Delay, Memory and What Is Recoverable
Different kinds of evidence decay at very different rates. Some electronic records are gone within weeks, institutional files last for a defined number of years, and memory degrades continuously in ways that the person remembering cannot detect at all.
The rule in short
Delay affects evidence unevenly. Volatile electronic material is overwritten within weeks, institutional records survive for defined retention periods, and public registers persist for decades. Memory declines continuously while confidence does not, which is why late accounts can be both detailed and unreliable. Knowing the decay rates determines what to secure first.
Evidence does not fade evenly. Some of it is gone before anybody knows there is a dispute, and some will still be there in fifty years, and the difference decides what deserves attention in the first week.
What disappears first
System logs and technical records. Access logs, connection records and similar material are frequently overwritten within weeks by design rather than by anybody's decision.
Video recordings. Surveillance systems typically retain footage for a short cycle and then record over it, which is the commonest evidence lost to delay.
Messages on devices. Applications delete older material, devices are replaced and accounts are closed, all of which removes material silently.
Cloud data on closed accounts. Where a service account lapses or is closed, the data stored in it usually goes after a short grace period and cannot be recovered.
Provider-held communication records. Telecommunications and service providers keep records for limited periods that are shorter than most people assume.
Temporary and working documents. Drafts, notes and working papers are discarded routinely and are rarely covered by any formal schedule.
Physical scenes and conditions. The state of a place changes continuously, and photographs taken early cannot be recreated later at all.
What lasts
Civil registry entries. Births, marriages and deaths are generally recorded permanently, subject to the destruction of the register itself.
Land and property records. Title registers are maintained indefinitely in most systems because their whole function depends on continuity.
Corporate filings. Registry documents persist long after a company ceases trading and are usually searchable by anybody.
Court records. Proceedings generate durable records, though access and retention vary considerably between systems and periods.
Financial records within retention periods. Banks keep account records for defined spans, frequently several years, and then dispose of them, per records destroyed on schedule.
Tax filings. Authorities retain declarations for extended periods, which makes them available long after the underlying documents behind them are gone.
Employment and pension records. Employers and schemes keep service histories for long periods because their own obligations depend on them, and they outlast most personal papers.
| Material | Typical survival | Priority |
|---|---|---|
| Video surveillance | Days to weeks | Immediate |
| Provider connection records | Months | Immediate |
| Device and app data | Until the device changes | Immediate |
| Bank and institutional records | Several years | Soon |
| Registry and title records | Indefinite | Any time |
Memory, and what happens to it
Decline is continuous. Recall degrades from the moment of an event, gradually and without any point at which it becomes obviously unreliable.
Confidence does not track accuracy. People become more certain about accounts they have repeated, which is a function of repetition rather than of correctness.
Retelling changes the account. Each recounting subtly reshapes what is remembered, and the version told ten times is a version of the previous telling.
Detail can be reconstructed unconsciously. Gaps fill with plausible material, and the person remembering cannot distinguish that from genuine recall.
External information contaminates. Learning what others say happened alters memory, which is why early independent accounts are so much more valuable.
Groups converge. People who discuss an event afterwards adopt a shared version of it, and separate early accounts are the only way to avoid that.
Early written accounts help. A note made at the time preserves the recollection as it was, per recollection and reconstruction.
Registry entries will be there next year and surveillance footage will not. Files are frequently assembled in the wrong order, with weeks spent obtaining durable documents while the material with a short retention period quietly disappears.
What to secure first
Send preservation requests immediately. The material most at risk is usually held by somebody else, and the request costs an hour, per evidence destroyed by somebody else.
Photograph anything physical. Places and conditions change, and an image taken this week is evidence that cannot be obtained next month.
Export electronic material properly. Copying data out of accounts and devices before anything changes preserves both content and the surrounding information.
Take written accounts early. Statements from witnesses taken while recollection is fresh are worth substantially more than the same accounts later.
Request records with short retention. Provider records, video and logs should be requested first because they are the ones that will not be there in three months.
Leave the durable material until later. Registry entries and title documents can be obtained at almost any time, and spending the first week on them wastes the only window that matters.
Copy rather than move. Working from copies while the originals stay untouched preserves the material and avoids arguments about what happened to it.
When delay has already happened
Establish what the delay cost. Identifying which material would have existed, and when it was lost, frames everything that follows.
Ask anyway. Retention periods are estimates, and material sometimes survives past them, particularly where a system archived rather than deleted.
Look for downstream copies. Data extracted for another purpose before the deletion date frequently survives afterwards in reports, exports and correspondence.
