Evidence Preservation: Litigation Holds, Duties, and Spoliation

Evidence preservation is the legal duty to protect documents, data, and physical items from destruction or alteration once you reasonably expect a lawsuit, and it begins well before any complaint is filed. Miss that duty and a federal court can impose measures ranging from extra discovery costs to an adverse jury instruction or even default judgment. Meet it, and you protect both your case and your credibility with the court. The details of when the duty starts, what it covers, and how to document your efforts are what separate a party the court trusts from one it sanctions.

When the Duty to Preserve Starts

Your obligation kicks in the moment litigation is reasonably anticipated. This is an objective test: if a reasonable person in your position would expect a lawsuit, the duty is triggered whether or not you personally saw it coming. Being served with a complaint obviously counts, but the duty usually attaches earlier. A workplace accident, a demand letter from an attorney, a government investigation notice, or a heated email threatening legal action can all flip the switch.

The framework most federal courts follow comes from Zubulake v. UBS Warburg, which held that once litigation is reasonably anticipated a party “must suspend its routine document retention/destruction policy and put in place a ‘litigation hold’ to ensure the preservation of relevant documents.”¹ Automated deletion schedules, email purge cycles, and backup tape recycling all have to stop for anything potentially relevant. The duty runs to counsel first, who must then advise the client on what to retain.²

The duty is not unlimited in time or imagination. You do not have to anticipate every possible claim or freeze every document you have ever created. It applies to information relevant to the anticipated dispute, and courts judge reasonableness in light of what you knew and what resources you had at the time, not with hindsight.

What You Need to Preserve

Preservation tracks the scope of discovery. Under Federal Rule of Civil Procedure 26(b)(1), discoverable information includes any nonprivileged material relevant to a claim or defense and proportional to the needs of the case.³ In practice, that reaches a wide range of formats.

Electronically stored information, commonly called ESI, dominates modern preservation. ESI includes emails, text messages, instant messages, spreadsheets, database records, server logs, voicemails, and cloud-stored files. Metadata matters just as much. Metadata is the background data embedded in a file showing when it was created, modified, or accessed, and by whom. A document’s metadata can establish a timeline or prove that a file was altered even when the visible text looks unchanged.³

Physical evidence still counts in cases that involve it. Paper files, handwritten notes, defective products, security camera recordings, and the devices themselves may all fall within the duty. In a product liability case, the failed component is often the single most important piece of evidence. In a construction dispute, original blueprints and inspection reports can decide the outcome. Keep everything in its original state until the case is resolved or counsel confirms preservation is no longer necessary.

Ephemeral Messages and Personal Devices

Apps with auto-delete features create one of the trickiest preservation problems in modern litigation. Signal, Telegram, and WhatsApp can be configured to destroy messages after a set period. If your preservation duty has been triggered and you allow those messages to vanish, courts treat the loss the same way they treat deleting emails. The auto-delete feature is not a defense; it is the problem.

Federal regulators have made this explicit. The Department of Justice and the Federal Trade Commission have updated their standard document preservation letters to specifically address ephemeral messaging applications, and DOJ officials have warned that obstruction of justice charges can follow from letting auto-delete destroy relevant messages during an investigation.

Personal devices add another layer. When employees use their own phones for work, courts have reached different conclusions about whether the employer controls that data for preservation purposes. Some have found that directing employees to use personal phones for work gives the employer control over those messages. Others have required proof that the employer had a legal right to demand the data. The safest approach is a written policy requiring employees to preserve work-related messages on personal devices and granting the company access during litigation. Without one, you are gambling on how your particular court interprets control.

How Far the Duty Reaches: Proportionality and Inaccessible Data

Preservation is not unlimited. Courts apply the same proportionality analysis to preservation that governs discovery generally. Under Rule 26(b)(1), six factors shape what counts as reasonable: the importance of the issues, the amount in controversy, each party’s relative access to relevant information, the parties’ resources, how important the discovery is to resolving the case, and whether the burden outweighs the likely benefit.³ A small business facing a $50,000 claim is not expected to spend six figures preserving every backup tape.

Rule 26(b)(2)(B) specifically addresses data that is not reasonably accessible because of undue burden or cost. Disaster-recovery backup tapes, legacy systems that require specialized software to read, and decommissioned servers all fall into this category. If you identify sources as not reasonably accessible, you do not have to produce them in discovery unless the requesting party shows good cause and the court orders it. Here is the catch: identifying data as inaccessible does not eliminate your duty to preserve it.³ You still cannot destroy those backup tapes. You just may not have to search them unless a court says otherwise. When a court does order production, it can shift some or all of the extraction costs to the requesting party, though cost-shifting is a last resort.

Running a Litigation Hold

A litigation hold is the internal mechanism that makes preservation actually happen. Issuing one is not optional once litigation is reasonably anticipated, and doing it poorly can be as damaging as not doing it at all.

The notice should come from counsel, in-house or outside, and go to every employee who might have relevant information. These employees, called custodians, are the people whose files, emails, and devices need to be frozen. The Zubulake court set the standard still followed today: counsel must become familiar with the client’s data storage systems, communicate directly with key players, and take affirmative steps to monitor compliance. Sending a company-wide email and hoping for the best is not enough. The court held that placing “total reliance on the employee to search and select” relevant records without supervision is inadequate.¹

An effective hold notice should cover:

The reason for the hold, with a brief description of the dispute or anticipated litigation
The scope of relevant information, including document types, date ranges, and subject matter
Specific instructions to suspend auto-delete on emails, preserve text messages, avoid altering files, and retain physical documents
Named custodians and departments covered
A clear warning that destroying relevant evidence can result in sanctions against the company and the individual

Reissue the hold periodically so new employees learn about it and existing custodians are reminded. This is where most companies fail. They issue the initial hold and forget it for two years. By the time discovery starts, half the custodians have changed roles and nobody remembers what they were supposed to keep.⁴

Sending a Preservation Letter to the Other Side

A preservation letter is the external counterpart to an internal hold. You send it to the opposing party to put them on formal notice that they must preserve evidence tied to the dispute. A well-drafted letter does two things: it triggers or reinforces the recipient’s preservation duty, and it creates a paper trail you can point to later if evidence goes missing.

