{"id":5615,"date":"2025-03-27T16:19:12","date_gmt":"2025-03-27T23:19:12","guid":{"rendered":"https:\/\/cldc.org\/?p=5615"},"modified":"2026-08-14T12:11:24","modified_gmt":"2026-08-14T19:11:24","slug":"take-yourselves-seriously-document-retention-and-destruction-policies","status":"publish","type":"post","link":"https:\/\/cldc.org\/hi\/take-yourselves-seriously-document-retention-and-destruction-policies\/","title":{"rendered":"Take Yourself Seriously: Delete Shit &#038; Worry Less"},"content":{"rendered":"<div class=\"\">\n<p>CLDC educates environmental and social justice activists, organizations and funders regarding law-related topics. We will be presenting a series of informational primers that are particularly important in times of heightened state repression and corporate attacks on dissent. This series, \u201cTake Yourself Seriously\u201d will provide best practices for individuals, nonprofits, activist groups, and funders, in order to prevent losses that could be caused by SLAPP suits, RICO cases, subpoenas, search warrants, and other attempts at derailing your work to protect the planet and its inhabitants.<\/p>\n<p><strong>Why should political activists engage in document hygiene?<\/strong><\/p>\n<p>When our movements are strong and effective, adversaries often double down on using their money to abuse the legal system by dragging activists and organizations into courts\u2014whether by filing criminal charges or civil lawsuits.\u00a0 There\u2019s not a lot we can do to stop them from manipulating or weaponizing the law, but there are many things we can do to armor ourselves and our communities in order to reduce harms that may occur from these types of attacks.<\/p>\n<p>Our first topic, document hygiene practices, encompasses both document retention and destruction policies and practices, as well as digital security practices that interplay.\u00a0 This includes what documents, texts, photos, emails, calendar entries, or files you should maintain to protect yourself, and which you should delete or destroy (thus removing the threat of subpoenas, theft, hacking, etc.). We welcome your feedback and suggestions for future topics that we should cover.<\/p>\n<p><strong><em>Remember: Knowledge is Power.<\/em><\/strong> The State (which includes corporations and industry groups) is taking your activism seriously and is seriously attempting to undermine your work and drive folks from away from this important work. \u00a0Even if you are a volunteer or unpaid activist, it\u2019s time to take your work seriously and CYA (cover your ass).<\/p>\n<p><strong>IF THE \u201cDOCUMENT\u201d DOESN\u2019T EXIST, THERE IS NO THREAT OF IT BEING TURNED OVER TO THE ENEMY OR STOLEN\/SEIZED<\/strong><\/p>\n<ul>\n<li>Do you need to write it down? Or would a phone call or convo be better?<\/li>\n<li>How should you write it down (digital or paper)<\/li>\n<li>Notetaking\u2014what content needs to be recorded? What record is created?<\/li>\n<li>Take yourself seriously=less worry<\/li>\n<\/ul>\n<p><strong>Step 1: Create a Written Document Retention and Destruction Policy<\/strong><\/p>\n<p>Everyone\u2014Individuals, Organizations (and some professions), collectives, campaigns, coalitions and funders should create a written document retention and destruction policy so that in the worst case scenario, if your documents are subpoenaed, seized or stolen, you can produce this policy that establishes the reason you have nothing to hand over is because you have been engaged in document hygiene and have been deleting documents every 30 days (or whatever time period you choose).\u00a0 Different professions and types of documents will have different time periods you may be required to retain them.\u00a0 So, Document Retention and Destruction Policies (&#8220;DRD Policy&#8221;) will vary in order to ensure that organizations\/individuals retain documents which could later be required for business or regulatory purposes. For example, maintaining tax documents in case of an audit or other investigation, employment records, contract or grant documents, or litigation documents each have mandatory time periods that you must maintain\u2014those time periods should be included in your DRD.<\/p>\n<p><strong>A DRD Policy and program saves you time and money\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/strong><\/p>\n<p>In the event you and your documents become embroiled in litigation or governmental investigation, the fewer documents that exist, the less work you have to do to review, compile and produce those records. In fact, particularly in light of developments in electronic (or e-) discovery, the proper maintenance and timely destruction of electronic (as well as paper) documents could save a great deal of money for an organization forced to search unwieldy and voluminous records in the face of discovery requests.