Legal-Hold and Deaccession Review¶
Protocol — instantiates Collective Memory Curation
Runs an authority, duty, evidence, and custody check before deletion, overwrite, irreversible redaction, repatriation, withdrawal, or deaccession.
A Legal-Hold and Deaccession Review is a gate that fires only at destructive lifecycle actions — the moments a source is about to be deleted, overwritten, irreversibly redacted, repatriated, withdrawn, or deaccessioned. Its defining idea is that irreversibility demands a mandatory pre-check no single actor may skip: before anything permanent happens, the protocol verifies who has authority to authorize it, whether any legal hold or public-record or investigatory duty forbids it, whether the item is an evidentiary original that must survive, and where authoritative custody will rest afterward. It is the archetype's brake on destruction, distinct from any rule about who may see a record — it governs whether the record may cease to exist.
Example¶
A newspaper's digital archive receives a demand that a decade-old article naming a person in a since-dropped fraud case be deleted. Sympathy runs toward the request. The deaccession review stops the reflex. First, the authority check: a single editor cannot order permanent deletion; the standing rule routes it to the archive steward plus counsel. Next, the duty check surfaces that the article is responsive to an active defamation suit against the paper — a litigation hold attaches, and deletion now would be spoliation of evidence.[n1] The evidence check confirms the original page is the only authoritative record of what was published. The protocol's outcome is not "delete" or "refuse," but a controlled substitution: the public-facing article gets an appended correction and is de-indexed from search, while the authoritative original is preserved under sealed access with a review date, and the whole decision — who authorized it, on what grounds — is logged. The person's concern is answered without silently destroying the record or the paper's own evidence.
How it works¶
The protocol is a fixed sequence triggered by any deletion-class request. Authority check: confirm the requester and approver actually hold the power to authorize an irreversible action for this material. Duty check: scan for legal holds, public-record obligations, active investigations, research-integrity duties, and culturally authorized custody rules that forbid or condition destruction. Evidence check: determine whether the item is an evidentiary original whose loss would eliminate the only authoritative source. Custody resolution: decide where the authoritative version rests afterward — sealed, restricted, or repatriated — separating how people encounter it from whether it survives. Only after all four clear is the action executed, and the authorization and rationale are recorded so the decision itself is inspectable.
Tuning parameters¶
- Trigger scope — which actions count as destructive enough to invoke the gate. A broad trigger catches quiet overwrites; a narrow one avoids gumming up routine edits.
- Approval quorum — solo steward versus multi-party sign-off including counsel or community authority. More signatures resist rash destruction but slow legitimate deaccession.
- Hold conservatism — how aggressively ambiguous duties are treated as binding. Conservative holds prevent spoliation but let material pile up under indefinite preservation.
- Substitution default — whether the standard outcome is deletion, restricted-custody preservation, or repatriation. Preserving-by-default protects evidence but strains storage and consent.
- Log visibility — how public the decision record is. Transparency deters abuse but can advertise the existence of sealed material.
When it helps, and when it misleads¶
Its strength is that it prevents destructive deaccession disguised as correction — the failure where a source is quietly erased to satisfy a reputational, privacy, or narrative request without anyone checking the duties that forbid it. By separating authoritative custody from public presentation, it lets a collection honor a withdrawal and keep its evidentiary spine.
Its failure mode is ossification: a hold-everything reflex that treats every ambiguous duty as binding, so nothing is ever deaccessioned and the archive drowns in material it should have released — the inverse harm, where indefinite retention becomes its own violation of dignity and privacy. The classic misuse is invoking a spurious "legal hold" to block a legitimate repatriation or a justified privacy deletion. The guarding discipline is that the duty check must cite the specific obligation that binds; an unnamed hold is not a hold, and every preservation-by-default carries a review date so it cannot become permanent by inertia.
How it implements the components¶
legal_hold_and_evidentiary_original_guard— it is this guard as a runnable protocol: the duty and evidence checks that keep an authoritative original alive through a destructive action.transparent_appraisal_and_selection_rule— its authority and custody decisions extend the declared selection rule to the deaccession end, making destruction as inspectable and appealable as acquisition.stewardship_retention_and_review_cycle— every preserved-under-restriction outcome carries a review date, wiring destruction decisions back into the steward's retention cycle.
It does not set the audience-, time-, or consent-specific rules for who may access surviving material — access_consent_and_sensitivity_envelope, memory_harm_and_misuse_assessment, contestation_correction_and_response_path — that is Tiered Access, Embargo, and Redaction Schedule; this review governs whether a source may be destroyed, while the schedule governs who may see one that survives.
Related¶
- Instantiates: Collective Memory Curation — realizes the invariant that evidentiary originals must survive destructive lifecycle actions.
- Consumes: Participatory Archival Appraisal Panel supplies the appraisal authority a contested deaccession is escalated to.
- Sibling mechanisms: Tiered Access, Embargo, and Redaction Schedule · Archival Succession and Migration Plan · Participatory Archival Appraisal Panel
Editorial Notes¶
Form Classification¶
Form family: Decision, Gate & Allocation
Rationale: The mechanism makes a bounded authorize, hold, or redirect disposition before deletion, redaction, repatriation, withdrawal, or deaccession.
Nearest alternative: Assessment, Review & Assurance — Authority, duty, evidence, and custody are reviewed, but authorization of irreversible action is primary.
Review outcome: Adjudicated after independent review; high confidence.
Origin Attribution¶
Primary origin: Law & Governance
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Multi-domain
Rationale: Discovery, records, and evidence law developed legal holds and authority checks before irreversible deletion or alteration.
Related originating lineages:
- Library & Information Science — Archives and records management materially shaped custody, retention, and disposition controls.
- Material Culture & Museum Studies — Museum deaccession and repatriation practice shaped review of ownership and post-removal custody.
Review resolution: Both independent reviews place the primary lineage in law_governance. The queued differences (reported_ambiguity, domain_reach_disagreement) concern secondary metadata rather than primary provenance. The final retains library_information_science, material_culture_museum_studies only where a reviewer supplied a formative-lineage rationale; downstream application by itself is not treated as origin. origin_mode=cross_disciplinary_synthesis records the relationship among origin traditions, while domain_reach=multi_domain records application breadth separately. encyclopedia_synthesis=true reflects whether either reviewer identified a corpus-specific synthesis, and confidence=high preserves the more cautious evidence assessment.
Attribution caveat: The title deliberately joins legal hold with museum and records deaccession lineages.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] Spoliation is the legal doctrine covering the destruction or alteration of evidence relevant to pending or foreseeable litigation; once a duty to preserve attaches, deleting responsive records can bring sanctions regardless of intent. It is the sharpest reason a deaccession review runs a duty check before honoring any deletion request. ↩