of the land in all federal courts. It provides much broader protection for corporate internal investigations and is the reason most states now use a similar, more functional test. It allows company lawyers to have confidential conversations with the factory floor worker or the field salesperson, enabling the company to effectively identify and address legal problems.

• The Backstory: Shortly after the U.S. Supreme Court's *Upjohn* decision, the Illinois Supreme Court had an opportunity to decide whether Illinois would follow the federal lead or stick with the traditional test. The case involved a dispute over a giant excavating machine.
• The Legal Question: Should Illinois adopt the broader *Upjohn* test or retain the Control Group Test?
• The Court's Holding: The Illinois Supreme Court explicitly rejected *Upjohn* and reaffirmed its commitment to the Control Group Test. The court praised the test's predictability and expressed concern that the *Upjohn* test was too vague and would create a broad “zone of silence.” It slightly modified the test to include not just final decision-makers, but also employees whose advice to top management is a key part of the decision-making process.
• Impact on You Today: This case is the reason Illinois remains one of the most prominent “control group” states. It serves as a powerful reminder that state courts are not bound by the U.S. Supreme Court on matters of state law, leading to the jurisdictional patchwork we have today.

The primary debate today continues to be the tug-of-war between the Control Group Test and the Subject Matter Test.

• Arguments for the Control Group Test:
  • Predictability: It's a bright-line rule. It is relatively easy to determine who is in the control group. This predictability helps both corporations and their opponents assess which communications are likely privileged.
  • Prevents Secrecy: Proponents argue it prevents corporations from hiding wrongdoing by funneling all information through lawyers. It keeps the scope of privilege narrow, promoting transparency.
• Arguments for the Subject Matter Test (*Upjohn*):
  • Promotes Compliance: Its supporters argue that by protecting communications with all necessary employees, it encourages companies to conduct thorough internal investigations and proactively address legal problems, which is a public good.
  • Reflects Corporate Reality: It recognizes that in a modern, complex corporation, the people with critical information are often not the ones in the boardroom. The engineer or the sales agent on the ground knows what's really happening.

This debate plays out in state legislatures and courts, with a slow but steady trend toward the broader *Upjohn* standard. However, the holdout states show no signs of changing soon.

The future of corporate privilege is being shaped by forces outside the courtroom.

• Technology and “Ephemeral” Communications: In the 1960s, communication was formal (letters, memos). Today, it happens on Slack, Microsoft Teams, and text messages. Are these informal, widespread communications considered “at the direction of a superior for legal advice”? The ease of forwarding and creating large group chats makes it incredibly difficult to contain legally sensitive information within a “control group” or any designated group, increasing the risk of accidental `waiver_of_privilege`.
• Globalization: For multinational corporations, the problem is magnified. A company might be dealing with the U.S. federal `subject_matter_test`, the Illinois Control Group Test, and European Union rules where there is often no privilege for in-house counsel at all. This creates a global compliance nightmare and requires sophisticated legal strategies.
• The Gig Economy and Third-Party Consultants: Is a critical freelance software developer or an outside marketing consultant considered an “employee” for the purposes of privilege? Courts are increasingly having to grapple with whether communications with non-traditional workers can be protected, a question that neither the Control Group Test nor the *Upjohn* test was originally designed to answer.

As business continues to change, courts will be forced to adapt these decades-old tests to a reality their creators could have never imagined.

• attorney-client_privilege: A legal principle that protects confidential communications between a lawyer and their client from being disclosed.
• common_law: The body of law derived from judicial decisions of courts rather than from statutes.
• corporate_privilege: The application of the attorney-client privilege to a corporate entity.
• diversity_jurisdiction: A form of subject-matter jurisdiction in federal court that allows a party from one state to sue a party from another state.
• federal_rule_of_evidence_501: The federal rule governing privileges in U.S. federal court proceedings.
• in-house_counsel: A lawyer who works directly for a corporation as a salaried employee.
• litigation: The process of taking legal action; a lawsuit.
• litigation_hold_notice: A formal instruction within a company to preserve all documents and data relevant to a legal case.
• privilege: A legal right to keep certain information confidential and resist compelled disclosure in a legal proceeding.
• subject_matter_test: The broader test for corporate privilege used in federal courts, focusing on the content and purpose of the communication rather than the employee's rank.
• supreme_court_of_the_united_states: The highest federal court in the United States, which has the final say on the interpretation of federal law.
• upjohn_co_v_united_states: The landmark 1981 Supreme Court case that rejected the control group test for federal law.
• upjohn_warning: A disclosure made by a company lawyer to an employee, clarifying that the lawyer represents the company and not the employee personally.
• waiver_of_privilege: The intentional or accidental surrender of the right to assert the attorney-client privilege.
• work-product_doctrine: A legal doctrine that protects materials prepared by a lawyer in anticipation of litigation from being discovered by opposing counsel.

• attorney-client_privilege
• subject_matter_test
• work-product_doctrine
• internal_investigation
• corporate_law
• evidence_(law)
• civil_procedure