← University
Your Rights When a Regulator Investigates or Audits You
0 of 6

A letter from a provincial housing regulator arrived at the administrative office of a non-profit housing organization operating supportive housing units in a mid-sized Canadian city. The letter stated that the regulator had received complaints concerning the organization's management of resident funds, its compliance with fire safety requirements across 3 of its buildings, and its reporting practices under the applicable housing legislation. The letter requested the production of 4 years of financial records, resident intake files, board meeting minutes, and all correspondence between the organization and municipal fire officials. It further advised that an inspector would attend the organization's main administrative premises on a specified date to conduct an on-site inspection and interview staff members with knowledge of the matters under review.

The organization had been operating for 12 years, providing transitional and permanent supportive housing to adults experiencing homelessness, mental health challenges, or recovery from substance use. It held a provincial licence authorizing it to operate its 3 residential buildings, which together housed approximately 85 residents at any given time. The organization's executive director had been in the role for 6 years and had never previously faced a regulatory investigation of this nature. The board of directors, composed of 7 volunteer members with backgrounds in social services, finance, and community development, had received periodic compliance reports from staff but had not been directly involved in day-to-day operations.

Within 48 hours of receiving the letter, the executive director contacted legal counsel to discuss how to respond. In the days that followed, staff members exchanged emails and had telephone conversations with counsel about the complaints, the state of the organization's records, and concerns about certain past decisions regarding resident trust accounts and deferred maintenance on fire suppression systems in 1 of the buildings. The regulator's inspector attended as scheduled, requested access to areas of the premises, asked staff members questions about operational practices, and took photographs of certain conditions. Some staff members answered questions on the spot; others expressed uncertainty about whether they were required to respond.

The investigation remained open for 7 months. During that period, the regulator issued 2 additional document demands, conducted follow-up interviews with current and former employees, and corresponded with the organization's counsel about the scope of its statutory powers. By the end of that period, the organization faced the possibility that the matter could be referred for prosecution under provincial offences legislation or result in conditions being placed on its licence. The executive director and board now confronted decisions about how to engage with the regulator going forward, what to produce, what to protect, and how to position the organization as the investigation moved toward resolution or escalation.

Privilege and Confidentiality: Protecting Communications With Your Lawyer

When a regulatory body begins investigating your business or professional practice, the communications you have with your lawyer become extraordinarily valuable. These communications often contain your most candid assessments of what happened, your concerns about potential liability, and your strategies for responding to the regulator's inquiries. The legal system has long recognized that people need to be able to speak frankly with their lawyers without fear that those conversations will later be used against them. This protection, known as solicitor-client privilege, forms one of the most fundamental principles in Canadian law and serves as a cornerstone of the relationship between lawyers and their clients across every province and territory.

Solicitor-client privilege exists because the administration of justice depends on people being able to obtain legal advice. If clients feared that their lawyers might be compelled to reveal what was said in confidence, they would hesitate to disclose all relevant facts. Lawyers, in turn, could not provide accurate advice without complete information. The entire system of legal representation would break down. Canadian courts have consistently described this privilege as a principle of fundamental justice, deserving the highest protection. Unlike many other legal protections that can be overridden by competing interests, solicitor-client privilege can only be set aside in the most exceptional circumstances, and even then, courts approach any erosion of the privilege with extreme caution.

Understanding how this privilege operates becomes critically important when you find yourself facing a regulatory investigation or audit. Regulators in Canada possess significant powers to compel the production of documents and information. The Canada Revenue Agency can demand access to your financial records under the Income Tax Act, as of the date of authorship. Provincial securities commissions can require you to produce correspondence and internal memoranda. Professional regulatory bodies, whether governing accountants in Ontario, engineers in Alberta, or pharmacists in British Columbia, can conduct practice reviews and demand access to files. Environmental regulators under provincial legislation across the country can inspect premises and seize records. In this environment of broad regulatory power, privilege acts as one of the few shields protecting certain categories of your most sensitive communications.

The privilege belongs to you as the client, not to your lawyer. This distinction matters because it means you control whether the privilege is maintained or waived. Your lawyer cannot waive it without your consent, and equally important, your lawyer must assert it on your behalf when regulators seek privileged materials. However, your lawyer cannot invoke privilege to protect communications that do not properly fall within its scope, which means understanding what qualifies for protection is essential for anyone navigating a regulatory matter.

For a communication to be protected by solicitor-client privilege, three elements must be present. First, there must be a communication between you and your lawyer. Second, the communication must be made in the context of seeking or providing legal advice. Third, the communication must be intended to be confidential. Each of these elements requires careful consideration because failing to meet any one of them means the communication loses its protected status.

