Legal Hold
What is Legal Hold?
A directive to preserve all relevant documents, data, and records when litigation is anticipated, overriding normal retention and deletion schedules.
Terms that appear alongside legal hold
Each of these is named in at least one of the same controls as legal hold. The number is how many controls name both.
- nist 3 shared controls
- chain of custody 3 shared controls
- records management 2 shared controls
- compliance 2 shared controls
- audit 2 shared controls
- integrity 2 shared controls
- policy 2 shared controls
- ransomware 2 shared controls
Frameworks that govern legal hold
What the standards actually require on legal hold
Requirements naming legal hold across 6 standards, quoted from the control text.
Operate log retention per NIST SP 800-92 Chapter 4 (Planning) Section 4.5 + Chapter 5 Operational Processes. Retention policy aligned to legal and regulatory requirements: document retention period per log category (security event logs + audit logs + access lo...
NISTSP92-6 · Log Retention: Policy, Tiered Storage, Backup, Secure Disposal, Legal Hold →Standard 5 per Section 23 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be kept for no longer than is necessary for the purposes for which they are processed.
JM-DPA2020-Standard5-Retention-Sec23-Time-Limit-No-Longer-Than-Necessary-Erasure-Deletion-Anonymisation · Jamaica DPA 2020 Standard 5 - Retention + Section 23 + Time Limit + No Longer Than Necessary + Erasure + Deletion + Anonymisation + Retention Schedule + Legal Hold + Backup Considerations + Storage Limitation →The organization approves a taxonomy of data lifecycle stages; specifies the metadata needed to automate lifecycle management and controls (by data domain, sensitivity, legal ownership and location);
edm-council-cdmc-cloud-data-management-capability-framework::5.1.1 · 5.1.1 A data lifecycle management framework is defined →Plan records management, the content strategy and the lifecycle for documents and content, including retention and disposition and legal hold requirements.
dama-dmbok2-data-management-body-of-knowledge-2nd-edition::DOC.2.1 · DOC.2.1 Plan for lifecycle management →For the whole retention period GxP records and data are protected, physically or logically, from being reached, changed or erased without authority or by accident;
gamp-5-good-automated-manufacturing-practice::O13 · Appendix O13 Archiving and Retrieval →Issues worth weighing in advance, whose importance and treatment depend on the matter: the scope of electronic discovery; its governance and management; who is responsible for each aspect of the project;
iso-iec-27050-1-2019::6.2 · Basic concepts: the issues to consider in advance →Questions people ask about legal hold
What is Legal Hold?
Why is Legal Hold important for compliance?
Which compliance frameworks address Legal Hold?
Where can I learn more about Legal Hold?
See how Legal Hold applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.