How does AML/CTF apply to legal professional privilege?
Legal professional privilege (LPP) and AML/CTF explained
Anti-money laundering and counter-terrorism financing obligations can require a reporting entity to give sensitive information to the Australian Transaction Reports and Analysis Centre (AUSTRAC).
Some of that information may be protected by legal professional privilege. If it is, the AML/CTF regime does not require it to be disclosed. But privilege must be assessed carefully, claimed through the correct process and distinguished from a lawyer’s broader duty of confidentiality.
This explainer covers when legal professional privilege applies, how it affects suspicious matter reporting, when an LPP form is required and how to reduce the risk of accidental waiver or tipping off.
What is legal professional privilege?
Legal professional privilege, or LPP, protects certain confidential communications from compulsory disclosure.
It generally applies where a confidential communication was made for the dominant purpose of:
a lawyer giving legal advice to a client;
a client obtaining legal advice; or
use in existing or reasonably anticipated legal proceedings.
Privilege belongs to the client, not the lawyer. A lawyer cannot waive it merely because the lawyer created, received or holds the relevant document.
The AML/CTF regime does not create a new form of privilege or expand the existing doctrine. Whether privilege applies remains a question governed by the established law of LPP.
Is every confidential client communication privileged?
No. Legal professional privilege is narrower than a lawyer’s duty of confidentiality.
A lawyer may be required to keep a wide range of client information confidential. That does not mean every document, transaction record or conversation is privileged.
For example, identification documents collected during customer due diligence will not ordinarily become privileged merely because a lawyer holds them. Nor will a pre-existing document become privileged simply because it is placed on a solicitor’s file.
The question is why the communication or document was created. If its dominant purpose was not obtaining or giving legal advice, or use in litigation, privilege may not apply.
Privilege also does not protect communications made to further an illegal or improper purpose. A person cannot shield a transaction from scrutiny merely by discussing it with a lawyer.
Why does LPP matter under the AML/CTF regime?
Reporting entities must submit specified reports to AUSTRAC and respond to some requests and notices for information.
These requirements can include:
suspicious matter reports;
threshold transaction reports;
reports concerning transfers of value;
compliance reports;
information requested in connection with registration; and
information or documents sought through AUSTRAC’s compliance and enforcement powers.
The AML/CTF Act preserves the right to refuse to give information or produce a document where LPP applies. If only part of the requested or reportable material is privileged, the reporting entity must generally provide the non-privileged material and claim privilege over the remainder.
Privilege does not remove the entity’s wider AML/CTF obligations. Customer due diligence, monitoring, risk assessment and record keeping must continue.
Does LPP apply only to law firms?
No. Any person may hold information or documents subject to legal professional privilege.
A bank, insurer, accountant or other reporting entity may hold privileged advice obtained from an internal or external lawyer. It may also receive information that records or reveals legal advice given to its customer.
Non-lawyer reporting entities should avoid making quick privilege decisions without legal input. The fact that a document mentions a lawyer is not enough. Equally, disclosing it before checking may cause privilege to be lost.
Law firms face an added difficulty because many practices became reporting entities from 1 July 2026 when providing specified designated services. They must meet their AML/CTF obligations while preserving their clients’ privilege.
How does LPP affect a suspicious matter report?
The result depends on whether all or only part of the information underlying the suspicion is privileged.
If the reporting entity reasonably believes that all the information comprising the grounds for its suspicion is protected by LPP, it does not need to submit either a suspicious matter report or an LPP form.
If only some of the reportable information is privileged, the entity must submit the suspicious matter report without the privileged information and provide an LPP form covering the material withheld.
This requires a document-by-document and communication-by-communication assessment. It is unsafe to classify an entire matter file as privileged without examining its contents and the purpose for which each communication was made.
The entity should record what it considered, the conclusion reached and who made the decision. That record should not reproduce the privileged advice unnecessarily.
What is an LPP form?
An LPP form tells AUSTRAC that information or a document has been withheld because the person reasonably believes it is protected by legal professional privilege.
The form requires enough detail to explain the basis of the claim without requiring disclosure of the privileged content itself. Describing the material for this purpose does not, by itself, waive privilege.
