privacy email
Does a boilerplate &quot;This email is private&quot; message have any legal force?
<p>I get quite a few email messages with text like:</p>

<blockquote>
  <p>IMPORTANT WARNING: This email (and any attachments) is only intended for the use of the person or entity to which it is addressed, and may contain information that is privileged and confidential. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Unauthorized redisclosure or failure to maintain confidentiality may subject you to federal and state penalties. If you are not the recipient, please immediately notify us by return email, and delete this message from your computer.</p>
</blockquote>

<p>(This example is from <a href="https://sourceforge.net/p/pymol/mailman/message/11672412/">here</a>.)</p>

<p>In fact, some email servers are configured to add such a warning automatically.</p>

<p>Do these warnings have any legal force? If so, what are their consequences?</p>

<p>Bonus question: I see reuse of a lot of the exact wording of the above example. (Google "only intended for the use of the person" and observe the many results.) What is the original source of this wording? Does it appear in a statute or some kind of official recommendation, or did one organization start using it and others followed the leader?</p>

<blockquote>
  <p>Do these warnings have any legal force?</p>
</blockquote>

<p>In the United States, no. They do not have <em>any</em> legal force. Some have tried to argue that the <a href="https://en.wikipedia.org/wiki/Electronic_Communications_Privacy_Act">Electronic Communications Privacy Act (ECPA)</a> applies; however, this law only applies to intercepting e-mails—not accidentally sending to the wrong party. There is no legal protection for "reply all" or "accidental send" human errors.</p>

<blockquote>
  <p>If so, what are their consequences?</p>
</blockquote>

<p>If you're asking why some people put them in there, even if it's not legally enforceable, one reason is lawyers trying to prevent an accidental waiver of attorney-client privilege.</p>

<p>Generally, a waiver of the attorney-client privileged must be intentional and knowing. Therefore, some argue that a disclaimer could help one argue that privilege was not waived. Although, I could not find a published case where an e-mail disclaimer actually helped this argument. Additionally, placing the e-mail disclaimer on the bottom of an e-mail (which is customary) is less effective than placing one at the top.</p>

<p>As a note, some legal commentators and ethics committee's suggest that lawyers <em>should</em> use encryption "to ensure the confidentiality of such communications remain so when the circumstance calls for it, particularly if the information at issue is highly sensitive and the use of encryption is not onerous." <em>See</em> <strong><a href="http://www.legalproductivity.com/technology/lawyers-email-encryption-1/">Legal Productivity's Post that quotes a California Ethics Opinion</a></strong></p>

<p>For more info, read this article here from the American Bar Association's Litigation Section regarding the efficacy of E-mail disclaimers: <a href="http://apps.americanbar.org/litigation/committees/technology/articles/winter2013-0213-do-email-disclaimers-really-work.html"><strong>Do Email Disclaimers Really Work?</strong></a></p>

<p>In the US, this is generally legalistic puffery. There are prohibited acts such as breaking into a person's Gmail account or hacking into their computer, whereby one might see such an email, but such "warnings" have no significance (it's a crime even without the warning) and surely have no deterrent effect (OMG, hacking is a crime, I had no idea!!). The main legal tool for punishing such acts is Title 18 ch. 119, 121.</p>

<p>There are regulations requiring certain information to not be made public, for example a university is required to keep student records confidential. It is allowed to e.g. email information like "Billy Smith failed Chemistry 101" from instructor to advisor, but not from instructor to Billy's friends, so the advisor that gets the email is not free to do as s/he wants. The underlying law, FERPA, actually restricts the institution and not the individual, where the institution is thus required to have in place policies to guarantee privacy of the such information. One institution that I'm familiar with requires "confidential" messages to be sent on-campus, from campus equipment, sending to and from only official university accounts, and the messages must be encrypted. (Guess how often that requirement is obeyed.) The same goes with HIPAA. Another institution might require adding such a warning, but they are legally meaningless (not required by law). </p>

<p>In common law jurisdictions there is a tort of breach of confidence. </p>

<p>One of the requirements for proving breach of confidence is that the person who disclosed the confidential information must (or should have) known it was confidential: this notice does that. So, if, having received an email with that notice, a person discloses it, a suit for breach of confidence becomes much easier.</p>

<p>In Germany, it most likely does not have any legal effect, and may even cause additional problems.</p>
<hr />
<p>To quote a lawyer's blog:</p>
<blockquote>
<p>Brauche ich einen Disclaimer unter meiner E-Mail? Wohl kaum…</p>
<p>[...]</p>
<p>Dieser Disclaimer ist nicht notwendig, sein Nutzen mehr als
fragwürdig. Möglicherweise kann er sogar zu Abmahnungen führen.</p>
<p>[...]</p>
<p>Zur Wirksamkeit und den Rechtsfolgen bei der Verwendung eines solchen
Haftungsausschlusses gibt es bis heute noch keine gerichtliche
Entscheidung. Dieser Zusatz wird von den Versendern der Mails gern als
Haftungsvereinbarung gesehen. Eine solche Vereinbarung ist jedoch ein
Vertrag und kann nach den Regeln des Vertragsrechts nicht einseitig
entstehen. Wer demnach nicht entsprechend auf die E-Mail reagiert,
kann aus rechtlicher Sicht keine Verbindlichkeit eingegangen sein.</p>
</blockquote>
<p>Source: <a href="https://www.wbs-law.de/internetrecht/pflichtangaben-und-disclaimer-in-e-mails-ra-christian-solmecke-erklaert-welche-fehler-abgemahnt-werden-44564/" rel="nofollow noreferrer">Pflichtangaben und Disclaimer in E-Mails: RA Christian Solmecke erklärt, welche Fehler abgemahnt werden!</a></p>
<p>Translation (no guarantees):</p>
<blockquote>
<p>Do I need a disclaimer under my email? Not likely...</p>
<p>[...]</p>
<p>This disclaimer is not necessary, and of questionable use. I may even
be a reason for a cease and desist letter.</p>
<p>[...]</p>
<p>So far there is no court judgement about the validity and legal
consequences of such a disclaimer. Senders of mails would like to
consider this addition as an agreement to limit liability. However,
such an agreement would be a type of contract, and a contract cannot
be entered into unilaterally. Thus a recipient who does not respond to
the email cannot become liable from a legal point of view.</p>
</blockquote>
<p>So the reason a disclaimer is pointless is the same as in most other jurisdictions: You cannot impose duties or conditions on someone by just saying so - the other party needs to actually agree to them.</p>
<p>Further reading (in German):</p>
<p><a href="https://angstklauseln.wordpress.com/" rel="nofollow noreferrer">https://angstklauseln.wordpress.com/</a> - articles by a German lawyer about legal aspects of disclaimers.</p>

<p>In my opinion, people are answering the wrong question. The purpose of these disclaimers is to mitigate any sanction on the doctor, if there is an inadvertent disclosure of confidential info. e.g., by HHS or a licensing board. The doctor can show an attempt to have recipients notify them of any breach. </p>
