Can a company be fined or sanctioned for not following ISO 15489 in a lawsuit?
The short answer
No court fines or sanctions an organization simply for “not following ISO 15489.” ISO 15489 is a voluntary international standard, not a statute or regulation. It describes good practice for managing records, but it does not carry penalties of its own, and no legal authority enforces it directly.
That said, the standard is not irrelevant to legal risk. The way a court evaluates an organization’s recordkeeping in a lawsuit can still be shaped by whether reasonable, recognized practices were followed.
Where the real legal exposure comes from
Sanctions in litigation typically arise from laws, regulations, and court rules, not from standards. Common triggers include:
- Spoliation — losing, altering, or failing to preserve records relevant to litigation, often after a duty to preserve has attached.
- Failure to produce — being unable to locate or produce records the law or discovery rules require.
- Statutory recordkeeping violations — breaking specific retention or recordkeeping rules set by tax, labor, privacy, or sector regulators.
These obligations come from the law itself. ISO 15489 simply offers a framework that helps an organization meet them.
How ISO 15489 can still matter in court
While the standard is not enforceable, it can influence outcomes:
- Defensibility. An organization that follows a recognized standard can show its records were created, retained, and disposed of through a consistent, good-faith program — not arbitrarily destroyed.
- Reasonableness. Courts often ask whether a party acted reasonably. Aligning with widely accepted practice helps demonstrate that.
- Authenticity and reliability. Sound records controls support arguments that records are trustworthy evidence.
Conversely, ignoring basic recordkeeping discipline can make it harder to defend against spoliation claims or to produce records on demand.
Practical takeaway
Think of ISO 15489 as a roadmap, not a rulebook. Compliance with the standard is not legally mandatory, and non-compliance is not directly punishable. But a program built on its principles makes it far easier to satisfy the actual laws and discovery obligations that do carry sanctions.
For broader context on how voluntary standards and binding requirements fit together, see the compliance and standards hub. When litigation is foreseeable, focus first on legal duties to preserve and produce records — that is where fines and sanctions truly originate.
Sources & further reading
Authoritative government and non-profit references.
- ISO 15489-1 Records management — ISO
- The Sedona Conference publications — The Sedona Conference
How to cite this page
APA
RM University Editorial. (2026). Can a company be fined or sanctioned for not following ISO 15489 in a lawsuit?. Records Management University. https://www.recordsmgmt.org/questions/can-a-company-be-sanctioned-for-not-following-iso-15489/
MLA
RM University Editorial. "Can a company be fined or sanctioned for not following ISO 15489 in a lawsuit?." Records Management University, 16 June 2026, www.recordsmgmt.org/questions/can-a-company-be-sanctioned-for-not-following-iso-15489/.
Related questions
- Can a commercial off-the-shelf system meet the NARA Universal ERM Requirements without being DoD 5015.2 certified?
- Can a US company store its records on servers in another country, and what cross-border data rules apply?
- Can following ISO 15489 actually help us pass an audit or hold up in court?
- Can I just adopt ISO 15489 word-for-word as our records policy, or does it not work that way?
- Can I just pick whichever records standard is easiest, since DoD 5015.2, ISO 15489, and ISO 16175 all basically do the same thing?