Make the letter specific enough that the recipient cannot plausibly claim they did not understand what to preserve. Include:

The parties involved and the nature of the anticipated claims
Named custodians likely to have relevant information
A date range for relevant records, typically starting from the incident
Categories of information: emails, text messages, financial records, contracts, photographs, and physical items
A request that electronic files be preserved in native format so metadata stays intact
Specific systems, including cloud storage platforms, messaging apps, internal databases, and physical storage locations
An explicit instruction that automated deletion cycles for emails, backups, and messaging apps be suspended immediately

Vague letters invite vague compliance. If you write “preserve all relevant documents,” the recipient’s definition of relevant will be narrower than yours. The more precisely you describe what needs to be kept, the harder it becomes for the other side to claim the loss was accidental.

How you deliver the letter matters, because you may need to prove the other side received it. Certified mail with return receipt requested is the standard approach and gives you a signed record of exactly when the document arrived.⁵ A process server who hand-delivers the letter and signs an affidavit of service eliminates any dispute about receipt. If the opposing party has an attorney, send it to counsel as well. Keep copies of everything: the letter, the delivery receipt, any confirmation emails, and notes of follow-up conversations.

What Happens When Evidence Is Lost

Spoliation is the destruction, alteration, or failure to preserve evidence after the duty to do so has been triggered. Federal Rule of Civil Procedure 37(e) governs what happens when ESI is lost, and it draws a sharp line between negligent and intentional destruction.

The rule applies only when three conditions are met: the ESI should have been preserved for litigation, it was lost because the party failed to take reasonable steps to preserve it, and it cannot be restored or replaced through additional discovery. If the lost data can be recovered from another source, whether backups, third-party records, or other means, the rule does not authorize any sanctions.⁶

Negligent Loss

When the failure was negligent rather than intentional, Rule 37(e)(1) allows the court to impose “measures no greater than necessary to cure the prejudice” to the other party.⁶ The requesting party must show actual prejudice. Remedies might include allowing additional discovery from alternative sources, precluding certain arguments the spoliating party would otherwise make, or awarding fees to cover the cost of investigating the loss. The remedy must be proportional to the harm.

Intentional Destruction

The harshest consequences are reserved for parties that acted with the intent to deprive the other side of the evidence. Under Rule 37(e)(2), if the court finds that intent, it may:

Presume the lost information was unfavorable to the party that destroyed it
Instruct the jury that it may or must presume the information was unfavorable
Dismiss the case or enter a default judgment against the offending party

These sanctions are available only on a finding of intent to deprive, not mere negligence or, in some circuits, even recklessness.⁶ That intent standard is the most important distinction in spoliation law. An adverse inference instruction, which tells the jury to assume the destroyed evidence would have hurt the party that lost it, can effectively decide a case. Courts do not hand out that weapon for sloppy record-keeping alone. Monetary sanctions can still be substantial, and courts retain inherent authority to sanction bad-faith conduct with attorney fee awards and other penalties.

Showing You Took Reasonable Steps

Rule 37(e) is not a strict liability rule. If you took reasonable steps to preserve ESI, no sanctions are available under the rule even if some information was lost. Perfection is not the standard. The advisory committee notes acknowledge that “due to the ever-increasing volume of electronically stored information and the multitude of devices that generate such information, perfection in preserving all relevant electronically stored information is often impossible.”⁶

Courts evaluate reasonableness by what you actually did: whether you issued a litigation hold, how quickly you acted, whether you identified key custodians, whether you monitored compliance, and whether your efforts were proportional to the case. The routine, good-faith operation of an electronic information system is a factor in your favor, though the prospect of litigation may require you to intervene in that routine operation. Courts also consider your sophistication. An individual litigant who has never been in a lawsuit before is held to a different standard than a large company with a legal department and e-discovery vendors on retainer.

Events beyond your control also factor in. If a flood destroys your server room, a cloud provider suffers a catastrophic failure, or a cyberattack corrupts your storage systems, those losses do not automatically trigger sanctions. Courts may still examine whether you knew about and protected against foreseeable risks, but a genuinely unforeseeable disaster is not spoliation.

Document everything you do. Issue the hold in writing. Keep records of who received it and when. Follow up. A party that did the right things but cannot prove it is in far worse shape than one with a paper trail of reasonable preservation efforts.

1
United States Courts. Zubulake Revisited: Pension Committee and the Duty To Preserve
2
Montana Secretary of State. href=”https://sosmt.gov/Portals/142/Records/E-ZubulakeV.pdf” target=”_blank” rel=”noopener”>Zubulake v. UBS Warburg LLC (S.D.N.Y. 2004)
3
Legal Information Institute. Federal Rules of Civil Procedure Rule 26
4
Montana Secretary of State. Zubulake v. UBS Warburg LLC (S.D.N.Y. 2004)
5
USPS. Certified Mail – The Basics
6
Legal Information Institute. Federal Rules of Civil Procedure Rule 37 – Section: (e)