Spoliation of Evidence: How to Protect Your Clients' Email Records

Email spoliation is one of those issues that small firm attorneys hear about in CLE seminars, file away as someone else's problem, and then encounter at the worst possible moment in an active case.

The moment usually looks like this: a deposition reveals that the client deleted a folder of relevant emails after litigation became reasonably foreseeable. Or a corporate client's IT department ran its normal 90-day auto-purge right through the relevant period. Or a key employee left and the company wiped their account before anyone thought to ask whether it contained anything responsive.

Suddenly you're not litigating the merits. You're litigating a sanctions motion.

This guide covers what email spoliation of evidence actually means, what courts can do about it, and how small law firms can protect their clients before the problem starts.

What Is Spoliation of Evidence?

Spoliation is the destruction, alteration, concealment, or failure to preserve evidence that a party knew or should have known was relevant to pending or reasonably anticipated litigation.

The key phrase is "reasonably anticipated." You don't need a lawsuit to be filed. You don't need a court order. The duty to preserve attaches when litigation becomes reasonably foreseeable, which can happen well before any formal legal proceedings begin. A threat letter from opposing counsel. A demand for compensation. An internal HR complaint that signals a potential wrongful termination claim. Any of these can trigger the duty.

Email is almost always at the center of spoliation disputes because it is where modern business communication happens, it is easy to delete, and most organizations have no systematic preservation process in place when litigation comes up.

What Courts Can Do About It

Spoliation sanctions exist on a spectrum. Courts have significant discretion, and the severity of the sanction typically tracks the degree of fault and the prejudice to the opposing party.

Adverse inference instructions. The most common sanction. The jury is instructed that it may infer the destroyed evidence would have been unfavorable to the spoliating party. In practice, this is often outcome-determinative. Jurors tend to draw the inference.

Issue preclusion. The court rules that certain facts are established as a matter of law, often the exact facts the destroyed evidence would have addressed. The spoliating party loses the ability to contest those issues at trial.

Evidence exclusion. The court bars the spoliating party from introducing certain evidence at trial, or limits the testimony of witnesses whose communications were destroyed.

Monetary sanctions. Courts can award attorneys' fees and costs incurred because of the spoliation, including the cost of discovery motions, expert fees, and additional depositions.

Default judgment or dismissal. Reserved for egregious cases involving willful destruction, but it happens. Courts have entered default judgment against parties whose intentional deletion of emails made a fair trial impossible.

Under Federal Rule of Civil Procedure 37(e), which governs ESI, courts can impose the most serious sanctions, including adverse inference instructions and default, only if they find that a party "acted with the intent to deprive another party of the information's use in the litigation." For negligent or even grossly negligent destruction, courts are limited to less severe measures. But less severe still means sanctions, and sanctions mean time, money, and sometimes malpractice exposure.

The Most Common Ways Clients Destroy Email Evidence

Understanding how spoliation happens is the first step to preventing it. Most spoliation by small business clients is not intentional. That doesn't make it harmless.

Routine auto-deletion policies. Many companies run 30, 60, or 90-day email retention policies. When litigation becomes foreseeable, that policy needs to be suspended for potentially relevant custodians. If no one tells IT to put a hold on it, the auto-purge runs on schedule.

Employee departures. When an employee leaves, IT often archives or deletes their email account within days or weeks. If that employee was a key custodian in a potential dispute, those emails are gone.

Manual deletion after a dispute arises. Sometimes clients delete emails they think are damaging. Sometimes they delete emails they believe are irrelevant. Courts tend to be skeptical of the distinction when the deletion happened after the duty to preserve attached.

Cloud platform transitions. A company migrates from one email platform to another and doesn't export everything. Or they cancel an account with a legacy provider. Email that existed one day is simply gone the next.

Mobile device wipes. Business email accessed on personal or company phones. The phone gets wiped when an employee leaves, or a company mobile device management policy triggers a remote wipe during a dispute.

"I thought it was backed up somewhere." It was not.

How to Get Ahead of Spoliation Risk

The time to address email preservation is not after opposing counsel files a sanctions motion. It is before litigation starts, ideally before any dispute has fully materialized.

Issue a Litigation Hold Immediately

When you identify that litigation is reasonably foreseeable, your first call to the client should include an instruction to stop deleting anything potentially relevant. Follow that call with a written litigation hold notice.