<\/p>\n<p><em>IRS Form 990 instructs: \u201cA document retention and destruction policy identifies the record retention responsibilities of staff, volunteers, board members, and outsiders for maintaining and documenting the storage and destruction of the organization\u2019s documents and records.\u201d<\/em><\/p>\n<p><strong>Step 2: Considerations and Procedures for Implementation of a DRD Policy<\/strong><\/p>\n<p><strong>First,<\/strong> discuss the ways in which documents are created and where they are saved or exist.<\/p>\n<p>Documents include both physical copies and electronically stored information (ESI).\u00a0 Based on recent SLAPP and other lawfare cases CLDC has defended, here is a list of the forms of ESI from a subpoena:<\/p>\n<p><img decoding=\"async\" class=\"wp-image-15827 aligncenter\" src=\"https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-232x300.png\" alt=\"Legal document on letterhead from Kasowitz Benson Torres LLP, dated October 20, 2017. The letter is addressed 'Via FedEx' to an organization regarding 'Energy Transfer Equity, L.P., et al. v. Greenpeace International, et al.' The document is titled 'NOTICE OF DUTY TO MAINTAIN AND PRESERVE DOCUMENTS, MATERIALS AND INFORMATION' and informs the recipient of their legal obligation to preserve all potentially relevant documents related to a lawsuit filed on August 22, 2017. The lawsuit alleges violations under RICO laws, including tortious interference and defamation against Energy Transfer.\" width=\"559\" height=\"723\" srcset=\"https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-232x300.png 232w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-200x259.png 200w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-400x518.png 400w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-600x776.png 600w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5-500x647.png 500w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-5.png 612w\" sizes=\"(max-width: 559px) 100vw, 559px\" \/><img decoding=\"async\" class=\"wp-image-15825 aligncenter\" src=\"https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-400x175.png\" alt=\"Alt text for the image: &quot;Screenshot of an email from Google with subject '[0-7208000038268] Notification From Google'. The email is from usernotice@google.com and explains that Google received and responded to a legal process from the FBI compelling the release of information related to the recipient's Google account. It mentions that Google was permitted to disclose the receipt of this legal process, provides reference numbers, and directs recipients to Google's transparency report for more information. The email is signed by Legal Investigations Support, Google LLC, and includes reply options at the bottom.\" width=\"695\" height=\"304\" srcset=\"https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-400x175.png 400w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-768x335.png 768w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-200x87.png 200w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-600x262.png 600w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-800x349.png 800w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-500x218.png 500w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4-700x306.png 700w, https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/paste-4.png 960w\" sizes=\"(max-width: 695px) 100vw, 695px\" \/><\/p>\n<ol>\n<li>Emails and other electronic communications<\/li>\n<li>Twitter\/X messages; Instagram, Facebook, sock puppet accounts, What\u2019s App, Telegram Signal, Wire; or any other social media platform\/service messages, including all direct messages on any platform; and all other forms of communication<\/li>\n<li>Database<\/li>\n<li>Images, including PDFs, photos, videos, graphics<\/li>\n<li>Electronically stored files (e.g. files created in Microsoft Word, Pages, Google Docs, PowerPoint, Excel, Dropbox, Open Office, etc.)<\/li>\n<li>Computerized calendars<\/li>\n<li>Metadata, legacy data, and databases<\/li>\n<li>Cancelled checks, receipts for Venmo, Zelle, PayPal, CashApp, Patreon, ACH payments, wire transfers, Western Union MoneyGram, and receipts from any and all other methods of sending, receiving or transferring money.<\/li>\n<li>Memos<\/li>\n<li>Correspondence<\/li>\n<li>Spreadsheets<\/li>\n<li>Photographs and videos<\/li>\n<li>Decks<\/li>\n<li>Contracts (including amendments)<\/li>\n<li>Draft contracts<\/li>\n<li>Reports<\/li>\n<li>Notes (including handwritten notes)<\/li>\n<li>Drafts (of all of the above)<\/li>\n<li>Ledgers<\/li>\n<li>Texts<\/li>\n<li>Sales forms<\/li>\n<li>Receipts<\/li>\n<li>Invoices<\/li>\n<li>Appointment books<\/li>\n<li>Audio and video tapes<\/li>\n<li>Voice messages<\/li>\n<li>Diaries and journals<\/li>\n<\/ol>\n<p>You may be required to preserve or produce this information regardless of where it is stored, including but not limited to:<\/p>\n<ol>\n<li>Workstation computers<\/li>\n<li>Laptops<\/li>\n<li>Tablets<\/li>\n<li>Portable devices (external drives, thumb drives)<\/li>\n<li>Cell phones<\/li>\n<li>Company network<\/li>\n<li>Cloud-based services<\/li>\n<li>Encrypted services<\/li>\n<li>Zoom and\/or Microsoft Teams video conference recordings.