Ask who else received it. Material sent to a regulator, an adviser or a counterparty at the time may still exist in their files long after the original holder disposed of it.
Explain the delay. Where a party is asked why they did not act sooner, an honest account is better than leaving the question open, per explaining a gap honestly.
Weigh late accounts carefully. A detailed recollection produced years afterwards deserves examination against contemporaneous material rather than acceptance.
Secure what remains now. The same reasoning applies again from today onward, and further delay removes further material on exactly the same schedule.
Prefer contemporaneous documents to late accounts. Where both exist, the document made at the time is what a decision-maker will rely on, and the later recollection is read against it.
Record what has already been lost. A note of which material was sought and found gone establishes the position for any later application about it.
Evidence decays at very different rates, and treating it as a single category is why so much material is lost before anybody realizes it was available.
Electronic records are the fastest to go. Surveillance footage, connection logs and application data disappear on cycles measured in days and weeks, without anybody deciding to delete anything.
Institutional records last as long as a retention schedule allows, and registry and title documents effectively persist, which means they can safely wait while more fragile material is secured.
Memory declines continuously while confidence in it does not, which is why an account given years later can be detailed, sincere and substantially wrong at the same time.
The practical consequence is a priority order: preservation requests and volatile material first, witness accounts early, institutional records next, and durable public documents whenever there is time.
Points to carry away
- Electronic material disappears fastest, sometimes in weeks.
- Institutional records last as long as a retention schedule says.
- Registers and land records persist for decades.
- Memory declines while confidence in it does not.
- What is secured first should be what disappears first.
Questions readers ask
What evidence should be secured first?
Whatever disappears fastest, which is almost always electronic. Surveillance footage is commonly overwritten within days or weeks, provider connection records are kept for limited periods, and data on devices and in applications vanishes when a handset is replaced or an account lapses. Preservation requests to whoever holds that material should go out immediately. Registry entries, title documents and corporate filings persist indefinitely and can be obtained at any point, so spending the first week on them wastes the only window that matters.
Why is a detailed account given years later treated cautiously?
Because detail and accuracy are not the same thing. Memory declines continuously from the moment of an event, gaps fill unconsciously with plausible material, and each retelling reshapes the account slightly. Meanwhile confidence tends to increase with repetition, so a person recounting something for the tenth time is usually more certain and not more accurate. This is why a brief note written at the time is worth considerably more than an extensive statement produced afterwards, and why early independent accounts matter.
Is it worth requesting records that should already have been destroyed?
Frequently yes. Retention periods are policies rather than guarantees, and material survives past them more often than people expect, particularly where a system archived data rather than deleting it or where a copy was extracted for some other purpose before the deadline. A request costs very little and either produces the material or produces a formal statement that it no longer exists, which is itself useful evidence of unavailability for any secondary evidence application.
Sources
- Federal Rules of Civil Procedure — Rule 37(e), Failure to Preserve Electronically Stored Informationlaw.cornell.edu
- Federal Rules of Evidence — Rule 803(5), Recorded Recollectionlaw.cornell.edu
- NIST — Guide to Integrating Forensic Techniques into Incident Responsecsrc.nist.gov
- Federal Rules of Evidence — Rule 803(10), Absence of a Public Recordlaw.cornell.edu
- National Archives — Records Management Schedulesarchives.gov
- Federal Rules of Evidence — Rule 612, Writing Used to Refresh a Witness's Memorylaw.cornell.edu
True Justice Record is a publication, not a law firm. This article states general rules and cites its sources; it is not advice about any particular case, and the law differs by state and changes over time.
More in When the Proof Does Not Exist
Preserving Proof Before It Is Needed
Evidence problems are usually created long before anybody anticipates a dispute. Keeping originals, documenting arrangements when they are made, using traceable payments, obtaining records while institutions still hold them and writing brief contemporaneous notes prevent most of the difficulties that later require reconstruction, secondary evidence or explanation.
Evidence Destroyed by Somebody Else
Where an opponent destroyed evidence after a duty to preserve arose, remedies including inferences, exclusions and sanctions become available. Where a third party or an accident destroyed it, the secondary evidence route applies instead. In every case the first task is proving what the material was, that it existed and that it is genuinely gone.
Spoliation and Missing Evidence
Spoliation is the destruction or alteration of evidence after an obligation to preserve it has arisen. The consequences range from an adverse inference through evidential exclusions to determinative sanctions, and they depend on when the duty attached, whether the loss was deliberate and how much prejudice resulted. Routine destruction before the duty arose is generally not spoliation at all.