The preservation request is the quietest instrument in the set and the one most often mishandled, because it looks like a data request and is not one.
What a preservation request does
It stops the clock. Providers delete data on a schedule; investigations move slower than deletion cycles. A preservation request bridges that gap by requiring the company to set aside a copy of specified records while the requesting agency assembles the legal process needed to actually obtain them.
The mechanics under § 2703(f):
- The request can be made by any governmental entity, informally, without a court order.
- The obligation is to retain, for 90 days, renewable once for a further 90.
- Nothing is disclosed. Disclosure requires a subpoena, a court order, or a warrant, arriving separately.
Why it matters that preservation is not disclosure
| Preservation request | Emergency disclosure request | |
|---|---|---|
| What it compels | Retention of records | Nothing; it is voluntary |
| Is data handed over | No | Yes, if the company agrees |
| Judicial review | None required | None |
| Risk if wrongly honoured | Low; data is only held | High; data leaves the company |
| Appropriate response to an unverified urgent request | Often yes | Only after verification |
That last row is the practically useful one. When an urgent request arrives and the requester cannot be verified quickly, preserving the data is very often the correct answer. It protects the evidence against deletion, costs the investigation nothing, and discloses nothing to someone who may not be who they claim. A company that reflexively treats preservation as the safe interim step removes most of the pressure that makes fraudulent emergency requests work.
What it means for a company receiving one
- Classify it correctly at intake. A preservation request routed as a disclosure request wastes review effort and risks over-disclosure.
- Actually preserve. The obligation is real, and ordinary automated deletion will breach it unless a hold is applied.
- Track the expiry. Preservation obligations lapse. Holding data indefinitely because nobody closed the ticket is its own compliance problem, particularly under data minimisation obligations.
- Expect follow-on process. A preservation request usually means a subpoena, order, or warrant is being prepared.
Preservation and legal hold
The two are cousins but not the same. A legal hold is an internal obligation that arises when litigation is reasonably anticipated, and it is imposed by the company on itself. A preservation request is external, arrives from a government agency, and covers records identified by that agency. They can and often do overlap on the same data, and both suspend ordinary deletion.