What Is a Document Retention Notice? Preservation Duties and Sanctions

A document retention notice is a formal written directive to preserve all records, emails, messages, and other information that could be relevant to anticipated or ongoing litigation, a government investigation, or an audit. It is also called a litigation hold or preservation notice. The duty to preserve begins the moment litigation becomes reasonably foreseeable, not when a lawsuit is actually filed. If you ignore one, courts can impose sanctions ranging from adverse jury instructions to outright dismissal, and in cases tied to federal investigations, individuals can face criminal charges carrying up to 20 years in prison.

How It Differs From a Routine Retention Policy

These two things sound alike and do opposite work. A retention policy schedules the destruction of records on a regular cycle: old emails after two years, financial records after seven, and so on. Every well-run organization has one, and following it in the normal course of business is both legal and expected.

A retention notice suspends that policy. When litigation or an investigation is reasonably anticipated, the organization has to freeze destruction of anything potentially relevant, even if the retention schedule says it’s time to shred. The notice overrides the policy for as long as the legal matter is active. Most preservation failures start here: someone in operations keeps following the routine schedule without knowing a hold is in place, and evidence disappears on autopilot.

When the Duty to Preserve Begins

The duty does not wait for a filed complaint. It arises when a party has notice that evidence is relevant to litigation, or when a party should have known the evidence may be relevant to future litigation. Courts have consistently fixed the trigger point at the moment litigation is reasonably anticipated.1United States District Court for the District of Nebraska. Litigation Holds: Ten Tips in Ten Minutes

Events that commonly create that reasonable anticipation:

  • A filed lawsuit, a threatened lawsuit, or a demand letter from opposing counsel.
  • A subpoena or civil investigative demand from a federal agency.2Federal Trade Commission. A Brief Overview of the Federal Trade Commission’s Investigative, Law Enforcement, and Rulemaking Authority
  • An open government investigation. The SEC’s enforcement manual states that the duty to preserve arises when litigation is reasonably foreseeable and covers all forms of documents, including electronic communications on personal devices.3Securities and Exchange Commission. Division of Enforcement Manual
  • An internal investigation or audit that surfaces potential fraud, safety violations, or regulatory noncompliance.
  • A credible external signal such as a well-sourced news report of an impending investigation, a whistleblower complaint, or a regulatory inquiry letter.

Waiting for a formal lawsuit before preserving is waiting too long. If you can see it coming, you are already obligated.

What Has to Be Preserved

The scope of a preservation notice is deliberately broad. Federal Rule of Civil Procedure 34 reaches documents and electronically stored information — writings, drawings, graphs, photographs, sound recordings, images, and other data compilations — stored in any medium from which information can be obtained.4Legal Information Institute. Federal Rules of Civil Procedure Rule 34 – Producing Documents, Electronically Stored Information, and Tangible Things

In practice, a notice typically covers:

  • Paper records: contracts, handwritten notes, printed reports, invoices, and internal memos.
  • Email and messaging: work email, personal email used for business, text messages, Slack and Teams conversations, and voicemails.
  • Collaboration platforms: shared drives, SharePoint sites, Google Workspace files, and project management tools.
  • Databases and structured data: financial systems, CRM records, HR databases, and access logs.
  • Social media and web content: company social media posts, website content, and relevant employee social media activity.

A well-drafted notice identifies the relevant time period and names the specific custodians likely to possess responsive information. It should also specify the subject matter and, where possible, the types of documents expected.

Personal Devices

A litigation hold can reach employees’ personal phones, tablets, and laptops when those devices are used for work. The legal test is whether the organization has possession, custody, or control over the information. Courts have held that when a company knows employees use personal devices for business communications, the hold applies there too. The analysis is fact-specific and often turns on whether company policies give the organization a right to access data on personal devices. Bring-your-own-device programs need to address this before a legal matter arises; sorting it out mid-litigation is expensive and risky.

Cloud Providers and Third-Party Data

Preservation obligations do not stop at your own servers. Rule 34’s “possession, custody, or control” standard has been read to include documents a party has the right or practical ability to obtain from a third party.4Legal Information Institute. Federal Rules of Civil Procedure Rule 34 – Producing Documents, Electronically Stored Information, and Tangible Things If your contract with a cloud vendor or SaaS provider lets you access, export, or direct the handling of your data, a court will likely treat that data as within your control.

So notify your cloud providers and suspend any automated deletion routines they run on your behalf. If a vendor routinely purges data as part of its service and you fail to tell them to stop, you can face sanctions even though you never personally deleted anything. Review vendor contracts before a dispute arises; if the agreement doesn’t give you clear authority to direct preservation, negotiate that in.

What to Do After Receiving a Notice

Obligations are immediate and ongoing. The core duty is to stop destroying things, but executing that well involves several concrete steps.