<\/li>\n<\/ol>\n<p><strong>Second,<\/strong> are they saved or maintained in a segregated manner so that when it comes time to destroy (or retain) those documents, they can be easily culled from the others for disposition? Many groups we work with use a traditional color-coding system:\u00a0 red for very sensitive records, green for documents of a significantly non-sensitive nature.\u00a0 What types of records fall into each color can be included in the policy or procedures so that all members are ensuring compliance.\u00a0 Make sure policy includes email, social media, internal comms channels, etc.<\/p>\n<p><strong>Third,<\/strong> Determine how privacy laws, attorney client privilege, or other privileges will apply to documents and data from and with respect to employees, work product, and members\/ donors\/ volunteers.<\/p>\n<p><strong>Fourth,<\/strong>\u00a0 Carefully think through the record retention responsibilities of staff, volunteers, board members, and outsiders (including partner orgs and coalition partners) for maintaining and documenting the storage and destruction of the organization\u2019s documents and records.<\/p>\n<p><em>Although the IRS in its 990 instructions seems to imply that volunteers should have some responsibility with respect to document hygiene, volunteers should have as little responsibility as possible<\/em>. Consider using platforms like Keybase.io or Cryptpad that securely allow administrators to destroy or maintain documents for all.\u00a0 Anyone who is a volunteer (meaning that they are contributing their time, <em>gratis<\/em>) will think twice about continuing to volunteer if they are responsible for maintaining documents on their personal or business computers for some specified amount of time, for searching for documents on their computers and\/or for destroying certain documents. These responsibilities should instead rest on org staff if possible.<\/p>\n<p><strong>Only include requirements that individuals\/orgs know can be met within their capabilities <\/strong>If the org can\u2019t follow the policy, don\u2019t enact it. The worst thing that an organization, individual, coalition, etc., can do is to adopt policies which it does not follow, giving a false sense of security. (*keybase.io is great for \u2018enforcing\u2019 doc destruction across coalitions, etc. b\/c it deletes for everyone)<\/p>\n<p><strong>Other tips:<\/strong><\/p>\n<p>Ensure that the policy includes standards for document integrity, including guidelines for handling electronic files, backup procedures, archiving of documents, and regular checkups of the reliability of the system.<\/p>\n<p>For orgs and coalitions, provide for one specific policy administrator (with assistants, if necessary) who will be responsible for administration and compliance of the policy.\u00a0 Responsibilities include periodic review of the policies for current relevance and compliance. If that administrator is not the ED\/CEO, then the administrator should report to that person (since they are ultimately responsible for almost everything).<\/p>\n<p>The policy must contain specific procedures for instituting a litigation hold where litigation, an audit, or a government investigation is reasonably anticipated. This is normally activated by a written notice from the bad guy. This is an area where liability could be significant if proper procedures are not instituted and followed.<\/p>\n<p>For orgs:\u00a0The DRD Policy should be carefully explained to and adopted by the Board of Directors. Staff should be onboarded and trained on their mandatory duties as well.<\/p>\n<p>Document retention policies apply equally to documents saved in the cloud, on a server, or in a filing cabinet. If your nonprofit is using digital storage, make sure you have a back-up plan!<\/p>\n<p>While having a document retention policy gives staff the green light to toss certain documents (on a schedule, preferably), as you are creating a policy specifically for your nonprofit, think about whether there are certain types of documents or specific documents that for the sake of history, or institutional memory, should be maintained permanently.<\/p>\n<p>State laws relating to employment (such as those governing employment\/payroll) vary state to state and often have implications for document retention policies.<\/p>\n<p>Nonprofits serving minor children may need to retain records relating to minor children at least until the child reaches majority age, plus the time allowed by the state statute of limitations for the child-now-adult to bring a claim against the nonprofit.