The Litigation Hold and Who Must Receive It
A hold notice is the instrument that turns an abstract preservation duty into instructions people can follow. Its value in a later dispute depends less on its wording than on who received it, when, and what was done to confirm compliance.

The rule in short
A litigation hold is a written instruction suspending the ordinary destruction of records connected to an anticipated or pending matter. It identifies custodians, describes the subject matter, names the categories and systems involved, and directs recipients to stop deleting. Courts assess holds by the reasonableness of the steps taken rather than by any prescribed form, and follow-up with custodians carries as much weight as the original notice.
The hold notice is the point at which a legal conclusion becomes an operational instruction. Someone has decided that litigation is anticipated; the notice tells named people what that means for the files on their laptops and the messages in their mailboxes. It is a short document, rarely more than two pages, and it is examined line by line whenever evidence goes missing.
What the notice actually does
A hold does two things that nothing else in the process does. It communicates a specific instruction to the individuals who hold relevant material, and it creates a record that the instruction was given. Neither is required by rule. Rule 37(e) asks only whether reasonable steps were taken, and a hold is the ordinary way of demonstrating that they were.
The instruction is negative rather than positive. Custodians are told to stop routine destruction, not to gather material and send it anywhere. Collection is a separate exercise conducted under controlled conditions, and asking employees to forward copies of their own files tends to produce altered metadata and incomplete sets. The notice should make that division explicit so that a well-meaning recipient does not begin sorting files.
The second function matters more than it appears. An organization defending its preservation effort has to describe what it did, and a documented notice with a distribution list answers most of that question at once. Without one, the defense rests on recollection, which does not survive cross-examination well.
Identifying who must receive it
Custodian identification is the step most often criticized, because a person left off the list keeps deleting. The starting point is the people who participated in the events underlying the dispute, but the list rarely stops there. Supervisors who reviewed decisions, assistants who kept calendars, and departed employees whose accounts still exist all hold material that a narrow list misses.
| Recipient | Why included | What is asked |
|---|---|---|
| Employees involved in the underlying events | Primary holders of relevant records | Stop deleting; leave material in place |
| Supervisors and reviewers | Decision records and approvals | Stop deleting; identify additional sources |
| Systems and messaging administrators | Control retention settings and backups | Suspend automated deletion and rotation |
| Records management staff | Operate the disposal schedule | Freeze scheduled destruction for the subject matter |
| Departing employees and their managers | Accounts and devices due to be wiped | Suspend reimaging and account deletion |
The list is not fixed at the outset. Discovery routinely reveals a team nobody thought of, and courts have treated the failure to add custodians once their relevance became obvious as a distinct failure. Revisiting the list at intervals is part of maintaining the hold, and the revision history is itself useful evidence of diligence.
What a notice needs to contain
There is no prescribed form, and a notice loaded with legal recitation is less effective than a plain one. What recipients need is the subject matter in terms they recognize, the categories and date ranges involved, the systems it covers, and an unambiguous statement that ordinary deletion stops. A named contact for questions prevents individual guesswork about edge cases.
The most common defect is abstraction. A notice referring to "all documents relating to the matter" gives an employee no way to decide whether a particular thread is covered. Naming projects, products, accounts and counterparties converts the instruction into something a person can apply without judgment calls, and it narrows the argument later about what the notice reasonably conveyed.
Format matters for the same reason. A notice buried in a long attachment sent to a distribution list competes with everything else in a mailbox. Organizations that treat the hold as an operational instruction rather than a legal memorandum — short, direct, sent from a name recipients recognize — generally get better compliance, and compliance is the only thing the reasonable-steps test measures.
Overbreadth carries its own cost. A notice that sweeps in every system and every employee is easy to write and impossible to maintain, and it invites the argument that the organization never seriously considered scope. Where a hold has to be broad at the outset because the dispute is not yet defined, narrowing it in a documented second round is better than leaving an unworkable instruction in place indefinitely.
An instruction to a custodian cannot stop a server-side retention policy that runs on a schedule. Those policies are changed by administrators, not by the people whose messages they delete, and the two steps have to happen together. A hold circulated to fifty employees while the automatic purge continued running preserves nothing that the purge was going to take.
Reminders, confirmation and supervision
A hold issued once and never mentioned again decays. People change roles, new employees join a project already under hold, and the original instruction is forgotten within a matter of months. Periodic reissue to the current custodian list is the ordinary answer, and it also forces a review of whether the list is still accurate.
Reissue is also the mechanism by which a hold keeps pace with a case. Claims are amended, new parties appear, and a dispute that began as a contract argument acquires an employment component. Each of those changes the categories that matter, and a notice that still describes the original dispute understates what is now relevant.