The requirement of a communication between lawyer and client seems straightforward, but complications arise in business settings where multiple people may be involved. When you own a small business and communicate with your lawyer, you are the client and your communications are privileged. When your business is incorporated, the corporation is the client, and communications between the lawyer and those authorized to seek legal advice on behalf of the corporation receive protection. This typically includes directors, officers, and employees whose duties require them to communicate with legal counsel. However, not every employee in an organization can claim that their communications with the company's lawyer are privileged. The person communicating must be doing so in a capacity connected to obtaining or implementing legal advice for the corporate client.

The second requirement, that the communication relate to seeking or providing legal advice, excludes many types of interactions you might have with your lawyer. If your lawyer happens to be a family friend and you discuss community events at a dinner party, those conversations are not privileged simply because one of you is a lawyer. Similarly, if you engage your lawyer to perform services that are not legal in nature, such as acting as a business advisor on purely commercial matters or serving as an escrow agent, communications about those non-legal services may not receive protection. The advice being sought must be legal advice, which includes not only opinions about what the law requires but also strategic advice about how to proceed in a legal matter, explanations of legal rights and obligations, and guidance about regulatory compliance.

Confidentiality, the third element, requires that you intend the communication to remain private. If you send an email to your lawyer but copy several business associates who have no need to be included in obtaining legal advice, you may have destroyed the confidentiality of that communication. If you discuss your conversation with your lawyer at a public meeting or in a document that you share widely, you cannot later claim the privilege protects that information. The privilege exists to protect confidential communications, and once confidentiality is lost, the protection disappears.

Beyond solicitor-client privilege, a related but distinct protection called litigation privilege may apply in some regulatory contexts. Litigation privilege protects communications and documents created for the dominant purpose of preparing for litigation. This includes communications with third parties, such as consultants or experts you hire to help prepare for a hearing, which would not be protected by solicitor-client privilege because they are not communications with your lawyer. Litigation privilege also extends to witness statements gathered by your legal team and memoranda analyzing potential arguments. The key distinction is that litigation privilege only arises when litigation or a quasi-judicial proceeding is reasonably anticipated and only protects materials created primarily for that litigation purpose.

The application of litigation privilege in regulatory matters can be nuanced because not every regulatory investigation leads to a proceeding that would qualify. An informal audit or routine compliance review might not trigger litigation privilege because no adversarial proceeding is genuinely anticipated. However, when a regulator issues a formal notice of investigation, indicates that enforcement action is being considered, or summons you to appear at a hearing, litigation privilege becomes relevant. In Quebec, where the civil law tradition under the Civil Code of Quebec shapes legal principles differently than in common law provinces, the concept of professional secrecy fulfills a similar function to solicitor-client privilege, though its contours are defined by that province's distinct legal framework. The protection afforded to lawyer-client communications in Quebec remains robust and has constitutional dimensions, but practitioners in that province must understand how the civil law context shapes the specific rules.

Regulatory bodies across Canada have adopted various approaches to privilege claims during investigations. Some regulators require you to produce a privilege log, which is a list describing each document you are withholding on privilege grounds without revealing its privileged content. This log typically includes the date of the document, its author and recipients, its general nature, and the specific basis for the privilege claim. Preparing such a log requires careful judgment because describing a document too specifically might reveal the very information the privilege protects, while describing it too vaguely might result in the regulator challenging your claim.

When disputes arise about whether specific documents are privileged, various mechanisms exist to resolve them. In some cases, the regulator may accept your privilege claims without challenge. In others, the matter may be referred to a court or tribunal for determination. Some regulatory statutes provide for the appointment of an independent lawyer or referee to review disputed documents and make a ruling. The federal Income Tax Act, for instance, contains specific provisions, as of the date of authorship, establishing a procedure for solicitor-client privilege claims when the Canada Revenue Agency seeks documents. Provincial legislation in British Columbia, Alberta, Ontario, and other common law provinces generally allows privilege claims to be adjudicated through standard judicial processes, while Quebec's procedure reflects its civil law structure.

The practical realities of maintaining privilege during a regulatory investigation require deliberate attention from the moment you learn that regulatory scrutiny may be coming. Consider the experience of a non-profit organization operating employment training programs in Winnipeg that learned a provincial ministry intended to audit its use of grant funding. The organization's executive director immediately called the organization's lawyer to discuss the situation. Their conversation was clearly privileged. The lawyer then sent a letter to the ministry acknowledging receipt of the audit notice and setting out the organization's position on certain preliminary matters. That letter, although prepared by the lawyer, was not a confidential communication with the client but rather correspondence with a third party, so it was not privileged. The executive director then prepared a detailed internal memorandum setting out everything she could recall about the grant expenditures in question, intending to provide this to the lawyer for the purpose of obtaining legal advice. This document, created by the client for the purpose of communicating with her lawyer to obtain legal advice, would be privileged.

