Unauthorized Destruction of Federal Records

Unauthorized destruction of federal records is the removal, deletion, alteration, or disposal of records belonging to the United States Government without legal authority to do so. In the federal context, “destruction” is not an everyday housekeeping decision left to individual judgment. It is a regulated act that may occur only after a record has reached the end of its approved retention period under a disposition authority that the National Archives and Records Administration (NARA) has reviewed and approved. When records are destroyed outside that framework — too early, without an approved schedule, in defiance of a litigation hold, or simply by neglect — the destruction is unauthorized, and the consequences can be serious for both the agency and the individuals involved.

The principle rests on a foundational idea in federal records management: federal records are the property of the Government and, ultimately, of the public. They document how agencies spend money, make decisions, and exercise authority. Destroying them improperly erodes accountability, defeats the public’s right of access under transparency laws, and can permanently destroy evidence. Understanding what makes destruction “unauthorized” — and how to prevent it — is central to any agency’s records program.

What Makes Destruction “Authorized”

For destruction to be lawful, an agency generally needs a disposition authority covering the records in question. These authorities take two main forms. Agency-specific records schedules are developed by an agency and submitted to NARA for approval; they describe series of records and specify whether each is temporary (eligible for destruction after a set period) or permanent (to be transferred eventually to the National Archives). For records common across the Government — routine administrative, financial, and personnel files, for example — NARA issues the General Records Schedules, which provide ready-made disposition authorities that agencies apply directly.

Authorized destruction therefore has three hallmarks: the records are covered by an approved schedule or the General Records Schedules; the applicable retention period has fully elapsed; and no overriding hold (such as litigation, investigation, or audit) is in effect. If any of those conditions is absent, destroying the records is unauthorized — even if an employee sincerely believed the material was no longer useful.

Common Ways Unauthorized Destruction Happens

Unauthorized destruction is frequently unintentional. It tends to arise from gaps in process rather than deliberate misconduct, including:

• Premature disposal of temporary records before the retention period ends.
• Disposing of unscheduled records — material that has never been assigned a disposition authority and therefore has no lawful basis for destruction.
• Destroying records under a hold, where litigation, a FOIA request, an audit, or an investigation legally suspends routine disposition.
• Treating records as “non-records,” such as deleting email, text and chat messages, or shared-drive files in the mistaken belief that they are personal or transitory.
• Departing-employee data loss, when accounts and devices are wiped during offboarding without first preserving records.
• System decommissioning and migrations, where legacy data is discarded without confirming it has been scheduled and, if permanent, transferred.

The shift to electronic and cloud-based work has multiplied these risks. Records now live in collaboration platforms, messaging tools, and ephemeral systems where deletion is easy, automatic, and hard to reverse.

Legal and Accountability Consequences

Federal law treats the integrity of records seriously. The statutory framework governing federal records prohibits the unlawful removal or destruction of records and establishes that violations can carry administrative penalties and, in certain cases, criminal liability. When an agency discovers that records have been, or are about to be, unlawfully destroyed, it is expected to report the incident to NARA and to take steps to recover the records or otherwise address the loss.

Beyond statutory exposure, unauthorized destruction can produce significant collateral harm. In litigation, the loss of relevant records may constitute spoliation, exposing an agency to sanctions and adverse inferences. In the transparency arena, destroyed records cannot be produced in response to access requests, undermining public confidence. And historically valuable material, once gone, is gone permanently — a loss to the documentary record of the nation.

Preventing Unauthorized Destruction

Prevention is overwhelmingly a matter of governance and disciplined process rather than technology alone. Effective programs share several practices:

• Comprehensive scheduling, so that every series of records — paper and electronic — has an approved disposition authority and no records remain “unscheduled.”
• Clear, enforced retention rules that trigger destruction only when retention has elapsed and no hold applies.
• Robust legal-hold procedures that can rapidly suspend disposition across all relevant systems.
• Training and awareness, so staff recognize what constitutes a record and understand that deletion is a controlled act.
• Controls in electronic systems that prevent automatic or bulk deletion of records before eligibility and capture records from email, messaging, and collaboration tools.

On the technology side, agencies increasingly evaluate electronic recordkeeping systems against current federal expectations. It is worth noting that NARA retired its endorsement of the older DoD 5015.2 certification approach in 2022 in favor of the Universal Electronic Records Management Requirements and the Federal Electronic Records Modernization Initiative (FERMI), which frame recordkeeping capabilities — including disposition controls — in functional, technology-neutral terms. The goal is the same: ensure that systems enforce, rather than undermine, lawful disposition.

Responding When It Occurs

When unauthorized destruction is suspected, agencies should act promptly: stop any ongoing deletion, preserve and attempt to recover affected records (including from backups), document the circumstances, and notify the agency records officer and NARA as required. A thorough after-action review should identify the process failure — an unscheduled series, a missed hold, a misconfigured system — and close that gap so the same loss cannot recur.

Ultimately, guarding against unauthorized destruction is a continuous discipline woven through scheduling, training, system design, and incident response. Agencies seeking to strengthen this discipline can explore related guidance across the broader federal records program, where disposition authority, retention, and recordkeeping responsibilities all connect.