Acknowledgment tracking serves a related purpose. Requiring recipients to confirm receipt converts an assumption into a record, and the small number who never respond are exactly the ones worth contacting directly. Courts have not required acknowledgment as such, but they have drawn adverse conclusions where an organization could not say whether a custodian ever read the notice.
Supervision by counsel closes the loop. The reasonable-steps inquiry looks at whether anyone verified that the instruction produced the intended result — that deletion actually stopped, that the departing employee's laptop was not reimaged, that the shared drive was not archived and purged. Verification is also the natural moment to begin a controlled collection of the material now frozen in place.
Proving the hold in a later dispute
When preservation is challenged, the organization is usually examined through a deposition of a designated representative under Rule 30(b)(6). The witness is asked when the duty was recognized, who decided the scope, which custodians were identified and on what basis, and what was done to confirm compliance. Those are questions about process, and they are answered from records or not at all.
The material that answers them is the distribution list, the acknowledgment log, the administrator ticket suspending retention, and the revision history of the custodian list. Whether the notice itself must be produced varies, but the surrounding facts are generally discoverable regardless. An organization that can lay out the sequence from the point litigation became foreseeable to the last reminder is defending a documented process; one that cannot is defending a recollection. The same records govern the far less examined question of when the hold is allowed to end.
Points to carry away
- A hold notice translates the preservation duty into concrete instructions for identified people.
- Custodian identification is the step most often criticized, because a missing custodian means missing records.
- No rule prescribes the content of a hold; reasonableness is measured by what was actually preserved.
- Reminders and compliance confirmations are treated as part of the hold, not as optional extras.
- Holds are also issued to systems administrators, not only to individual employees.
- The record of issuance and acknowledgment is what an organization relies on if the hold is challenged.
Questions readers ask
Is a hold notice protected by privilege?
The notice is usually written by counsel and often claimed as privileged or as work product. Courts have taken differing views. Many treat the substance of the notice as privileged while requiring disclosure of the underlying facts: when it was issued, who received it, and what systems it covered. Where spoliation is seriously in issue, some courts have ordered production of the notice itself on the reasoning that a party relying on the hold as a defense has put its adequacy in dispute.
Does a hold have to be in writing?
No rule requires a written notice, and an oral instruction can in principle satisfy the duty. In practice a written record is close to essential, because the party defending its preservation effort carries the burden of describing what it did. An oral instruction leaves nothing to produce and depends on the memory of the people who received it. Written notices also make it possible to demonstrate scope, timing and coverage without calling every custodian as a witness.
Who inside an organization issues the hold?
Responsibility usually sits with counsel, either in-house or outside, because identifying the subject matter and the relevant categories is a legal judgment. Issuing it is a joint exercise with records management and information technology staff, who know where data actually lives and which processes delete it. Courts have criticized organizations where counsel delegated the whole exercise to employees and never verified the result, treating the failure to supervise as a failure of reasonable steps.
Sources
- Federal Rule of Civil Procedure 37, Cornell LIISubdivision (e) turns on whether a party took reasonable steps to preserve, which is what a hold is meant to show.
- Federal Rule of Civil Procedure 34, Cornell LIIDefines production by possession, custody, or control, which sets the outer boundary of who must be told.
- Federal Rule of Civil Procedure 30, Cornell LIIProvides the organizational deposition through which preservation steps are commonly examined.
- Federal Rule of Civil Procedure 26, Cornell LIIScope and proportionality determine which custodians and systems a hold reasonably has to reach.
- 29 C.F.R. § 1602.14, Cornell LIIRequires personnel records to be kept until final disposition of a charge, an independent hold imposed by regulation.
- 18 U.S.C. § 1512, Cornell LIIMakes it an offense to corruptly destroy a record with intent to impair its use in an official proceeding.
Rapid Response Law is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in Evidence Preservation
When the Duty to Preserve Begins
The obligation to preserve evidence arises when litigation is reasonably anticipated rather than when a suit is filed. Federal Rule of Civil Procedure 37(e) presupposes that duty by asking whether information that should have been preserved was lost because reasonable steps were not taken. Anticipation is judged objectively on what an organization knew, and knowledge held by managers and counsel is generally attributed to the organization.
Collecting Data Without Altering It
An electronic record carries system-generated attributes that establish when it was created, who handled it, and where it sat. Ordinary copying overwrites several of them. Forensic imaging captures a bit-level duplicate and verifies it with a hash value; targeted collection captures defined items with their metadata intact; self-collection by custodians is the least reliable and the most commonly criticized. A chain-of-custody record documents each transfer.
Ending a Litigation Hold
A hold ends when the matter that created it is over and no other obligation covers the same material. That requires checking for appeals, related proceedings, regulatory retention periods and other holds on the same custodians before anything is released. The release itself is a written instruction reversing the original, and the record of what was held, collected and released is retained after the material itself is disposed of.


