A Practice Note discussing the steps organizations should take following a data breach to shield documents and communications from disclosure under the attorney-client privilege or the work product doctrine. The Note discusses engaging counsel to lead data breach investigations, training employees and management, tracking litigation, retaining third parties, implementing a dual-track investigation, and using joint defense agreements.