Suspend all routine destruction. Every auto-delete setting, every scheduled purge, every shredding cycle that could touch relevant material has to halt. That includes IT-managed retention policies on email servers and backup systems. One federal court put it plainly: counsel must direct the client to ensure that documents are preserved, not deleted from any electronically stored information system or otherwise made unavailable.1United States District Court for the District of Nebraska. Litigation Holds: Ten Tips in Ten Minutes

Identify and interview custodians. Counsel should ask each custodian where relevant information actually lives, not just where IT thinks it lives. People keep things in unexpected places: personal Dropbox folders, private Slack channels, USB drives in a desk drawer, text threads on a personal phone. The gap between the official systems map and what employees actually do is where evidence gets lost.

Distribute the notice widely and get written acknowledgment. Everyone who might hold relevant information needs to receive it, confirm receipt, and understand what to preserve. That can include contractors and, in some cases, former employees who may still have relevant files.

Document everything. Keep records of when the hold issued, who received it, what instructions were given, and how compliance was monitored. If preservation is ever challenged, this paper trail is your defense.

Monitor over time. A hold is not a one-time memo. New custodians arrive, employees change roles, systems get migrated. Periodic reminders and compliance checks keep the hold from quietly eroding.

What Happens If You Fail to Preserve

When relevant information is lost because someone failed to preserve it, courts call it spoliation. For electronic evidence, Rule 37(e) of the Federal Rules of Civil Procedure governs, and the consequences turn on whether the loss was negligent or intentional.

Negligent Loss

When electronically stored information that should have been preserved is lost because a party failed to take reasonable steps to preserve it, and the information cannot be restored or replaced, a court may order measures no greater than necessary to cure the prejudice to the other party.5Legal Information Institute. Federal Rules of Civil Procedure Rule 37 – Failure to Make Disclosures or to Cooperate in Discovery Those curative measures can include letting the affected party present evidence about the loss to the jury, ordering additional discovery to fill the gap, or imposing monetary sanctions.

Note the threshold. The rule requires both that the party failed to take reasonable steps and that the lost information cannot be restored or replaced. If a backup exists or the same data can be obtained elsewhere, a court may impose no sanction at all.

Intentional Destruction

The harshest sanctions are reserved for parties that acted with intent to deprive the opposing side of the information’s use. Only on that finding can a court presume the lost information was unfavorable to the spoliating party, instruct the jury to draw that presumption, dismiss the case, or enter default judgment.5Legal Information Institute. Federal Rules of Civil Procedure Rule 37 – Failure to Make Disclosures or to Cooperate in Discovery

“Intent to deprive” is a high bar. Suspicious timing alone usually isn’t enough. Courts look for concrete evidence: accounts deleted without preservation steps, internal messages reflecting a decision to destroy evidence, or systematic wiping of devices after a hold issued. The split between negligent and intentional is the single biggest factor in how badly things go.

Criminal Exposure

Civil sanctions are not the only risk. Two federal statutes make document destruction a crime in connection with federal investigations or proceedings.

Under 18 U.S.C. § 1519, anyone who knowingly destroys, alters, or falsifies any record or document with intent to obstruct a federal investigation or any case filed under federal bankruptcy law faces up to 20 years in prison.6Office of the Law Revision Counsel. United States Code Title 18 Section 1519 – Destruction, Alteration, or Falsification of Records in Federal Investigations and Bankruptcy It applies to any matter within the jurisdiction of a federal agency, not just securities cases.

Under 18 U.S.C. § 1512(c), corruptly destroying or concealing a record or document with intent to impair its availability for use in an official proceeding is also punishable by up to 20 years.7Office of the Law Revision Counsel. United States Code Title 18 Section 1512 – Tampering with a Witness, Victim, or an Informant

These statutes rarely surface in routine commercial disputes. In matters involving government investigations, regulatory enforcement, or corporate fraud, they add personal liability that reaches well beyond anything a civil court can do. Individual employees and executives, not just the organization, can be prosecuted.

When the Hold Ends

A litigation hold does not last forever, but it does not expire on its own either. The duty to preserve continues until counsel determines the underlying matter is fully resolved: the litigation has concluded, appeals have been exhausted or waived, any settlement terms requiring preservation have been satisfied, and no related proceedings remain pending.

When that point arrives, the release should be as formal as the original hold. Counsel issues a written release notice to all custodians, identifies the matter being closed, and specifies which categories of documents can return to normal retention schedules. Record the decision, the case numbers, and the closure date in case questions come up later.

Lifting a hold too soon is as dangerous as never issuing one. If a related case is filed or an appeal is taken after you have resumed destruction, you face the same spoliation risks. When in doubt, keep the hold in place and revisit it periodically rather than releasing early.