Opinion
National banks are required to file a suspicious activity report (SAR) with the federal government whenever they detect a known or suspected violation of federal law or a suspicious transaction related to money laundering. (12 C.F.R. § 21.11(a) (2005).) SAR’s are confidential. (12 C.F.R. § 21.11(k) (2005).) Under federal law, national banks that are subpoenaed or otherwise requested to produce a SAR are prohibited from producing the SAR or providing information that would disclose whether a SAR has been prepared or filed. (Ibid.)
In this writ proceeding, petitioner Union Bank of California, N.A. (Union Bank), challenges a trial court order compelling production of Union Bank’s internal suspicious activity reports, which Union Bank claims are generated as part of its procedure for preparing SAR’s and complying with federal reporting requirements. The trial court reasoned the internal forms comprise “supporting documentation” generated in the ordinary course of business and are therefore not subject to the unqualified privilege preventing disclosure of SAR’s or their contents. We disagree and grant a writ of mandate.
Factual and Procedural Background
The action below arises from a Ponzi scheme disguised as a successful national mortgage lending business that purportedly “bilked $330 million from more than 160 individual investors” during its brief lifespan. The *385 plaintiffs allege that two individuals set up PinnFund USA, Inc. (PinnFund), as a mortgage company to originate, purchase, and sell sub-prime mortgage loans. One of the individuals behind the Ponzi scheme also formed and operated three business entities, Grafton Partners, L.P. (Grafton), Allied Capital Partners, L.P. (Allied), and Six Sigma LLC (Six Sigma), to generate and collect investment dollars to fuel the operatiоn. Contracts between each of these entities and PinnFund required all investor funds to be placed in a trust account to be used for the sole and exclusive purpose of funding loans. According to the complaint, the trust account was not used to fund loans but was instead used to pay fictional returns to earlier investors as well as to pay phony commissions and fees that enriched the two principals.
The lawsuit centers on the conduct of Union Bank, which opened and operated the PinnFund trust account that was allegedly looted. Real parties in interest Grafton, Allied, and Six Sigma, through their trustee in bankruptcy, along with several individuals acting on their own behalf and on behalf of a putative class of defrauded investors (collectively referred to as Grafton Partners), 1 filed suit against Union Bank, alleging fraud, conspirаcy, aiding and abetting, and negligent misrepresentation. Grafton Partners contends, among other things, that Union Bank was complicit in the operation of the Ponzi scheme by allowing PinnFund to set up a “sham” trust account that was used to transfer millions of dollars to offshore accounts. Grafton Partners alleges the investors’ losses would not have been as great and the Ponzi scheme would have been uncovered earlier if Union Bank had taken steps to halt the illegal operation of the trust account and fulfilled its obligation to report suspicious activity to the federal government.
In an apparent attempt to learn whether Union Bank had filed SAR’s reporting suspicious activity associated with the PinnFund trust account, Grafton Partners initially sought permission from the federal government to allow Union Bank to produce certain SAR’s it had filed during the relevant time frame. 2 The Office of the Comptroller of the Currency (OCC), the agency responsible for regulating national banks such as Union Bank, denied the request based upon a determination that SAR’s and their contents are confidential under federal law.
*386 During discovery Grafton Partners learned that Union Bank has in place internal procedures and forms to identify, register, and describe what might constitute suspicious activity. In particular, Union Bank has an internal form referred to as a “Form 00244” Suspicious Activity Report (Form 244), which is filled out by bank personnel to report suspicious activities. According to Union Bank, the sole purpose of the Form 244 is to aid the bank in complying with its obligation under federal law to report suspicious activity and file SAR’s.
Upon learning of Union Bank’s internal suspicious activity report, Grаfton Partners requested that Union Bank produce any Form 244 relating to PinnFund. Grafton Partners also served interrogatories requesting that Union Bank identify any suspicious activity it noticed with respect to the PinnFund trust account and identify all documents, including Form 244’s, concerning the suspicious activity. Grafton Partners specifically excluded SAR’s from the scope of its discovery requests. Union Bank objected to the discovery requests and refused to produce or identify its Form 244’s, asserting the request was an improper attempt to circumvent the OCC’s ruling precluding disclosure of SAR’s, the Form 244’s were privileged communications related to the SAR’s, disclosure of the Form 244’s would tend to disclose whether a SAR had been filed, and Grafton Partners’ request was baaed by the privilege relating to SAR’s afforded under federal law. Grafton Partners moved to compel further responses to a number of discovery requests, including those that sought the Form 244’s or information relating to the forms.
