How long do I have to keep emails?

There is no single answer to how long you must keep email. The honest reply is: it depends on what the email is, not on the fact that it arrived as email. Retention is driven by the content and function of each message, the rules that apply to your organization, and any active legal holds.

Content Determines Retention, Not Format

Email is a transmission method, not a record category. A message may be a formal record, a transitory note, or pure spam, and each carries a different obligation:

• Record-status email must be kept for as long as the underlying business activity requires. A contract approval sent by email is governed by the same rules as that contract in any other format.
• Transitory or non-record email (meeting confirmations, “thanks,” routine FYIs) can typically be deleted after short-term reference value ends.

The practical step is to map email content to the categories in your retention schedule, rather than applying one blanket rule to the whole mailbox.

Follow Your Retention Schedule

Required periods come from your organization’s approved retention schedule, which in turn reflects applicable laws, regulations, and operational needs. Periods vary widely, from a few months for routine correspondence to many years (or permanent retention) for records with legal, fiscal, or historical value.

U.S. federal agencies look to the National Archives, including the General Records Schedules, for governing email retention requirements. Private organizations build schedules from the statutes and regulations that apply to their industry. If your organization has not yet classified email, that is the first gap to close.

Watch for Legal Holds and Overrides

Two situations override normal retention:

1. Litigation or investigation holds. Once you reasonably anticipate litigation, audit, or an investigation, you must preserve relevant email even if its scheduled disposition date has passed. Deleting it could expose your organization to spoliation claims.
2. Special-category content. Email containing privacy-protected, financial, or regulated information may carry its own minimum retention and protection rules.

Bottom Line

Keep email as long as its content requires under your retention schedule, dispose of non-records routinely and defensibly, and freeze everything subject to a hold. For more guidance, see the email and messaging topic hub.