The litigation hold notice should:

• Identify the categories of documents and communications to be preserved
• Name specific custodians whose email must be preserved
• Instruct recipients to suspend any automatic deletion policies
• Direct recipients to preserve email in all formats and on all devices, including mobile phones
• Confirm receipt and compliance in writing

Send it to the client immediately. Send it to all relevant custodians. Document that you sent it. Document who received it and when.

A litigation hold is not a guarantee against sanctions, but it demonstrates good faith and establishes that the attorney took the duty to preserve seriously. Courts weigh that.

Identify the Relevant Custodians

This takes active effort. The obvious custodians are the named parties and key witnesses. But email chains often involve people who are not central to the dispute and whose inboxes contain relevant communications anyway.

Walk through the key events with your client. Who was on the email thread about the contract negotiation? Who got copied on the complaint from the HR investigation? Who communicated with the vendor whose performance is in dispute? Make a list. The list is usually longer than clients expect.

Collect Sooner, Not Later

Getting the email out of the client's environment and into a controlled collection early eliminates a category of risk. Email that has been collected cannot be accidentally auto-deleted. It cannot be destroyed by a departing employee. It is fixed.

Collection does not mean production. You still have time to review for privilege, scope, and relevance before anything goes to opposing counsel. But collection locks the record.

For small clients without enterprise email platforms, this can be as simple as exporting the relevant accounts to a PST file or using a cloud export tool. For clients on Google Workspace or Microsoft 365, both platforms have legal hold and export features built in. Use them.

Confirm IT Knows What's Happening

Clients often fail to communicate litigation holds to their IT departments. The attorney tells the general counsel. The general counsel forgets to loop in IT. IT runs its monthly purge.

Make it part of your standard practice: when you issue a litigation hold, confirm that IT has received it and that the relevant auto-deletion policies have been suspended. Get that confirmation in writing if you can.

Document the Preservation Process

If a sanctions motion comes later, your documentation of the preservation process is your defense. Keep records of:

• When the hold notice was issued and to whom
• Who acknowledged receipt
• What steps were taken to suspend auto-deletion
• When collection occurred and what was collected
• Any gaps identified and how they were addressed

This is the kind of thing that feels like paperwork overhead during a busy case. It is not paperwork. It is protection.

When You Discover That Something Was Deleted

Despite best efforts, spoliation sometimes happens. How you respond when you discover it matters as much as what was destroyed.

Tell your client to stop. If ongoing deletion is occurring, the first priority is stopping it.

Assess what happened. Was it intentional? Was it routine auto-deletion that should have been suspended? When did it occur relative to when the duty to preserve attached? The answers affect your exposure and your options.

Consider disclosure. Attempting to hide spoliation that is likely to come out in discovery almost always makes the situation worse. Courts are more forgiving of parties who disclose problems proactively than of parties who conceal them until opposing counsel discovers the gap.

Explore recovery options. Deleted email is often recoverable. IT forensics specialists can recover deleted messages from mail servers, backup systems, and devices that haven't been overwritten. Before concluding that something is gone, find out whether it can be retrieved.

Consult with a discovery expert. If the spoliation is significant, consider whether you need outside counsel with specific eDiscovery expertise, particularly if sanctions are likely and the amount in controversy justifies it.

The Practical Reality for Small Firm Attorneys

Spoliation doctrine was developed in an era when documents were physical. It has been applied to email in ways that can feel unforgiving, particularly when the client's failure was negligent rather than intentional.

Small firm clients often don't have legal departments, records management policies, or any systematic approach to preservation. They hire you partly to know what they don't know. Making them aware of the duty to preserve email, and helping them comply with it, is part of the representation.

The good news: most spoliation problems are preventable with early action. Issue the hold notice quickly. Get the email out of the client's environment promptly. Document the process. Those three things will protect most clients from most spoliation risks.

A Note on Tools

Building and preserving a clean email record is easier when you have the right tools. ThreadLine lets attorneys and their clients organize email evidence into clear, chronological timelines with full metadata preserved, whether that's for a litigation hold review, a privilege log, or trial preparation.

If you're collecting email for a case and need to make sense of a large volume of correspondence quickly, ThreadLine can turn a messy export into a structured, searchable timeline in minutes. Your first timeline is free at threadline.app.