Spoliation and Sanctions in E-Discovery

Spoliation is the loss, destruction, alteration, or failure to preserve evidence that a party had a duty to keep for actual or reasonably anticipated litigation. In the world of electronic discovery (e-discovery), where the “evidence” is electronically stored information (ESI) such as email, chat messages, documents, databases, and system logs, spoliation is a constant risk. Digital information is fragile and dynamic: it is overwritten by routine backup rotation, purged by automated retention rules, deleted by departing employees, and silently transformed by ongoing system operations. When relevant ESI disappears, courts may impose sanctions to remedy the harm, deter misconduct, and preserve the integrity of the fact-finding process.

For records and information governance professionals, spoliation sits at the intersection of two disciplines. Sound records management—defensible retention schedules, disposition that is documented and authorized, and reliable systems—is the best defense against a spoliation claim. Conversely, an undisciplined information environment, where data accumulates without governance and deletes itself unpredictably, is exactly where preservation failures occur. Understanding when the duty to preserve attaches and what sanctions can follow is essential to building programs that withstand legal scrutiny.

The Duty to Preserve

The duty to preserve evidence arises not when a lawsuit is filed, but when litigation is reasonably anticipated. A demand letter, a credible threat of suit, an internal complaint, a regulatory inquiry, or knowledge of facts that make a claim foreseeable can all trigger the obligation. Once triggered, the duty extends to evidence the party knows, or reasonably should know, is relevant to the dispute and within its possession, custody, or control.

Meeting this duty in practice means issuing a legal hold (also called a litigation hold): a directive that suspends normal disposition of potentially relevant records and instructs custodians to preserve them. An effective hold process generally includes:

• Identifying the scope of relevant information and the custodians who hold it
• Communicating clear, written preservation instructions to those custodians
• Suspending automated deletion, backup recycling, and retention-driven purges for in-scope data
• Monitoring compliance and re-issuing or updating the hold as the matter evolves
• Documenting every step, because the reasonableness of the effort is what courts evaluate

The duty is one of reasonableness and good faith, not perfection. Parties are not required to preserve every byte forever, but they must take proportionate, deliberate steps to protect what matters.

Routine Disposition Versus Spoliation

A frequent misconception is that any deletion of data invites a spoliation charge. In fact, the disposal of records under a legitimate, consistently applied retention schedule is a normal and defensible part of records management. The National Archives and Records Administration (NARA) describes records management as the disciplined control of records throughout their lifecycle, including authorized disposition. Destroying records pursuant to a documented schedule, before any duty to preserve has attached, is generally lawful and protected.

Spoliation occurs when destruction happens after the duty arises, or when it is done to evade discovery. The pivotal questions are timing and intent: Was a preservation duty in effect when the data was lost? Could the loss have been prevented by reasonable steps? This is why a documented, routinely followed disposition program is so valuable—it demonstrates that any loss was the product of ordinary operations rather than bad-faith concealment.

Sanctions Under the Federal Rules

In federal civil litigation, the framework for sanctioning the loss of ESI is set out in the Federal Rules of Civil Procedure, which were amended to address electronic information specifically. The rule establishes a graduated approach that turns on the degree of culpability and the resulting prejudice.

When ESI that should have been preserved is lost because a party failed to take reasonable steps, and it cannot be restored or replaced through additional discovery, a court may act in two tiers:

• Curative measures (upon a finding of prejudice): If the loss prejudices another party, the court may order measures no greater than necessary to cure the prejudice—such as permitting additional discovery, allowing argument about the lost evidence, or shifting costs.
• Severe sanctions (only upon a finding of intent): The harshest remedies—an adverse-inference instruction telling the jury it may presume the lost information was unfavorable, dismissal of claims, or default judgment—are reserved for situations where the court finds the party acted with the intent to deprive another of the information’s use. Negligence alone, even gross negligence, generally does not justify these terminating sanctions.

This intent threshold was a deliberate design choice meant to curb disproportionate sanctions and to discourage over-preservation driven by fear. State courts and regulatory bodies may apply different standards, so practitioners should not assume the federal framework governs every forum.

Building a Defensible Preservation Program

Because reasonableness is judged in hindsight, the goal is a program that produces predictable, documentable behavior under pressure. Practical building blocks include:

• Information governance foundations: Knowing what data exists, where it lives, and how long it is kept. Mature retention schedules and data maps make legal holds faster and more accurate.
• A repeatable hold workflow: Standardized triggers, templates, custodian acknowledgments, and reminders reduce the chance that a key source is overlooked.
• Coordination across functions: Legal, IT, records management, and information security must act in concert, especially to suspend automated processes that would otherwise destroy in-scope data.
• Proportionality: Both preservation and collection should be scaled to the matter’s stakes and the relevance of the data, consistent with the proportionality principles embedded in modern discovery rules.

Professional guidance such as that published by The Sedona Conference offers widely cited principles on preservation, proportionality, and cooperation that courts and counsel frequently reference. These resources help organizations align practice with evolving expectations.

It is worth noting that recordkeeping standards continue to mature. NARA, for example, revoked its endorsement of the DoD 5015.2 records management standard in 2022 in favor of the Universal Electronic Records Management (ERM) Requirements developed through the Federal Electronic Records Modernization Initiative (FERMI). The broader lesson for spoliation risk is that defensibility depends less on any single certification and more on whether an organization’s systems reliably preserve, manage, and dispose of records in a documented, consistent way.

For a wider view of how these obligations connect to retention, defensible disposition, and data governance, see the information governance topic hub. Spoliation is ultimately a governance problem: organizations that manage information deliberately rarely face the worst sanctions, while those that let data drift are the ones most exposed when a court asks what happened to the evidence.