Departing Employee Data and Legal Holds: Texas SMB Guide 2026

Former employees are often the people most likely to be involved in a claim: wage disputes, non-compete fights, trade secret theft, harassment complaints, or customer disputes they handled. They are also the people whose data is most likely to be deleted by routine offboarding. Accounts get removed, licenses get reclaimed to save money, and devices get wiped for the next hire. Our guide to spoliation and sanctions for electronic evidence explains how courts treat data that disappears after a dispute became foreseeable.

In Microsoft 365, deleting a user normally means the mailbox and OneDrive content are removed after a short recovery window. Industry documentation describes that window as roughly 30 days for the deleted user account, and OneDrive retention for departed users is governed by a separate setting your administrator controls. After that, the data is gone unless something told Microsoft 365 to keep it.

That something is a hold or retention policy. When a mailbox is under a litigation hold, an eDiscovery hold, or a retention policy and the user account is then deleted, Microsoft 365 converts the mailbox into an inactive mailbox. It stays searchable by your compliance team, but the former employee can no longer sign in. The hold must be in place before the account is deleted; it does not rescue a mailbox that has already been purged. Confirm with your provider which of your Microsoft 365 licenses supports holds, since not every plan includes the same compliance features.

1. Ask legal first. Before offboarding anyone involved in a complaint, claim, or sensitive exit, check with your attorney whether a hold is warranted.
2. Place the hold before the delete. Apply a litigation or eDiscovery hold to the mailbox and preserve OneDrive and Teams content before the account is removed.
3. Do not reclaim the license early. Removing the license can start the clock on deletion, so keep it until preservation is confirmed.
4. Quarantine the devices. Pull the laptop and phone, label them, and store them untouched until a forensically sound copy is made or counsel says otherwise.
5. Capture the non-obvious sources. Shared mailboxes the person used, text messages on a company phone, personal cloud sync folders, and chat history in collaboration apps.
6. Document everything. Record who approved the hold, which sources were preserved, and the dates, so you can show a court you acted promptly and reasonably.

• Email and archives. Primary mailbox, archive mailbox, and any auto-forwarding or inbox rules the person set up.
• Files. OneDrive, SharePoint sites, and local Downloads or Desktop folders that never synced. Our overview of Microsoft Purview data governance shows how retention and labels apply to these locations.
• Chat and collaboration. Teams messages and shared channels, plus anything on personal phones covered in our mobile text message eDiscovery guide.
• Third-party apps. CRM notes, accounting software, and cloud storage tied to the person's login.

Keeping every former employee's data forever is not the answer. It raises storage and license costs and expands what you must search and produce later. The goal is a rule you can defend: a standard retention period for routine departures, and a documented exception path for sensitive ones. Pair that with the principles in our data retention guide and the process in our legal hold and data preservation guide. Where a hold lasts months or years, an inactive mailbox is usually cheaper and safer than keeping a full licensed account alive.

Most IT offboarding checklists focus on security: disable sign-in, revoke tokens, collect hardware. That matters, and we cover it in our employee offboarding and deprovisioning guide. The missing step in many small businesses is a simple gate: before deprovisioning, someone confirms whether a hold applies. HR, IT, and whoever handles legal matters need a shared trigger, even if it is a single checkbox on the exit form. For the technical walkthrough of placing holds, see our Microsoft 365 litigation hold guide.

This week, pull your last three departures and ask what became of each mailbox, OneDrive, and laptop. If you cannot answer quickly, your process has a gap. Then add a hold-check step to your exit checklist and confirm your Microsoft 365 licensing supports holds and inactive mailboxes. Our eDiscovery services help Texas SMBs build preservation workflows, and our Microsoft 365 managed services can configure retention, holds, and offboarding automation. For broader coverage, review our Microsoft 365 eDiscovery guide for Houston businesses. This article is general information, not legal advice; talk to your attorney about your specific situation.

• Managed IT services in Houston
• Managed IT services in Sugar Land
• Managed IT services in The Woodlands