The trial court initially granted the motion to compel in part, ordering Union Bank to produce documents and further responses relating to the Form 244’s. 3 The court noted, however, that if “Union Bank failed to notify the appropriate federal authorities of this motion, then the federal authorities may intervene . . . and request reconsideration of this order.”
Union Bank filed a motion for reconsideration in anticipation of the filing of a brief by the OCC. The OCC subsequently filed an amicus curiae brief in the trial court in support of Union Bank’s request for reconsideration. The OCC urged the trial court to protect from discovery not just the SAR’s but also the process of preparing a SAR—including the Form 244’s utilized by Union Bank as well as documents generated by a financial institution as part *387 of its internal process for filing SAR’s as required by federal law. According to the OCC, to permit disclosure of the Form 244’s would “conflict with federal law and would undermine public policy aimed at uncovering and reporting potential criminal activity . . . .”
Upon reconsideration, the trial court affirmed its decision and ordered production of the Form 244’s as well as further responses to all requests concerning the Form 244’s. The trial court held the “SAR privilege covers draft SARs, the SARs themselves, and any communications concerning a SAR,” but it found “no support for the proposition that all reports of suspected or possible violations or discussion that might lead to the preparation or filing of a SAR are protected by the SAR privilege.”
The trial court found the “Form 224s [sic] were not part of Union Bank’s process of drafting аnd filing SARs” and instead described them as “routine bank forms” used by Union Bank for. “internal bank purposes as well as for initiating investigations that might lead to a SAR.” The court also concluded that disclosure of the Form 244’s would not inform anyone whether a SAR had been prepared or filed, because although 93 percent of Form 244’s result in a filed SAR, some SAR’s were prepared without a corresponding Form 244, and “one cannot tell whether a SAR has been filed just by looking [at] a 244.”
Acknowledging that OCC’s opposition to the motion to compel suggests there are substantial grounds for difference of opinion regarding the limits of the SAR privilege, the trial court found the issue appropriate for interlocutory appellate review. 4 Union Bank thereafter filed this petition seeking a writ of mandate. 5 Pending resolution of the petition, we stayed the triаl court’s orders *388 to the extent they compel the production of Form 244’s or otherwise direct Union Bank to respond to discovery requests concerning Forms 244’s. We issued an order to show cause and granted OCC’s request to file an amicus curiae brief.
Discussion
1. Propriety and scope of review
Although writ review of discovery rulings is generally disfavored, interlocutory review by writ is the only adequate remedy when, as here, a court compels the disclosure of documents or information that may be subject to a privilege, because “once privileged matter has been disclosed there is no way to undo the harm which consists in the very disclosure.”
(Raytheon Co. v. Superior Court
(1989)
Appellate review of discovery rulings is governed by the abuse of discretion standard. “Where there is a basis for the trial court’s ruling and the evidence supports it, a reviewing court will not substitute its opinion for that of the trial court. [Citation.]”
(Johnson v. Superior Court
(2000)
2. The source and scope of the SAR privilege
Evidentiary privileges are created by statute, and the courts of this state are not free to create new privileges as a matter of judicial policy but must apply only those privileges created by statute or that otherwise arise out of state or federal constitutional law. (Evid. Code, § 911;
OXY Resources California LLC v. Superior Court, supra,
115 Cal.App.4th at pp. 888-889.) The Evidence Code defines “statute” broadly to include treaties and constitu
*389
tional provisions; the term is not limited to statutes codified in the Evidence Code or to state statutes in general. (Evid. Code, § 230; see also
id.,
§ 920 [Evidence Code’s enumeration of privileges does not repeal by implication privileges not listed].) Thus, federal statutes and treaties may supply the basis for a privilege recognized by California courts.
6
(Cf.
People
v.
Corona
(1989)
The SAR privilege is a product of federal law. Suspicious activity reports, or SAR’s, derive from requirements imposed on financial institutions in the 1992 Annunzio-Wylie Anti-Money Laundering Act. (See
Cotton v. PrivateBank and Trust Co.
