What happens when an auditor finds we destroyed paper originals before quality control was completed on the scans?

Destroying paper originals before quality control (QC) is complete is one of the more serious findings an auditor can document in a digitization program. The core problem is sequence: in a sound scanning workflow, the source record is the safety net until the digital copy has been verified as a complete, accurate, and usable replacement. Destroying the original first removes that net before anyone has confirmed it was no longer needed.

What the Auditor Is Actually Evaluating

An auditor is rarely judging a single shredded box. They are testing whether your program had a defensible, documented process. Expect questions such as:

• Was there a written digitization and disposition procedure, and was it followed?
• Were originals authorized for destruction under an approved retention schedule or destruction authorization?
• Did QC steps (image completeness, legibility, indexing accuracy, file integrity) occur before destruction, with evidence?
• Are there logs, signoffs, or certificates showing who destroyed what, and when?

A finding usually reflects a broken or missing control more than a single mistake.

Likely Consequences

Consequences scale with the value and sensitivity of the records and the regulatory environment:

• Audit finding or corrective action. You may be required to document a remediation plan and tighten controls.
• Loss of records. If scans are later found incomplete or corrupted, the information may be unrecoverable.
• Legal and evidentiary risk. Records under litigation hold, statutory retention, or regulatory requirements that are destroyed prematurely can expose the organization to spoliation claims, penalties, or adverse inferences.
• Authenticity challenges. Without verified QC, the digital copy’s reliability as a trustworthy record can be questioned.

How to Respond and Prevent Recurrence

If the finding has already occurred, respond transparently: document the scope, assess which scans can be validated now, identify any irrecoverable gaps, and disclose to legal or compliance as appropriate.

To prevent recurrence, make destruction contingent on passing QC. Build a gated workflow where originals cannot be destroyed until verification is recorded, tie destruction to an approved schedule, and retain QC evidence and destruction logs.

For deeper guidance, see the digitization and imaging topic hub. FADGI offers technical quality benchmarks, and NARA policy guidance covers disposition authorization principles.