An email confidentiality notice is a few lines at the bottom of a message that tell a wrong recipient the email is private and who to contact. Below are three versions of one, at 26, 43 and 52 words, plus a plain account of what the official pages we read do and do not say about it. None of them says what legal effect a notice has. This is general information, not legal advice, and we read every page named here on 4 October 2026.
We wrote the three wordings ourselves for this article. We have not checked them against the law of any country, so treat them as drafts to show a lawyer, not as approved text.
The short version
- An email confidentiality notice is a drafting choice. Microsoft and Google both explain how to add one to all outgoing mail, and neither page says what the notice achieves in law.
- Shorter is easier to read. The short wording below is 26 words, the strict one 52.
- A notice does not undo a misdirected email. The ICO lists “sending personal data to an incorrect recipient” as an example of a personal data breach, and its page says nothing about footers.
- Some regulators require specific wording on emails for their members. The SRA rule below is one example, and it is about identification, not confidentiality.
- Have a lawyer approve the final email confidentiality notice, especially if you handle client or patient information.
What an email confidentiality notice is
The phrase covers any footer saying a message is confidential. People also call it a confidentiality disclaimer for email or a confidential email footer. The wording is the sender’s statement of what they want to happen if the message reaches the wrong person.
What we can support comes from Microsoft. Its Exchange Online page says that in cloud-based organisations you can add “an HTML or plain text legal disclaimer, disclosure statement, signature, or other information to the top or bottom of email messages that enter or leave your organization”. That is a description of a technical feature. It does not say a court, a regulator or a recipient will treat the text in any particular way, and we found no official page that does. Our companion piece on whether email disclaimers are legally binding goes through what we did find.
Three wordings for an email confidentiality notice
Each is our own drafting. Word counts are ours.
Short (26 words)
This email is confidential and meant for the person it is addressed to. If it reached you by mistake, please tell the sender and delete it.
Standard (43 words)
This email and any attachments are confidential and intended only for the person or organisation it is addressed to. If you are not the intended recipient, please do not read, copy or share it. Tell the sender by reply and delete the message.
Strict (52 words)
This message and any attachments are confidential and may be legally privileged. They are intended only for the addressee. If you are not the addressee, please do not read, copy, forward or act on this message. Tell the sender at once and delete all copies, including any in your deleted items folder.
The strict version makes a legal claim (“may be legally privileged”). Only a lawyer should decide whether that suits your business, and some professions have rules about wording. Do not use it as it stands.
Which email confidentiality notice fits which business
| Wording | Words | Reasonable starting point for | Ask your lawyer |
|---|---|---|---|
| Short | 26 | Teams that send ordinary business email with no special duties | Whether “confidential” is the right word for your messages |
| Standard | 43 | Companies that regularly send quotes, contracts or customer details | Whether asking the reader to delete is compatible with your record-keeping |
| Strict | 52 | Firms with client confidentiality duties, such as law and accounting practices | The whole text, including the privilege claim |
If you run a law firm or a clinic, start from our pages on a law firm email disclaimer and a healthcare email disclaimer, because the rules there are sector specific. The wider set of footers, including company details and marketing lines, is in our email disclaimer examples.
What an email confidentiality notice cannot do
We can only support some of this from sources, so we label each point.
It cannot unsend a message. The ICO’s guide to personal data breaches defines a breach as “a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data”. Its examples include “sending personal data to an incorrect recipient”. The page says organisations “must report a notifiable breach to the ICO without undue delay, but not later than 72 hours after becoming aware of it”. It does not mention footers. If a misdirected email contains personal data, ask your data protection adviser what you must do. Do not assume the footer settles it.
It does not replace required details. Some wording is a rule for a group of businesses, not a choice. The Solicitors Regulation Authority’s Transparency Rules say, in rule 4.2, that an authorised body’s “letterhead and e-mails must show its SRA authorisation number and the words ‘authorised and regulated by the Solicitors Regulation Authority’”. We read the version in effect from 11 April 2025. That rule is about identifying the firm, not about confidentiality. If you are in a regulated field, check your own regulator’s text before you design the footer.
