Responding to Litigation Holds, FOIA Requests & Investigations

Responding to litigation holds, FOIA requests, and government investigations starts before any of these arrive in final form: the duty to preserve evidence attaches the moment your organization reasonably anticipates a legal proceeding, and each type of demand then carries its own procedures, deadlines, and penalties. Getting the response right means acting on the trigger, issuing a written hold to the right people, following the specific rules for the demand you received, and avoiding the kind of destruction that can escalate a civil dispute into a criminal case.

When Your Preservation Duty Starts

The obligation does not wait for a lawsuit to be filed. It begins the moment your organization reasonably anticipates litigation, receives a government subpoena, or learns of a formal investigation. Courts apply an objective standard: would a reasonable person in your position have foreseen legal action?¹ A threatening letter from opposing counsel, a regulatory inquiry, a workplace injury that looks like it might generate a claim, or news coverage of a product defect can all trigger the duty before anything is formally filed.

Once triggered, the obligation covers all information relevant to any party’s anticipated claims or defenses and proportional to the needs of the case.² That includes electronically stored information (ESI) such as emails, chat messages, shared drive files, and database records, along with physical documents. It runs forward from the trigger date and reaches back to earlier records that bear on the anticipated dispute.

Issuing the Litigation Hold

The first concrete step is sending a written litigation hold notice to every person likely to have relevant information. These custodians might include executives, project managers, HR staff, IT administrators, or anyone whose files, emails, or communications touch the subject matter. The notice must describe the types of information to preserve, the relevant time period, and the data sources covered, and it should be written plainly enough that a non-lawyer knows exactly what to keep and what not to delete.³

On the technical side, IT needs to suspend any automated deletion or retention policies that would otherwise purge relevant data. Email archiving systems, collaboration platforms, and backup tapes are the most common places where routine destruction quietly eliminates evidence. ESI should be preserved in its native format whenever possible, including all metadata such as creation dates, modification timestamps, and author information.³

Sending the notice is not enough. You need a system that tracks whether each custodian received and acknowledged the hold, and you need reminders for holds that stretch over months or years. A defensible audit trail records when each notification went out, which custodians confirmed it, any follow-up reminders, and responses to questions about the hold’s scope. Read receipts alone will not carry the weight later when you have to show that your preservation efforts were reasonable.

What Destroying Evidence Costs

Destroying, altering, or concealing relevant evidence after the preservation duty attaches is called spoliation. In federal civil litigation, when ESI is lost because a party failed to take reasonable steps and the information cannot be restored through additional discovery, a court may order measures no greater than necessary to cure the prejudice.¹ When the court finds you acted with intent to deprive the other side of the evidence, the penalties escalate: an adverse inference instruction telling the jury to presume the lost evidence was unfavorable, dismissal of claims, or entry of default judgment.

The stakes climb further when a federal investigation is involved. Under 18 U.S.C. § 1519, anyone who knowingly destroys, alters, or falsifies any record or document with the intent to obstruct a federal investigation faces fines and up to 20 years in prison.⁴ The statute reaches any matter within the jurisdiction of any federal department or agency, not just formal proceedings, and courts have applied it to routine destruction when the person knew an investigation was underway or foreseeable.

Collecting, Reviewing, and Producing What You Preserved

Preservation secures the data. Collection is the separate step of gathering the specific subset you will actually review and potentially hand over. Federal discovery rules require that collection be proportional to the needs of the case, weighing the importance of the issues, the amount at stake, the parties’ relative access to information, their resources, and whether the burden outweighs the likely benefit.²

Before formal discovery requests are served, the parties must hold a planning conference to discuss preservation and the forms in which ESI should be produced.² Custodian lists, search terms, date ranges, and production formats get negotiated here. Handling these early prevents disputes later and gives both sides a shared understanding of what reasonable collection looks like for the case.

The collection itself has to protect the data’s integrity. That means forensic copies that capture files and metadata together, plus a documented chain of custody showing who handled the data, when, and with what tools. Consumer-grade copying often alters file metadata, which is why most organizations use e-discovery vendors. A broken chain gives opposing counsel a reliability challenge and gives the judge a reason to exclude the evidence.

Privilege Review

After collection, attorneys examine each document to determine whether it is responsive and whether any privilege applies. Attorney-client privilege shields confidential communications between a client and lawyer made for the purpose of obtaining legal advice. The work product doctrine protects documents prepared in anticipation of litigation, with heightened protection for materials revealing an attorney’s mental impressions, conclusions, and legal theories.² Work product protection extends to documents prepared by others at an attorney’s direction when the purpose is litigation preparation.

For every document withheld on privilege grounds, you must give the other side enough information to assess the claim without revealing the protected content.² The privilege log lists the document date, author, recipients, general subject matter, and the specific privilege asserted. Boilerplate entries invite motions to compel; each entry needs to actually explain why the privilege covers that particular document.

Production Format and Clawback Protections

Documents that pass review as responsive and non-privileged are produced in an agreed format. Federal rules provide that, absent a stipulation, ESI is produced as it is kept in the ordinary course of business or in a reasonably usable form. Most productions use single-page image files (TIFF or PDF) accompanied by load files with extracted text, metadata, and document-relationship information. If metadata was not preserved during collection, the whole production is compromised regardless of format.⁵

Even careful review lets some privileged documents slip through in large productions. Federal Rule of Evidence 502(b) provides that inadvertent disclosure does not waive privilege if the holder took reasonable steps to prevent disclosure and promptly took reasonable steps to correct the error once discovered.⁶ Formalize this protection before production through a clawback agreement or stipulated protective order that spells out how to notify the other side, return or sequester the document, and preserve the privilege claim. Negotiate it at the Rule 26(f) conference so a single mistake does not unravel years of privileged communications.

