Lessons Learned for Maintaining Attorney-Client Privileged Data Breach Investigation (and other Consultant) Reports

Recently a federal court compelled production of a breach report performed by an incident response consultant, calling into question the scope of protection by attorney-client privilege and/or work product doctrine, for data breaches and possibly other corporate investigations.