It may not appear on every message. Microsoft says that if a mail flow rule cannot change a message, “for example, the message is encrypted”, you must choose what happens next. The options are Wrap, Ignore and Reject, and Wrap is the default. With Ignore, the original message goes out without the notice. Test an encrypted message before you rely on a server rule.
Whether it works in court is a lawyer’s question. We did not find an official or court source we could open that says a confidentiality footer is enforceable, or that it is not. The position probably varies by country. Anyone who tells you flatly one way or the other has not given you a source we could check.
How to add an email confidentiality notice to every message
These steps follow Microsoft’s page and Google’s help page, both read in October 2026.
Microsoft 365. In the Exchange admin center go to Mail flow > Rules, select Add a rule, then Apply disclaimers. Name the rule and choose which messages get it: for an external-only notice, select The recipient then is external/internal, and choose Outside the organization. Under Do the following, keep Apply a disclaimer to the message and append a disclaimer, then use Enter text. Pick a fallback action. Under Except if, add The subject or body and Subject or body matches these text patterns, and enter words from your notice so a long thread does not collect copies. For Rule mode, Microsoft says you can use Enforce straight away or Test without Policy Tips first, and it recommends testing.
Google Workspace. Google’s help page, last updated 1 October 2026 when we read it, gives the route Menu > Apps > Google Workspace > Gmail > Compliance and the Append footer setting. The footer goes on external messages by default, with a checkbox to add it inside your organisation as well. Google says users don’t see it while writing and “they can’t change or remove it”. Changes “can take up to 24 hours”.
In the signature itself. If you would rather carry the notice in each person’s signature, fix it centrally so nobody edits or drops it. emailfooter lets the company admin set a disclaimer line once for the company’s signatures, and employees install their own signatures by following steps. It does not push anything into mailboxes. Our guide to company email signatures compares the options. Here is how a short notice looks in a drawn signature:
|
The short wording in a compact layout. The company and person are made up.
A checklist before you publish
- Pick one place for the notice, either the server rule or the signature. Both will print it twice.
- Show the wording to a lawyer who knows your sector.
- Keep it short enough to read on a phone. Send a test to an outside address.
- Test with an encrypted message and a reply inside a long thread.
- Write down who owns the text and when it gets reviewed.
Frequently asked questions
Is an email confidentiality notice legally binding?
We found no official or court source we could open that says so, or that says it is not. The effect probably varies by country and facts. Ask a lawyer before relying on one.
What should a confidentiality disclaimer for email say?
At minimum, that the message is confidential and what a wrong recipient should do. Our three drafts run from 26 to 52 words. Keep claims such as privilege for a lawyer to approve.
Do I need a confidential email footer on every message?
The pages we read do not say you must, except where a rule for your profession or sector requires specific wording, such as the SRA rule above. Check your regulator’s own text.
Can I add a confidentiality notice to all outgoing email automatically?
Yes. Microsoft 365 and Google Workspace both let an admin append text to outgoing mail, with the limits described above. Test before you switch it on for everyone.
Does the notice protect me if I email the wrong person?
The pages we read do not say it does. The ICO treats sending personal data to an incorrect recipient as a personal data breach and its page does not mention footers. Take advice on what to do next.
Keep reading
- Email disclaimer examples: 12 you can adapt, with notes on what each does: Twelve email disclaimer examples grouped by purpose, with length and what each is for, plus how to add one in Google Workspace or Microsoft 365.
- Are email disclaimers legally binding? A plain answer for businesses: Are email disclaimers legally binding? What GOV.UK, the ICO and the UK Unfair Contract Terms Act say, what we could not find, and when to ask a lawyer.
Make every signature in your company match
emailfooter is a free WordPress plugin. You design the signature once, and each person adds their own details and installs it in their mail app. Prefer not to run a website? emailfooter Managed is the same software, hosted for you.