AUSTRAC has issued separate forms for:
claims connected with reporting obligations, including suspicious matter and threshold transaction reports; and
claims concerning information or documents sought under an AUSTRAC notice.
For a reporting obligation, the form must accompany the relevant report. For an AUSTRAC notice, it must be lodged within the period stated in the notice. Failure to provide the required form can attract civil penalties.
What timing applies to suspicious matter reports?
The usual deadline for a suspicious matter report is three business days after the suspicion is formed, or 24 hours if the suspicion concerns terrorism financing.
Where privilege belongs to someone other than the reporting entity and only part of the information is privileged, the non-terrorism-financing reporting period may extend to five business days. The extra time allows the entity to assess privilege and prepare the LPP form.
That period can pass quickly. A reporting entity needs an escalation process that brings compliance and legal staff together as soon as potentially privileged information is identified.
Can privilege be waived accidentally?
Yes. Privilege may be waived expressly or through conduct inconsistent with keeping the communication confidential.
Providing privileged advice to AUSTRAC without asserting LPP may amount to waiver. The AML/CTF Act preserves the right to withhold privileged information, so disclosure may be treated as voluntary rather than compelled.
Common risk points include:
attaching legal advice to an internal escalation email distributed too widely;
copying privileged conclusions into a suspicious matter report;
giving privileged documents to AUSTRAC without completing the required form;
sharing advice with a third party without considering privilege; and
describing legal advice in more detail than needed to support an LPP claim.
Access to privileged information should be controlled. Reports and privilege claims should be reviewed separately before submission.
Can a law firm ask its client to waive privilege?
Only the client can waive privilege, but asking for consent may create another problem.
The tipping-off offence prohibits disclosures that would or could reasonably be expected to prejudice an investigation. Telling a client that the firm has formed a suspicion, is considering a suspicious matter report or needs consent to disclose information may reveal protected information about the reporting process.
A law firm should therefore assess tipping-off risk before seeking instructions about waiver. In some cases, it may need to assert privilege without first obtaining express instructions from the client.
LPP and tipping off should not be handled as separate workflows. The privilege assessment, reporting decision and client communication strategy need to be considered together.
What should you do?
Separate privilege from confidentiality. Train staff to identify potentially privileged communications without treating the entire client file as privileged.
Create an urgent escalation path. Potential LPP issues linked to suspicious matters should reach the right legal and compliance decision-makers immediately.
Use a document-level assessment. Record the purpose, confidentiality and privilege status of each relevant communication or category of documents.
Build the LPP forms into your process. Staff should know which form applies, who completes it and when it must be submitted.
Control access to privileged material. Limit distribution and avoid copying legal advice into compliance reports, case notes or reporting systems unnecessarily.
Address tipping off. Review proposed client communications before seeking a waiver or discussing a suspicious matter.
Keep a decision record. Document the basis of the privilege claim, the non-privileged information disclosed and the reasons for the approach taken.
Test the process. Use sample scenarios to check whether staff can identify privilege and meet a short reporting deadline without disclosing protected information.
The bottom line
The AML/CTF regime preserves legal professional privilege, but it does not make privilege automatic.
Reporting entities must identify the particular information protected, disclose what they lawfully can and use the correct form for what they withhold. The hardest cases will often involve partial privilege, short reporting deadlines and a risk that seeking client instructions could amount to tipping off.
Those decisions need a process before the first difficult matter arrives.
Need help with LPP and AML/CTF?
Dwyer Harris assists reporting entities and legal practices to manage legal professional privilege within their AML/CTF frameworks.
We can help you:
draft or review policies for identifying and claiming LPP;
develop suspicious matter reporting and escalation procedures;
distinguish privileged information from confidential but non-privileged material;
design processes for completing and reviewing LPP forms;
assess privilege and tipping-off risks in difficult cases;
train legal, compliance and operational staff;
test the process through file reviews and sample scenarios; and
update your AML/CTF program following regulatory guidance or an internal review.
Our focus is on a process that protects privilege, meets reporting deadlines and gives staff clear instructions when the answer is not obvious.
Get in touch with Dwyer Harris if you need help integrating legal professional privilege into your AML/CTF program.
This article provides general information only and is not legal advice.