As the audit proceeded, the organization's accountant prepared a reconciliation of expenditures that the ministry had requested. This document was created for the regulator, not for obtaining legal advice, so it was not privileged even though the lawyer reviewed it before it was submitted. The executive director and the lawyer then had a telephone conversation about how to respond to certain questions the auditors had raised. Notes the lawyer made during this call reflecting the legal advice given would be privileged. However, the executive director mentioned the lawyer's advice during a subsequent board meeting, and those comments were recorded in the board minutes. By disclosing the advice to the board, the executive director arguably waived privilege over that specific advice because it was no longer confidential.

The audit eventually led the ministry to allege that some funds had been misspent. The organization received a notice of proposed recovery demanding repayment of sixty-five thousand dollars. At this point, the organization formally retained litigation counsel, and all communications and documents created for the dominant purpose of responding to this administrative proceeding became protected by litigation privilege as well as solicitor-client privilege where applicable. The lawyer engaged a forensic accountant to analyze the ministry's calculations. Communications between the lawyer and the forensic accountant, and the accountant's working papers prepared for the litigation, were protected by litigation privilege even though the accountant was not a lawyer.

This scenario reveals several practical lessons about maintaining privilege during regulatory matters. Communications must be structured deliberately from the outset. Documents created primarily for business purposes, even if they are later useful in litigation, are not protected. Careless disclosure of legal advice, even within your own organization, can destroy privilege. And the distinction between routine regulatory compliance and adversarial enforcement matters affects what protections are available.

When privilege is inadvertently waived, the consequences can be severe. Once the regulator has access to your privileged communications, they may learn your legal strategy, understand your assessment of weaknesses in your position, and discover admissions you made to your lawyer that you would never have made to the regulator directly. Courts have occasionally found that inadvertent disclosure does not always constitute waiver, particularly where the disclosure was truly accidental, you took immediate steps to retrieve the documents, and no unfairness would result from restoring the privilege. However, these principles are applied cautiously and you cannot rely on them to rescue a situation that careful practice would have avoided.

Several concrete steps can help you protect privilege during a regulatory investigation. When you first learn of regulatory interest in your business or practice, consult a lawyer promptly and do so in a manner that creates clearly privileged communications. Use private channels, whether telephone, secure email, or in-person meetings, rather than discussing the matter in settings where others might overhear. Label documents created for the purpose of obtaining legal advice with markings such as privileged and confidential, though understand that these labels alone do not create privilege if the underlying elements are not present.

Segregate documents you create for legal purposes from routine business records. If you prepare a memorandum analyzing what went wrong in a situation under investigation, consider whether you are preparing it for business improvement purposes, in which case it is not privileged, or specifically to communicate with your lawyer for legal advice, in which case it may be privileged. The purpose at the time of creation matters, not what you later decide to use the document for.

When communicating with your lawyer by email, avoid copying individuals who do not need to be included in obtaining legal advice. Each additional recipient is a potential avenue for waiver. If you must share legal advice with your board of directors or business partners, do so in a controlled manner and document the need for them to maintain confidentiality. In Alberta, British Columbia, Saskatchewan, Ontario, and other common law provinces, privilege can extend to communications within a corporation when those communications involve the seeking or implementation of legal advice, but the circle of people included should be limited to those who genuinely need the information.

Ask your lawyer to explain what categories of documents and communications are protected in your specific situation. The answer depends on the nature of the regulatory matter, the stage of proceedings, and the structure of your organization. A sole proprietor operating a consulting practice in Halifax faces different considerations than a professional corporation with multiple shareholders in Calgary or a charitable foundation with a large board in Toronto.

If a regulator demands production of documents you believe are privileged, respond promptly and assert the privilege clearly. Do not simply refuse to produce documents without explanation, as this may escalate the dispute unnecessarily and create adverse inferences. Work with your lawyer to prepare a privilege log if required and be prepared to have disputed claims adjudicated through whatever process the regulatory statute provides.

Finally, understand that privilege is not absolute and cannot be used to facilitate wrongdoing. The crime-fraud exception means that communications made for the purpose of obtaining advice on how to commit a crime or fraud, or to help conceal ongoing misconduct, are not privileged. This exception is interpreted narrowly and requires actual criminal or fraudulent purpose, not merely conduct that turns out to be non-compliant with regulations. But if you consult a lawyer with the intention of obtaining assistance in covering up a genuine fraud, you should not expect those communications to be protected.

The protection of your communications with your lawyer during a regulatory investigation is not merely a technical legal matter but a practical necessity for mounting an effective response. Without the confidence that you can speak candidly with your legal advisor, you cannot receive the advice you need. By understanding what privilege protects, how it can be lost, and how to maintain it through careful practice, you position yourself to navigate regulatory scrutiny with one of your most important legal protections intact. This knowledge serves not only your interests in any individual investigation but supports the broader principle that Canadians must be able to obtain legal advice without fear that their words will be turned against them by the very authorities whose actions prompted them to seek counsel in the first place.

Continue with University access

This lesson is part of a $149 course. Purchase the course or sign in with an active membership to keep reading.

See purchase options