(N.D.Ill. 2002)
Specific SAR filing and confidentiаlity requirements are the product of federal regulations. After the enactment of the Annunzio-Wylie Anti-Money Laundering Act, the Department of the Treasury and federal banking *390 agencies issued virtually identical implementing regulations. (See, e.g., 12 C.F.R. §§ 21.11 [OCC], 208.62 [Federal Reserve Board], 353.3 [Federal Deposit Insurance Corporation] & 563.180 [Office of Thrift Supervision] (2005).) Under OCC regulations, a national bank is obligated to file a SAR whenever it detects any known or suspected violation of criminal law involving insider abuse, violations aggregating $5,000 or more when a suspect can be identified, violations aggregating $25,000 or more regardless of whether a suspect is identified, and transactions aggregating $5,000 or more that involve potential money laundering or that violate the Bank Secrecy Act. (12 C.F.R. § 21.11(c) (2005).) Completed SAR’s are submitted to the Financial Crimes Enforcement Network of the Department of the Treasury (FinCEN). (12 C.F.R. § 21.11(b)(1) & (c) (2005).)
The regulations also provide that “SARs are confidential,” specifying that any “national bank or person subpoenaed or otherwise requested to disclose a SAR or the information contained in a SAR shall decline to produce the SAR or
to provide any information that would disclose that a SAR has been prepared or filed
. . . .” (12 C.F.R. § 21.11(k) (2005), italics added.) Thus, the prohibition against disclosing a SAR protects from discovery not just the SAR and its contents, but also information that would disclose preparation of a SAR. (See
Whitney Nat. Bank v. Karam
(S.D.Tex. 2004)
While the regulation prohibits disclosure of SAR’s and their contents, courts have uniformly held that “supporting documentation” underlying a SAR that is generated or received in the ordinary course of a bank’s business is discoverable. (See
Whitney, supra,
These authorities confirm that documentation supporting a SAR is subject to discovery, but they beg the question of what comprises “supporting documentation.” The court in
Cotton
described two types of supporting documents: “The first category represents the factual documents which give rise to suspicious conduct. These are to be produced in the ordinary course of discovery because they are business records made in the ordinary course of business. The second category is documents representing drafts of SARs or other work product or privileged communications that relate to the SAR itself. These are not to be produced because they would disclose whether a SAR has been prepared or filed.”
(Cotton, supra,
By contrast, a draft SAR or internal memorandum prepared as part of a financial institution’s process for complying with fedеral reporting requirements is generated for the specific purpose of fulfilling the institution’s reporting obligation. These types of documents fall within the scope of the SAR privilege because they may reveal the contents of a SAR and disclose whether “a SAR has been prepared or filed.” (12 C.F.R. § 21.11(k) (2005).) Unlike transactional documents, which are evidence of suspicious conduct, draft SAR’s and other internal memoranda or forms that are part of the process of filing SAR’s are created to report suspicious conduct.
Grafton Partners contends that reports of suspicious activity other than SAR’s are subject to discovery, citing
Gregory, supra,
We do not suggest that all reports of suspicious activity are protected by the SAR privilege. We are mindful that evidentiary privileges should be narrowly construed because they prevent otherwise admissible and relevant evidence from coming to light.
(McKesson HBOC, Inc. v. Superior Court
(2004)
Some internal reports or memoranda citing suspicious activity, however, may legitimately be part of the process for complying with federal reporting requirements. To ensure that financial institutions carry out their obligation to file SAR’s, Congress has mandated that each institution establish anti-money laundering programs, including internal policies, procedures, and controls. (31 U.S.C. § 5318(h)(1).) The OCC had adopted regulations requiring each national bank to “develop and provide for the continued administration of a program reasonably designed to assure and monitor compliance with the recordkeeping and reporting requirements . . . .” (21 C.F.R. § 21.21(b)(1) (2005).) A bank’s internal procedures may include the development and use of preliminary reports subject to various quality control checks before the bank prepares the final SAR that will be filed. Revealing these preliminary reports, the equivalent of draft SAR’s, would disclose whether a SAR had been prepared.
It is immaterial that these preliminary documents are not communicated to federal authorities. Although the SAR privilege encompasses communications between financial institutions and federal authorities, its rationale extends further. “Permitting the release of any SAR through civil discovery could harm the law enforcement interests the [Annunzio-Wylie Anti-Money Laundering] Act was intended to promote. Release of [a] SAR could compromise an ongoing law enforcement investigation, tip off a criminal wishing to evade detection, or reveal the methods by which banks are able to detect suspicious activity. Furthermore, [a] bank[] may be reluctant to prepare [a] SAR if it believes that its cooperation may cause its customers to retaliate.
