Is Deleting Company Emails a Crime? Legal Risks and Retention Rules

Deleting a company email is not automatically a crime. The legal risk depends on why the message was deleted, whether a lawsuit or investigation was expected, what records-retention rules apply, and whether the person had authority to remove it. Routine deletion under a legitimate company policy is different from destroying evidence to hide it. Understanding that distinction can help employees and businesses avoid costly mistakes.

When Deleting Company Emails Can Be Illegal

Email deletion can create criminal or civil liability when it is intended to obstruct an investigation, conceal evidence, violate a preservation duty, or breach a specific records-retention law. A deleted message may be especially significant if it relates to a lawsuit, government inquiry, audit, contract dispute, or suspected misconduct.

In the United States, there is no single rule that makes every deleted business email a crime. Instead, several federal and state laws may apply, depending on the circumstances. The person’s intent, the email’s relevance, the timing of deletion, and the organization’s legal obligations all matter.

Deleting an email to hide evidence is fundamentally different from deleting routine messages under an established retention policy. Even when deletion is not criminal, improper destruction can lead to court sanctions, financial penalties, adverse rulings, or employment consequences.

Federal Laws That May Apply

Obstruction and destruction of records

Federal obstruction laws can apply when someone destroys or conceals records with the required intent to interfere with a matter within the law’s scope. For example, 18 U.S.C. § 1519 addresses knowingly altering, destroying, concealing, or falsifying records with intent to impede, obstruct, or influence a federal investigation or the proper administration of a matter within a federal agency’s jurisdiction. The statute does not require that a formal investigation already be underway.

Another provision, 18 U.S.C. § 1512, addresses conduct intended to affect evidence or testimony in connection with an official proceeding. Its application depends on the facts and statutory requirements, including the person’s intent and the connection to a proceeding.

These laws do not mean that an employee commits a federal crime every time a message disappears. Prosecutors must establish the legal elements of the particular offense. An accidental deletion, a routine cleanup carried out under a lawful policy, or removal of a clearly irrelevant message is not automatically obstruction.

Industry-specific requirements

Some businesses must preserve certain records for periods set by law or regulation. Financial firms, public companies, health care organizations, government contractors, and other regulated entities may face special recordkeeping duties. Those duties may cover business communications, including email, depending on the organization, the message’s content, and the applicable rules.

For example, securities laws and regulations impose recordkeeping requirements on certain financial institutions and broker-dealers. Health care privacy rules can govern how protected health information is handled, although they do not create a universal retention period for every email. Public agencies may also have records-management duties that differ from those of private companies.

A retention period cannot be assumed from the type of inbox alone. A company should identify the laws that apply to its industry, records, and operations, then have qualified counsel or compliance professionals translate them into a written retention schedule.

Litigation Holds and the Duty to Preserve Evidence

A company may have to preserve relevant emails once litigation is pending or reasonably anticipated. This duty can arise before a lawsuit is filed. For example, a serious demand letter, an accident, a threatened employment claim, or notice of a government investigation may alert an organization that relevant evidence could be needed.

Federal civil procedure specifically addresses electronically stored information, or ESI. Under Federal Rule of Civil Procedure 37(e), a court may respond when ESI that should have been preserved is lost because reasonable steps were not taken and it cannot be restored or replaced. Depending on prejudice and intent, the court may order measures to address the loss or, in more serious cases, impose severe sanctions.

A litigation hold is a notice directing relevant employees and departments to preserve specified information. It may suspend routine email deletion, backup recycling, or automated message expiration for relevant accounts. Employees who receive a hold should follow it even if they believe a particular email is unimportant. The legal team—not an individual employee—should determine what must be preserved.

Failure to follow a hold can create problems even if the employee did not intend to commit a crime. A court may consider whether the organization acted reasonably, whether the information can be recovered, whether another party was prejudiced, and whether anyone intended to deprive the other side of evidence.

When Routine Email Deletion Is Usually Permitted

Businesses commonly delete old email to manage storage, reduce security exposure, and comply with a documented retention program. Routine deletion is generally less risky when it follows a consistently applied policy, complies with applicable retention laws, and is not used to conceal information or evade a preservation duty.

For example, a company might automatically delete ordinary messages after a defined period while preserving contracts, tax records, personnel documents, or litigation-related communications for longer. The policy should identify which categories of records are covered, who is responsible for applying it, and what exceptions apply.

