Do I need to suspend auto-delete and snapshot rotation when a legal hold attaches to a system?
Often, yes. When a legal hold attaches, your duty is to preserve information that is relevant and reasonably accessible. If automated processes would destroy that information, you generally must suspend or work around them. But the answer depends on what each process actually deletes and whether the same data is preserved elsewhere.
Why automated deletion matters
Routine systems quietly destroy data on a schedule:
- Auto-delete / retention rules purge email, chat, or documents after a set period.
- Snapshot and backup rotation overwrites or expires point-in-time copies.
- Log truncation, cache clearing, and version pruning can erase relevant metadata.
A legal hold does not pause itself. If these jobs keep running against data within scope, relevant evidence can disappear after the duty to preserve arose. Courts treat the failure to preserve discoverable information as potential spoliation, which can carry serious consequences.
What to suspend versus scope carefully
You do not have to freeze everything. The goal is to preserve what is relevant, not to halt all operations:
- Suspend auto-delete, rotation, or purge jobs that touch data within the hold’s scope when no other reliable copy exists.
- Scope the hold to relevant custodians, systems, and date ranges so you are not over-collecting or over-burdening the business.
- Verify that any alternative preservation (a full export or a litigation copy) actually captures the same content and metadata before letting a rotation resume.
Practical steps
- Identify the systems and data types likely to hold relevant information.
- Coordinate early between legal, records/IG, and IT so technical controls match the legal duty.
- Document what you suspended, when, and why, and confirm the suspension took effect.
- Reassess as the matter evolves and lift holds only when the obligation ends.
Under the U.S. Federal Rules of Civil Procedure, the duty to preserve generally arises when litigation is reasonably anticipated, not only when a complaint is filed. Rules and standards differ across state courts and other countries, so confirm the obligations that apply to your matter.
For broader context on preservation and collection, see e-discovery. When in doubt, suspend automated destruction first and narrow the scope later with counsel.
Sources & further reading
Authoritative government and non-profit references.
- Federal Rules of Civil Procedure — U.S. Courts
- The Sedona Conference publications — The Sedona Conference
How to cite this page
APA
RM University Editorial. (2026). Do I need to suspend auto-delete and snapshot rotation when a legal hold attaches to a system?. Records Management University. https://www.recordsmgmt.org/questions/suspend-auto-delete-snapshots-under-legal-hold/
MLA
RM University Editorial. "Do I need to suspend auto-delete and snapshot rotation when a legal hold attaches to a system?." Records Management University, 16 June 2026, www.recordsmgmt.org/questions/suspend-auto-delete-snapshots-under-legal-hold/.
Related questions
- A key custodian left the company—how do we preserve and collect their email and files after they're gone?
- An employee admitted to deleting emails relevant to a lawsuit—what do we do now?
- Are curative measures or monetary fines available when lost data can be replaced through other sources?
- Can a company be sanctioned for spoliation when an employee auto-deleted text messages or ephemeral chats?
- Can a court order cost-shifting or limit search terms when keyword searches return an unmanageable hit count?