*393
Moreover, the disclosure of [a] SAR may harm the privacy interests of innocent people whose names may be contained therein.”
(Cotton, supra,
The OCC’s interpretation of its own regulation is entitled to deference. (See
Olszewski
v.
Scripps Health
(2003)
The trial court also relied on the facts of
Holihan, supra,
While Holihan may stand for the proposition that all reports and investigations of suspicious activity are not necessarily covered by the SAR privilege, a point with which we agree, it does not establish that all such reports other than the SAR’s themselves are discoverable. A bank may investigate suspicious activity for reasons other than to comply with federal suspicious activity reporting requirements. Documents reporting such suspicious transactions fall outside scope of the SAR privilege. In Holihan, there is no indication that any of the documents contained in personnel files were prepared for the purpose of investigating and filing a SAR. To the extent the documents werе prepared for that purpose, they would presumably fall within the category of documents the Holihan court excluded from the scope of the subpoena.
We agree with the trial court that the SAR privilege covers draft SAR’s, the SAR’s themselves, and any communication concerning a SAR. However, we also hold that the SAR privilege extends to documents prepared by a bank “for the purpose of investigating or drafting a possible SAR.” (See
Cotton, supra,
3. Union Bank’s Form 244 is covered by the SAR privilege
The trial court found the Form 244’s are not part of Union Bank’s process of drafting and filing SAR’s, comprise “routine bank forms” used for internal bank purposes, and will not inform anyone whether a SAR has been prepared or filed if they are disclosed. We conclude substantial evidence does not support the trial court’s findings.
Substantial evidence is not synonymous with “any” evidence, but is evidence that is of ponderable legal significance.
(Toyota Motor Sales U.S.A., Inc.
v.
Superior Court
(1990)
The Form 244 is a one-page document entitled “Suspicious Activity Report” and contains much the same information as the SAR form developed by the FinCEN. When a branch-level bank employee observes a susрicious transaction, the employee is required to complete a Form 244 and provide information such as the identity of the bank branch, the identity of the suspect, and a description of the suspicious transaction. The 20 categories of suspicious" transactions on the Form 244 (e.g., money laundering, identity theft) are identical to and in the same order as the 20 categories on the SAR. Completed Form 244’s are sent to the risk management department, which may conduct ah investigation to determine whether to file a SAR. In many cases, the SAR is copied verbatim from the Form 244 but in other cases the risk management department may edit or add to the Form 244. Explaining why branch-level employees do not fill out the SAR form itself, the manager of Union Bank’s risk management department explained that the people who submit Form 244’s, who are “not experts at knowing exactly what a write-up should look like,” submit their suspicions for the risk management department to investigate.
The trial court concluded the Form 244should be considered “supporting documentation” instead of “drafts of [SAR’s],” apparently because employees who prepare the Form 244 do not typically conduct any further investigation or draft the SAR that is ultimately filed. If the trial court assumed the term “draft SAR’s” encompasses only drafts on the official FinCEN form prepared by the employee responsible for' filing a SAR, then the trial court’s inquiry was too narrow. As discussed above, the SAR privilege encompasses documents prepared by a bank for the purpose of investigating or drafting a possible SAR. A Form 244 plainly serves that purpose. Simply because the employees who fill out thе Form 244’s do not ultimately prepare the SAR that is filed does not make them any less a part of the process of investigating suspicious activity and preparing SAR’s.
In support of its conclusion that Form 244’s are routine bank forms used for internal bank purposes, the trial court cited the following evidence: (1) before the Bank of California merged with Union Bank and adopted Union *396 Bank’s Form 244, reports of suspicious activities were typically made by phone or memo because the Bank of California did not have an internal form for that purpose; (2) Union Bank instructed its employees to submit a Form 244 even if a transaction did not meet the dollar threshold for reporting to federal authorities; (3) Union Bank retains Form 244’s that did not lead to the filing of a SAR, along with a cover sheet or note explaining why no SAR filing was made; and (4) the Form 244 is used instеad of a blank memo form because it is administratively convenient for Union Bank. The trial court reasoned a bank cannot expand the SAR privilege by formatting its internal reports like the SAR and merging its internal investigations with its federal reporting obligations. Grafton Partners also cites evidence that it contends stands for the proposition that the Form 244 is an “all-purpose” risk-prevention form that has been used to prevent or reduce Union Bank’s exposure to liability.
