[dredmorbius]

However if prior to receiving notice of the hold you'd wiped it as part of a documented data retention policy, odds are far smaller of falling afoul of legal process.

Sudden change of policy in conjunction with other shady events, harder time.