Is using auto-deleting messaging apps like Signal a violation of the Federal Records Act?

The short answer is: it depends on what the messages contain and whether they are being preserved. The app itself is not automatically a violation, but using auto-deletion to destroy federal records can be.

The Content Determines the Obligation

The Federal Records Act focuses on the substance of a communication, not the platform that carries it. Under federal recordkeeping law, a record is information made or received by an agency in connection with the transaction of public business that documents the agency’s organization, functions, decisions, policies, or activities — regardless of physical form or medium.

That means a message qualifies as a federal record based on what it says and why it was created, not on whether it was sent by email, text, chat, or an encrypted messaging app. If a Signal message documents official agency business, it is a record and must be managed accordingly.

Where the Risk Lies

The core problem with ephemeral, auto-deleting messages is not encryption or convenience — it is uncontrolled disposition. Federal records may only be destroyed under an authorized records schedule and following established procedures. If an app automatically erases messages that qualify as records before the agency has captured and retained them, that destruction is unauthorized and can violate the law.

Key principles to keep in mind:

• Capture before deletion. Records must be preserved in a recordkeeping system before any auto-delete feature removes them.
• Disposition must be authorized. Routine, automatic deletion is not a substitute for an approved retention schedule.
• Personal vs. official accounts. Using a non-official channel does not exempt a record from preservation requirements.

Practical Guidance for Agencies

Many agencies address this by either disabling disappearing-message features for official communications or by establishing a clear capture process — forwarding, exporting, or archiving qualifying messages into an approved system before they expire.

The safest posture is straightforward: if official business is conducted on a messaging app, treat those communications as potential records, evaluate them against your retention schedule, and preserve what qualifies. The tool is permissible; uncontrolled, unauthorized destruction of records is not.

For broader context on agency obligations, see the federal records hub.