Contrary to Grafton Partners’ characterization of the evidence, Union Bank never described the Form 244 as an “all purpose” form. Rather, the manager of Union Bank’s risk management department testified that employees are encouraged to report suspicious activity even if the reporting threshold is not met. He also testified that emplоyees who prepare the Form 244’s are encouraged to submit their suspicions and leave it to the risk management department to determine if a transaction meets the criteria for reporting. Several suspicious transactions taken together may meet the reporting threshold. (See 12 C.F.R. § 21.11(c)(2) [transactions aggregating $5,000 must be reported if suspect is identified].) Also, Union Bank on some occasions filed a SAR to report unusual activity even when the dollar threshold was not met. Thus, the mere fact employees are encouraged to report suspicious transactions that may not meet the reporting threshold does not render the Form 244 “all purpose” or suggest it primarily serves internal bank purposes.
Grafton Partners is correct in pointing out that Union Bank’s risk services department manager testified there had beеn occasions when Union Bank was able to prevent or reduce its exposure to liability as a result of receiving a Form 244. However, Union Bank’s witness was not asked to elaborate on the point and did not volunteer any further information. Thus, it is unclear what significance to attribute to the statement. The witness may have been referring to the safe harbor from liability associated with filed SAR’s. There is certainly no evidence the form was designed to fulfill a general risk management function. Even if Union Bank has on occasion benefited from information gleaned from a Form 244, this fact does not transform the Form 244 into a general purpose form. Indeed, instead of characterizing the Form 244 as a general purpose form, Union Bank’s witness was consistent in *397 describing it as fulfilling Union Bank’s obligation to report suspicious activities to the federal government. This characterization is consistent, too, with information in Union Bank’s internal manuals for reporting suspicious transactions and completing Form 244’s. For example, on an internal flow chart for reporting suspicious transactions used at one time by Union Bank, the preparation of a Form 244 culminates in the filing of a SAR. No evidence of any substantial character has been brought to our attention suggesting the Form 244 serves a purpose other than to fulfill Union Bank’s obligation to file SAR’s.
We also fail to see the significance of the fact that the Form 244 replaced earlier methods for reporting suspicious transactions. The assumption underlying the trial court’s reasoning is that because a memo or e-mail reporting suspicious activity would not be protected from discovery, a Form 244 conveying the same information should also be subject to discovery. The assumption is faulty because the SAR privilege extends to documents a bank prepares for the purpose of investigating or drafting a possible SAR, including memos or e-mails drafted for that purpose. For example, in
Cotton,
a party sought handwritten notes prepared contemporaneously with disputed business transactions.
(Cotton, supra,
As the trial court acknowledged, 93 percent of Form 244’s result in filed SAR’s. The trial court concluded, however, that one cannot tell whether a SAR has been filed just by looking at the Form 244, apparently because one cannot know whether the Form 244 is one of the 7 percent that does not result in a filed SAR. We reject this rationale. The Form 244 echoes the official SAR form, is labeled a “Suspicious Activity Report,” and calls for a “Description of Suspicious Transaction.” These facts telegraph that a SAR was likely prepared and filed.
In any event, regardless of whether one can tell with certainty that a particular Form 244 resulted in the filing of a SAR, the fact that some Form 244’s did not result in a filed SAR does not strip all Form 244’s of their confidential status. Nor does this fact mean that Union Bank must produce all
*398
Form 244’s for which no SAR was filed. “[S]uspected or possible violations that did not culminate in the filing of a SAR” fall within the scope of the SAR privilege.
(Whitney, supra,
Accordingly, we conclude the evidence relied upon by the trial court is too insubstantial to support a reasonable inference that the Form 244 is a routine bank form primarily used for purposes other than Union Bank’s process of investigating and filing SAR’s.
4. Standing to assert the SAR privilege
A party may challenge a ruling disallowing a claim of privilege only if that party is the holder of the privilege, except when the party challenges a ruling disallowing a claim by a spouse premised on the spousal privilege. (Evid. Code, § 918.) Grafton Partners contends that Union Bank has no standing to assert the SAR privilege because the OCC is the holder of the privilege. Although the OCC is indisputably the holder of the SAR privilege, we disagree that Union Bank has no standing to assert the privilege.
