What evidence do you need to defend the destruction of an electronic record in court?

When destruction of an electronic record is challenged, courts generally do not ask whether you deleted something. They ask why you deleted it, whether you were allowed to, and whether you could see it coming. Defensible disposition rests on documentation that answers those questions before anyone files a complaint.

The core evidence

To defend a routine deletion, you typically need to show:

• A retention authority. A current, approved records retention schedule that covers the record series and prescribes the disposition. The record must have reached the end of its required retention period.
• Consistent, routine practice. Proof that the deletion followed your established program applied uniformly, not a one-off decision aimed at a particular matter or adversary.
• No legal hold in effect. Evidence that, at the time of destruction, no litigation hold, audit, investigation, or other preservation obligation attached to the record.
• An audit trail. A disposition log or system-generated record showing what was destroyed, under what schedule item, when, by whom, and with what authorization.

Why process matters more than the file

Because the deleted record itself is gone, courts evaluate the system that produced the deletion. A documented, repeatable program supports an inference of good faith. Ad hoc or undocumented deletions invite the opposite inference and can expose an organization to sanctions for spoliation.

Timing is decisive. The duty to preserve generally arises when litigation is reasonably anticipated, not only when a suit is filed. Destruction after that trigger, even under an otherwise valid schedule, is hard to defend. Suspending normal disposition through a prompt legal hold is therefore central.

Strengthen your position

• Maintain version-controlled retention schedules and document approvals.
• Keep immutable disposition logs and metadata showing the basis for each deletion.
• Document your legal-hold process and how holds suspend automated destruction.
• Show reasonable, good-faith operation of the records system over time.

For deeper background on managing digital records and their lifecycle, see the electronic records hub.

The takeaway: you defend a deletion not with the file, but with proof that it was authorized, routine, timely, and free of any preservation duty.