<\/p>\n<p><strong>Specific Consideration for Certain Groups:<\/strong><\/p>\n<p><strong>Sarbanes-Oxley Requirements: \u00a0<\/strong>Section 802 (Criminal Penalties for Altering Documents) of the Sarbanes-Oxley Act (\u2015SOX\u2016) Section 1519 of the federal criminal code, provides: Whoever knowingly alters, destroys, mutilates, conceals, covers up, falsifies, or makes a false entry in any record, document, or tangible object <strong><em>with the intent to impede, obstruct, or influence the investigation or proper administration of any matter within the jurisdiction of any department or agency of the United States<\/em><\/strong> or any case filed under title 11, or in relation to or contemplation of any such matter or case, shall be fined under this title, imprisoned not more than 20 years, or both.<\/p>\n<p>SOX Section 1102 (Tampering with a Record or Otherwise Impeding an Official Proceeding) subsection (c) added to Section 1512 of the federal criminal code, which states: (c) Whoever corruptly\u2014 (1) alters, destroys, mutilates, or conceals a record, document, or other object, or attempts to do so, <strong><em>with the intent to impair the object&#8217;s integrity or availability for use in an official proceeding<\/em><\/strong>; or (2) otherwise obstructs, influences, or impedes any official proceeding, or attempts to do so, shall be fined under this title or imprisoned not more than 20 years, or both.<\/p>\n<p>In addition to possible criminal liability, civil liability may result from the wrongful destruction of evidence, or \u2015spoliation if litigation has already been filed against you (or you have initiated a suit against others). See Federal Rules of Civil Procedure (\u201cFRCP\u201d) 26; 37(e); <em>Zubulake v. UBS Warburg<\/em>, 220 F.R.D. 216 (S.D.N.Y. 2003) (\u201cAn organization becomes subject to a duty to preserve (or halt the destruction of) records once litigation, an audit or a government investigation is reasonably anticipated.\u201d); <em>William T. Thompson Co. v. Gen. Nutrition Corp.<\/em>, 593 F. Supp. 1443, 1455 (C.D. Calif. 1984) (\u201cWhile a litigant is under no duty to keep or retain every document in its possession once a complaint is filed, it is under a duty to preserve what it knows, or reasonably should know, is relevant in the action, is reasonably calculated to lead to the discovery of admissible evidence, is reasonably likely to be requested during discovery and\/or is the subject of a pending discovery request.\u201d)<\/p>\n<\/div>\n<h3 style=\"text-align: center;\"><div class=\"wp-block-pdfemb-pdf-embedder-viewer\"><a href=\"https:\/\/cldc.org\/wp-content\/uploads\/2025\/03\/Document-Destruction-Retention-for-public-use.pdf\" class=\"pdfemb-viewer\" style=\"\" data-width=\"max\" data-height=\"max\" data-toolbar=\"both\" data-toolbar-fixed=\"on\">Document Destruction &amp; Retention - for public use<\/a><\/div><\/h3>\n<h4>Resources<\/h4>\n<p>National Council of Nonprofits www.councilofnonprofits.org<\/p>\n<p>Guide to Record Retention Requirements in the Code of Federal Regulations: Contact the Superintendent of Documents, U.S. Government Printing Office, Washington, D.C. 20402-9325 or from CCH, Inc. at www.onlinestore.cch.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CLDC educates environmental and social justice activists, organizations and funders regarding law-related topics. We will be presenting a series of informational primers that are particularly important in times of heightened state repression and corporate attacks on dissent. This series, \u201cTake Yourself Seriously\u201d will provide best practices for individuals, nonprofits, activist groups, and funders, in order [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"image","meta":{"_acf_changed":false,"footnotes":""},"categories":[12],"tags":[45,203,26,54,204,28],"class_list":["post-5615","post","type-post","status-publish","format-image","hentry","category-blog","tag-activist-rights","tag-digital-security","tag-featured","tag-government-repression","tag-rico","tag-slapp","post_format-post-format-image"],"acf":[],"_links":{"self":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/comments?post=5615"}],"version-history":[{"count":2,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5615\/revisions"}],"predecessor-version":[{"id":16302,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/posts\/5615\/revisions\/16302"}],"wp:attachment":[{"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/media?parent=5615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/categories?post=5615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cldc.org\/hi\/wp-json\/wp\/v2\/tags?post=5615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}