Responding to a FOIA Request

FOIA operates on an entirely different framework than civil discovery. It applies to federal agencies, creates a right of public access with a default presumption favoring disclosure, and sets its own deadlines, fee structures, and exemption categories.⁷ If you are a private organization, FOIA does not reach your records; the framework governs how federal agencies handle requests directed to them.

An agency must decide whether to comply with a FOIA request within 20 working days of receipt and immediately notify the requester of its decision.⁷ Extensions are available in unusual circumstances, but the baseline is far tighter than civil discovery schedules. A “record” includes any information the agency maintains in any format, including electronic formats and records held by contractors for records-management purposes. Agencies are not required to create new records or analyze existing data to answer a request.⁸

Fee Categories

Commercial requesters: charged for search time, document duplication, and review, with no free pages or hours.
Educational or scientific institutions and news media: charged only for duplication beyond the first 100 pages, with no search or review fees.
All other requesters: charged for search time beyond the first two hours and for duplication, with no review fees.⁹

Exemptions and Segregability

Nine statutory exemptions allow agencies to withhold information. The ones invoked most often include:

Exemption 4: trade secrets and confidential commercial or financial information obtained from a person.
Exemption 5: internal agency memoranda that would be privileged in litigation, including deliberative process materials. This exemption does not apply to records created 25 or more years before the request date.
Exemption 6: personnel, medical, and similar files where disclosure would be a clearly unwarranted invasion of personal privacy.
Exemption 7: law enforcement records, in six sub-categories covering interference with proceedings, fair trial rights, personal privacy, confidential sources, investigative techniques, and physical safety of individuals.⁷

Exemptions apply document by document, and the agency must release any reasonably segregable portion after redacting the exempt material.⁷ If only two sentences on a page fall under an exemption, the rest of that page goes to the requester. The agency must indicate where redactions were made and which exemption applies to each one.⁸

Appeals and Penalties

A requester who receives a partial or full denial can appeal to the head of the agency, which must decide the appeal within 20 working days. If the denial is upheld, the requester can file suit in federal district court. Where a court orders release of improperly withheld records and awards attorney fees against the government, and finds the withholding raises questions about whether agency personnel acted arbitrarily, the Office of Special Counsel must investigate whether disciplinary action is warranted. Courts can also hold employees in contempt for noncompliance with a disclosure order. Attorney fees are available to requesters who substantially prevailed, meaning they obtained relief through a court order, an enforceable agreement, or a voluntary change in the agency’s position where the claim was not insubstantial.⁷

Responding to a Government Investigation

Regulatory investigations carry preservation duties similar to civil litigation, with the added risk of criminal obstruction charges. When a federal agency such as the SEC issues a formal order of investigation, staff can subpoena witnesses, compel attendance, take testimony under oath, and require document production. The SEC’s standard practice is to send a document preservation letter early in an investigation that explicitly requests preservation of all relevant communications across every platform, including personal devices such as smartphones and tablets, and asks for written acknowledgment.¹⁰ Other federal agencies, including Inspectors General offices across the executive branch, use similar subpoena authority and preservation demands.

The core obligation is the same as for a litigation hold: once you know about the investigation, routine destruction stops for anything within scope. What separates regulatory investigations from civil discovery is 18 U.S.C. § 1519, which makes it a federal crime to destroy or falsify records with the intent to obstruct any matter within a federal agency’s jurisdiction, carrying penalties of up to 20 years imprisonment.⁴ Unlike civil spoliation sanctions, which require a pending or anticipated lawsuit, this statute reaches conduct in contemplation of any federal matter.

Congressional subpoenas add another layer. They originate from committees rather than courts or agencies, and non-compliance can lead to a contempt of Congress referral. Executive privilege and other constitutional doctrines may apply depending on whether the recipient is a current or former executive branch official. For private organizations, the practical preservation and production obligation resembles other government demands.

1
Legal Information Institute. Federal Rules of Civil Procedure Rule 37 – Failure to Make Disclosures or to Cooperate in Discovery
2
Legal Information Institute. Federal Rules of Civil Procedure Rule 26 – Duty to Disclose; General Provisions Governing Discovery
3
Department of Health and Human Services. Department of Health and Human Services Policy for Litigation Holds
4
Office of the Law Revision Counsel. 18 USC 1519 – Destruction, Alteration, or Falsification of Records in Federal Investigations and Bankruptcy
5
EDRM. Production Guide
6
Legal Information Institute. Federal Rules of Evidence Rule 502 – Attorney-Client Privilege and Work Product; Limitations on Waiver
7
Office of the Law Revision Counsel. 5 USC 552 – Public Information; Agency Rules, Opinions, Orders, Records, and Proceedings
8
eCFR. 45 CFR Part 5 – Freedom of Information Regulations
9
eCFR. 32 CFR 286.12 – Schedule of Fees
10
U.S. Securities and Exchange Commission. Division of Enforcement Manual