The OCC has the discretion to disclose SAR’s and their contents. (12 C.F.R. §§ 4.31-4.40 (2005).) By contrast, national banks have no such discretion and are required by federal regulation to decline to produce SAR’s or any information that would disclose that a SAR has been prepared or filed. (12 C.F.R. § 21.11(k) (2005).) A person or entity served in civil litigation with a subpoena or other request for such information must notify the OCC. (Ibid.) At the time the confidentiality regulation was promulgated, the OCC commented that the notification requirement allows the OCC to determine whether it should intervene in the proceedings. (61 Fed.Reg. 4336 (Feb. 5, 1996).)
We find no support for the proposition that the OCC must intervene as a party in order for the court to give effect to the SAR privilege. (Cf.
Mylan Laboratories Inc.
v.
Soon-Shiong
(1999)
When it appears a national bank is making an overbroad claim based on the SAR privilege, a court may be warranted in questioning whether the OCC agrees with the bank’s position. Indeed, after initially ruling on the mоtion the trial court in this case gave the OCC an opportunity to respond. The OCC chose to proceed as amicus curiae in the trial court, as it has done in this writ proceeding. The OCC could have chosen in the alternative to file a declaration in the trial court clarifying its assertion of the SAR privilege over the documents at issue. (Cf.
Wolpin v. Philip Morris Inc.
(C.D.Cal. 1999)
Finally, Grafton Partners asserts that Union Bank lacks standing in this writ proceeding because it has no beneficial interest in the subject matter of the action. (See
Waste Management of Alameda County, Inc. v. County of Alameda
(2000)
*400 Disposition
Let a peremptory writ of mandate issue directing respondent court to vacate its orders of June 9, 2004, and August 2, 2004, and to еnter a new and different order denying Grafton Partners’ motion to compel as it concerns the production of Form 244’s and any further interrogatory responses or requests for admission requiring disclosure of the contents of Form 244’s. The stay previously issued by this court shall be dissolved upon the issuance of the remittitur. Petitioner shall recover the costs it incurred in this writ proceeding.
Corrigan, J., and Parrilli, J., concurred.
Notes
Richard Kipperman is the trustee in bankruptcy for Grafton, Allied, and Six Sigma. The individual plaintiffs are Tom Frame, Bruce Miller, and Ronald VandenBerghe.
The Code of Federal Regulations provides a mechanism for litigants to request nonpublic information from the OCC, including SAR’s. (12 C.F.R. § 4.31 et seq. (2005).) The OCC has sole discretion whether to grant a request. (12 C.F.R. § 4.35(a) (2005).)
The discovery requests relating to the Form 244’s are identified as special interrogatories 1 through 13, request for admission 13, form interrogatory 17.1 (as it rеlates to request for admission 13), and document requests 62, 63, 65, and 66.
The trial court’s order cites “C.C.P. 166.6,” an apparent reference to Code of Civil Procedure section 166.1, which provides in relevant part: “Upon the written request of any party or his or her counsel, or at the judge’s discretion, a judge may indicate in any interlocutory order a belief that there is a controlling question of law as to which there are substantial grounds for difference of opinion, appellate resolution of which may materially advance the conclusion of the litigation.”
In addition to challenging the trial court’s discovery orders relating to Form 244’s, Union Bank also purports to challenge a much earlier trial court order denying Union Bank’s motion to strike references to or claims based on SAR’s. We decline to entertain that chаllenge, which is untimely. (See
Volkswagen of America, Inc.
v.
Superior Court
(2001)
The trial court reasoned that, because the privileges contained in the Evidence Code are exclusive, the SAR privilege is given effect through California’s official information privilege, codified in Evidence Code section 1040. The parties do not dispute the applicability of the official information privilege. We believe, however, that reliance on the official information privilege is both unnecessary and misplaced. Thе SAR privilege, the product of a federal statute and regulations implementing the statute, is given effect as a privilege created by statute. (See Evid. Code, § 230 [definition of “statute”].) The privilege is not the product of federal common law. Accordingly, we need not rely on the official information privilege to “give effect” to the SAR privilege. Moreover, because the official information privilege encompasses only information “acquired in confidence by a public employee” (Evid. Code, § 1040, subd. (a)), it would be improper to rely on the official information privilege to protect from disclosure draft SAR’s or similar documents prepared by a national bank but never transmitted to federal authorities, because such information has not been acquired in confidence by a public employee.
