How to Write an Email Confidentiality Disclaimer

A disclaimer doesn't make a misdirected email legally private on its own — but it establishes intent, and in some fields, leaving it out is the unusual choice, not including it.

Updated September 28, 20268 min read

An email confidentiality disclaimer is the block of text, usually below the signature, stating that the message is intended only for the named recipient and that unauthorized use or disclosure is prohibited. Its legal weight varies by jurisdiction and has real limits — a disclaimer doesn't retroactively create attorney-client privilege or prevent a court from admitting a misdirected email as evidence. What it reliably does is document that confidentiality was intended, which matters if the question of intent ever comes up.

Whether you need one at all depends heavily on your field. It's close to universal in legal and healthcare correspondence, common in financial services, and genuinely optional for most other business email — where a lengthy disclaimer on every internal message mostly adds noise.

When a Disclaimer Is Expected, Not Optional

  • Legal practice: protects the intent behind attorney-client privileged communication, even though privilege itself depends on the content and relationship, not the disclaimer text.
  • Healthcare: correspondence that may reference patient information typically carries a disclaimer aligned with HIPAA-conscious communication practices.
  • Financial services: client correspondence involving account or advisory details commonly includes one as a matter of firm policy.

When It's Optional or Unnecessary

Routine internal email, marketing newsletters, and most B2B correspondence do not need a disclaimer. Attaching a 15-line legal notice to every message a team sends internally reads as boilerplate, not as protection, and on long threads it can push a message past Gmail's message-clipping size threshold.

Templates by Context

Keep disclaimers to two or three lines. A shorter notice is read; a long one is skipped, and length doesn't add legal weight.

textGeneral business confidentiality notice.
CONFIDENTIALITY NOTICE: This message and any attachments are intended only for the named recipient(s). If you received this in error, please notify the sender and delete it; any other use, disclosure, or distribution is prohibited.
textLegal correspondence — attorney-client privilege framing.
ATTORNEY-CLIENT PRIVILEGED & CONFIDENTIAL: The information in this email is intended only for the personal and confidential use of the recipient(s) named above. If you are not the intended recipient, any review, dissemination, or copying of this communication is strictly prohibited.
textShort-form notice for threads where a full disclaimer would be excessive.
This email is confidential. If you're not the intended recipient, please delete it and let us know.

Recent workplace discussions across the UK and US have highlighted an emerging type of email signoff: disclaimers explaining that the sender is neurodivergent (such as having ADHD or being on the autism spectrum). These notices are typically used to set expectations around direct phrasing, message brevity, or irregular reply hours.

While intended to reduce communication anxiety and normalize cognitive diversity, workplace consultants generally recommend focusing on practical communication preferences rather than disclosing clinical diagnoses on external emails. A blanket diagnostic disclaimer risks unconscious bias from outside recipients and cannot substitute for bilateral accommodations. A stronger approach is stating specific, actionable expectations directly:

  • Focus on format over diagnosis: Clarify preferred formats (such as structured bullet points or explicit next steps) instead of stating a medical condition.
  • Contextualize assistive tools: If using speech-to-text dictation that might introduce transcription quirks, a brief note provides clarity without oversharing.
  • Differentiate internal from external: Reserve detailed personal operating manuals (Personal Readmes) for internal team documentation rather than external client correspondence.
textCommunication preference notice — actionable without clinical disclosure.
COMMUNICATION NOTE: I aim for concise, direct messages and welcome bulleted action items. If you receive an email outside your standard working hours, please reply whenever it is convenient for you.
textAssistive tool notice — for voice dictation or accessibility setups.
Dictated using voice-to-text assistive software. Please excuse brief phrasing or minor transcription errors.
Questions & Answers

Frequently Asked Questions

Does a confidentiality disclaimer make an email legally private?

Not on its own. A disclaimer documents that confidentiality was intended, which can matter if intent is disputed, but it doesn't retroactively create privilege or prevent a misdirected email from being read or used. Actual legal protection depends on the content, the relationship between sender and recipient, and applicable law — not the disclaimer text.

Is a disclaimer necessary on every business email?

No. It's close to standard practice in legal, healthcare, and financial services correspondence. For routine internal or marketing email, a lengthy disclaimer is usually unnecessary and adds length without adding protection.

How long should a confidentiality disclaimer be?

Two to three lines. Beyond that, disclaimers are more likely to be skipped by the reader and, on long email threads, can push the message past Gmail's size threshold for clipping the visible content.

Should I include an ADHD or neurodiversity disclaimer in my email signature?

Generally, no. Disclosing medical or neurological diagnoses in an external email signature exposes personal health details to recipients who may harbor unconscious bias. If you want to manage communication expectations, state the actionable preference instead — such as a preference for bulleted action items or clarifying that off-hours messages do not require an immediate response.

Put This Into Practice

Related Guides