the duty to protect privileged information