Consistency matters. A company that selectively deletes messages about a dispute while preserving similar messages elsewhere may face questions about motive and fairness. A policy also cannot override a legal hold or a statutory preservation requirement. If a hold is issued, the organization may need to pause ordinary deletion for the relevant data.

Does It Matter Who Deletes the Email?

Yes. A company officer, an employee, an IT administrator, or a third-party service provider may each have different responsibilities and levels of access. But job title alone does not determine criminal liability. A person’s knowledge, authority, intent, actions, and applicable legal duties are central.

An employee who deletes a message from a work account may violate company policy even if the email is not evidence in a legal matter. That could lead to discipline or termination. If the employee knowingly destroys relevant evidence after receiving a hold, the consequences may be more serious for both the employee and the company.

Company ownership of an account does not give employees permission to destroy records that must be preserved. Conversely, a business generally cannot treat every personal message on a company system as a legally required record. The organization’s policies, applicable privacy rules, employment agreements, and the message’s content can all affect the analysis.

What Happens When Relevant Emails Are Deleted?

The consequences depend on whether the deletion violated a law, court order, regulatory rule, contract, or company policy. Potential outcomes include:

• Criminal investigation: Intentional destruction to obstruct a federal matter may lead to prosecution under an applicable statute.
• Court sanctions: A judge may order steps to address lost evidence, shift certain costs, or impose other remedies under procedural rules.
• Adverse inferences: In certain cases, a court may allow or require an inference that lost information would have harmed the party responsible for its loss.
• Regulatory action: A regulator may impose penalties or require corrective measures when a regulated organization fails to keep required records.
• Employment or contract consequences: An employee or vendor may face discipline, termination, or a breach-of-contract claim.

Not every deleted message results in a sanction. Courts often consider whether the information can be restored, whether reasonable preservation steps were taken, and whether the loss caused real prejudice. Serious consequences are more likely when evidence was deliberately destroyed to deprive another party of its use.

Can Deleted Company Emails Be Recovered?

Sometimes. A message removed from an inbox may remain in a deleted-items folder, an email server, a company archive, a recipient’s mailbox, a backup, or a third-party service. Recovery depends on the system, retention settings, elapsed time, and whether data has been overwritten or permanently purged.

Deleting a message from one account does not necessarily erase every copy. Recipients may retain it, and legal discovery can involve multiple custodians and systems. At the same time, backups are not always complete or easily searchable, so a business should not assume that a lost message can be recovered later.

When a legal hold or investigation is possible, employees should not try to restore, forward, alter, or independently investigate potentially relevant emails without guidance. Such actions can change metadata or complicate evidence handling. The safer approach is to notify the appropriate legal, compliance, or records-management contact.

What Employees and Businesses Should Do

If an employee is asked to delete emails

An employee who receives an unusual deletion request should check whether a legal hold, investigation, audit, or dispute is involved. If the request appears intended to hide evidence, the employee should not comply blindly. The concern can be raised with the company’s legal department, compliance team, records manager, or designated reporting channel.

If an employee has already deleted a potentially relevant message, the best response is usually to report the facts promptly and accurately. The employee should explain what was deleted, when, how, and whether any copies may remain. Concealing the deletion or attempting to reconstruct a message could make matters worse.

For company leaders and records teams

Organizations can reduce risk by maintaining a written retention schedule, applying it consistently, and training employees on preservation duties. Email systems should support timely legal holds, and staff should know whom to contact when they receive a subpoena, demand letter, regulator request, or litigation notice.

Useful safeguards include:

• Define retention periods by record category and applicable legal requirement.
• Document how routine deletion works and who can approve exceptions.
• Establish a process to identify custodians, preserve relevant accounts, and pause automated deletion.
• Train employees to recognize legal holds and report threatened claims or investigations.
• Coordinate with IT, legal, compliance, and records-management teams before changing email settings.
• Review the policy periodically as laws, business systems, and retention needs change.

When a dispute or investigation is suspected, a company should promptly seek advice from qualified counsel. Counsel can help determine what must be preserved, which employees and systems are involved, and whether a hold should be issued.

Key Takeaway: Is Deleting Company Emails a Crime?

Sometimes, but deletion alone does not make it a crime. Routine deletion under a lawful, consistently applied retention policy is different from intentionally destroying emails to obstruct an investigation, evade a legal hold, or conceal evidence. Because the answer depends on intent, timing, content, and applicable law, employees should preserve questionable messages and seek guidance rather than deciding on their own that deletion is safe.

This article provides general information about U.S. law, not legal advice. Laws and obligations vary by jurisdiction and industry; a lawyer can assess the specific circumstances.