Legal Holds and the Duty to Preserve

A legal hold is the process an organization uses to preserve information that may be relevant to anticipated or pending litigation, investigation, audit, or other formal proceeding. It is a deliberate interruption of business as usual: ordinary retention schedules and routine deletion are suspended for a defined scope of material so that potentially relevant evidence is not lost. Although the legal hold is the operational mechanism most people see, it exists to satisfy a deeper obligation known as the duty to preserve.

The duty to preserve is a long-standing common-law principle rather than a single statute. It obligates a party to take reasonable steps to retain evidence once that party knows, or reasonably should know, that the evidence is relevant to a dispute that is reasonably foreseeable. For records and information governance professionals, the duty sits at the intersection of law and practice: lawyers determine when the obligation attaches and what it covers, while records, IT, and information governance teams translate that obligation into concrete preservation actions across systems, repositories, and people.

When the Duty to Preserve Is Triggered

The duty does not wait for a lawsuit to be filed. It typically attaches when litigation is reasonably anticipated. Common triggering events include a demand letter, a notice of claim, a regulatory inquiry, an internal complaint that signals likely escalation, or a credible threat communicated by a counterparty. The precise moment of “reasonable anticipation” is a judgment call, and courts evaluate it based on what the organization knew at the time.

Because the trigger is fact-specific, organizations benefit from a clear internal pathway for raising potential disputes to legal counsel quickly. Waiting until a complaint is formally served can be too late: relevant information may already have been overwritten, auto-deleted, or aged out under routine retention rules. A defensible program treats the duty as something that can switch on before any case number exists.

Scope: What Must Be Preserved

The duty extends to information that is relevant to the issues in the matter and reasonably accessible, regardless of where it lives or what format it takes. In modern practice, this reaches far beyond paper files and email. Potentially relevant material may reside in:

• Email and instant messaging or collaboration platforms
• Documents in shared drives, content repositories, and cloud storage
• Structured data in line-of-business applications and databases
• Mobile device content, voicemail, and text messages
• Backup systems, where data may exist in less accessible form
• Ephemeral or auto-expiring messages, which require special attention

A core analytical concept is electronically stored information (ESI), and a central tension is proportionality. Preservation must be reasonable, not limitless. The Federal Rules of Civil Procedure frame discovery obligations around relevance and proportionality, recognizing that the burden of preserving and producing information should be weighed against the needs of the matter. The Sedona Conference has produced widely cited guidance on applying these principles sensibly.

Issuing and Managing the Legal Hold

Once the duty attaches, the organization issues a legal hold notice to the people most likely to possess relevant information, often called custodians. An effective hold notice clearly identifies the matter, describes the categories of information to preserve, instructs recipients not to delete or alter that information, and explains how to ask questions. Good practice includes:

• Identifying custodians and relevant data sources early and revisiting them as the matter develops
• Suspending automatic deletion, retention-based disposition, and recycling of media for in-scope data
• Tracking acknowledgments so the organization can show custodians received and understood the hold
• Sending periodic reminders, since matters can last for years and personnel change
• Releasing the hold promptly and in writing once the obligation ends, so normal retention can resume

The legal hold is not a one-time email. It is an ongoing process that must adapt as new custodians, systems, or issues emerge. Coordination between legal, IT, and records staff is essential, because lawyers rarely have direct control over the systems where data physically resides.

Spoliation and the Consequences of Failure

Spoliation is the loss, destruction, or material alteration of evidence that a party had a duty to preserve. When it occurs, courts have a range of responses available, from ordering additional discovery to instructing a jury that it may draw an adverse inference, and in serious cases imposing more severe sanctions. The Federal Rules address the loss of ESI specifically, focusing on whether reasonable steps were taken to preserve it and whether any failure caused prejudice or reflected an intent to deprive another party of the information.

The practical lesson is that defensibility turns on process, not perfection. An organization that can demonstrate a reasonable, documented, and consistently applied preservation effort is far better positioned than one that cannot explain what it did or why information disappeared.

Building Preservation Into Information Governance

Legal holds are most reliable when they sit on top of a mature information governance foundation. If an organization already knows what records it has, where they live, and how long it keeps them, then suspending disposition for a defined scope becomes a controlled, repeatable operation rather than a scramble. Records management standards and federal recordkeeping guidance emphasize this kind of disciplined lifecycle control. Notably, the National Archives (NARA) revoked its endorsement of the DoD 5015.2 standard in 2022 in favor of the technology-neutral Universal Electronic Records Management (ERM) Requirements developed through the Federal Electronic Records Modernization Initiative (FERMI), reflecting a broader move toward functional, system-agnostic requirements that support obligations like preservation across diverse platforms.

Organizations strengthen defensibility by maintaining a written hold policy, integrating hold capability with their records systems so disposition can be suspended cleanly, and training staff on what to do when a matter arises. For broader context on how preservation fits with retention, classification, and accountability, see the information governance topic hub.

Ultimately, the legal hold and the duty to preserve are about trust in the evidentiary record. Handled well, they protect the organization, respect the rights of opposing parties, and preserve the integrity of the information that decisions and judgments depend on.