Does turning on auto-delete or inbox cleanup rules in Outlook get me in trouble?

The short answer is: it depends entirely on what the rules delete and whether anything they touch is a record or subject to a legal hold. Auto-delete and inbox cleanup features are not inherently risky, but turning them on without understanding your obligations can be.

When auto-delete is fine

Plenty of email is transitory: meeting confirmations, spam, routine notifications, and personal messages that document nothing about your organization’s activities. Cleaning these up automatically is good hygiene and usually carries no consequence.

The key idea is that retention is determined by content and function, not by the folder a message sits in. If a message has no business value and is not a record, deleting it is appropriate.

When it gets you in trouble

You can create real problems when automated rules sweep away messages that are:

• Records that must be kept for a defined retention period. Destroying a record before its retention expires can violate recordkeeping laws and your own policy.
• Under a legal hold or litigation hold. Once you reasonably anticipate litigation, investigation, audit, or a public-records request, the duty to preserve overrides any routine deletion schedule. Letting auto-delete run anyway can be treated as spoliation, with serious legal consequences.
• Subject to a FOIA, discovery, or regulatory request. Deleting responsive material after a request lands is a significant exposure.

Importantly, “the rule did it automatically” is generally not a defense. Knowingly leaving destructive automation running on records you were obligated to keep can look worse than a one-off mistake.

How to stay safe

• Confirm your organization’s email retention policy and any active legal holds before enabling any automatic deletion.
• Scope cleanup rules narrowly to clearly transitory folders, not to inboxes or sent items that may hold records.
• Suspend or exclude any account, folder, or message that is under hold; coordinate with legal or records staff first.
• Document what your rules do and why, so deletion is defensible and consistent.

When in doubt, keep the message and ask your records or legal contact. Quietly deleting something you were supposed to preserve is far harder to undo than reviewing it later.

For more guidance, see the email and messaging topic hub.