Category: Disposition and Destruction

Disposition Review

Also known as: Disposition review process

Simply put

A disposition review is a controlled checkpoint where a designated reviewer examines records or content that have reached the end of their retention period before any final disposition action, such as permanent deletion, is carried out. Rather than allowing content to be automatically disposed of, this step gives a person the opportunity to confirm whether the material should be destroyed, retained longer, or handled differently. It acts as a human validation stage in the wider records lifecycle.

Formal definition

A disposition review is a manual validation step interposed between the expiry of a retention period and the execution of a disposition action, in which an authorized reviewer assesses items to approve, defer, or otherwise direct their disposition. In systems such as Microsoft Purview and SharePoint Online, reviewers are typically presented with contextual metadata about each item, such as indexed properties, storage location, creator, creation date, and last-modified details, to inform the decision. The reviewing function may also encompass correcting misclassified content (for example, re-indexing) before disposition proceeds, and in some platforms a review can be prepared, which triggers validation checks, prior to being published and initiated. Disposition review should be understood as a governance and approval control over disposition outcomes; it does not itself equate to destruction, since the resulting disposition may include retention extension, transfer, or permanent deletion depending on the reviewer's decision and organizational policy.

Why it matters

Disposition review addresses one of the more consequential moments in the records lifecycle: the point at which content that has reached the end of its retention period is about to be acted upon, potentially through permanent deletion. Automating disposition without any human checkpoint carries risk, because a retention period expiring does not always mean an item is genuinely ready for destruction. Material may have been misclassified, may have become subject to a legal hold or ongoing investigation, or may have residual business, evidential, or historical value that warrants extending retention or directing the item to transfer or permanent preservation rather than deletion. A disposition review inserts a deliberate, accountable pause to confirm the intended outcome before it becomes irreversible.

The control also supports defensibility. In many jurisdictions and sectors, organizations are expected to be able to demonstrate that disposition decisions were made in a systematic, authorized, and documented way rather than arbitrarily. Having a designated reviewer approve, defer, or redirect disposition creates a governance record of who made the decision and on what basis, which can matter when disposition practices are later questioned. It is worth emphasizing that disposition review is not synonymous with destruction; it is an approval control over disposition outcomes, and the outcome may equally be retention extension, transfer, or deletion depending on the reviewer's judgment and organizational policy.

The value of the review depends on the quality of the information presented to the reviewer and on the reviewer's authority and competence. Where reviewers are shown contextual metadata, such as where an item is stored, who created it and when, and who last modified it, they are better positioned to make an informed decision. The review step also provides an opportunity to correct upstream classification errors, for example by re-indexing content that was labeled incorrectly, before disposition proceeds.

Who it's relevant to

Records Managers and Recordkeeping Staff

Records managers are often the ones who design and operate disposition review processes, determining which content requires review before disposition and defining the criteria for approving, deferring, or redirecting items. They rely on the review step to catch misclassified content and to ensure that disposition outcomes align with retention schedules and organizational policy.

Designated Disposition Reviewers and Approvers

Individuals assigned authority to review and approve disposition jobs use this control to make the final judgment on items that have reached the end of their retention. They depend on the contextual metadata presented, storage location, creator, creation and modification details, to decide whether an item should be deleted, retained longer, or handled differently, and may need to re-index incorrectly classified documents before proceeding.

Information Governance and Compliance Leads

Those responsible for the broader accountability framework value disposition review as a defensible, documented control over how content is ultimately disposed of. It helps demonstrate that disposition decisions are systematic and authorized rather than automatic or arbitrary, which can be important where disposition practices may later be scrutinized. Requirements around documentation and authorization will depend on jurisdiction and sector.

System Administrators and Platform Configurators

Staff who configure records systems such as Microsoft Purview or SharePoint Online set up disposition reviews for content under retention, define reviewer roles, and manage platform-specific steps such as preparing versus publishing a review. Understanding how validation checks and review workflows behave in a given platform is essential to implementing the control correctly.

Inside Disposition Review

Trigger and eligibility assessment

The step of confirming that records have reached the end of their retention period and are eligible for a disposition action, based on the applicable retention schedule and any event- or time-based triggers.

Verification of disposition action

Confirmation of which disposition outcome applies to each record or class, recognizing that disposition may include destruction, transfer to another body, or permanent preservation, rather than destruction alone.

Legal hold and obligation check

A check that no legal hold, litigation, audit, investigation, or outstanding statutory or regulatory obligation prevents the proposed action. Such obligations typically vary by jurisdiction and sector.

Authorization and sign-off

The recorded approval, often by a designated records or business authority, that permits the disposition to proceed. The required approvers and delegations generally depend on organizational policy.

Documentation and audit trail

Evidence of the review itself, capturing what was assessed, decided, approved, and carried out, so the disposition can be demonstrated as authorized and defensible.

Metadata and disposition records

Retention of metadata about disposed records where policy or obligations require it, supporting accountability even after the underlying records are destroyed or transferred.

Common questions

Answers to the questions practitioners most commonly ask about Disposition Review.

Does disposition review always mean deciding to destroy records?

No. Disposition review examines whether records have reached the end of their retention period and determines the appropriate disposition outcome, which may include destruction, transfer to another custodian, or permanent preservation. Destruction is only one possible result. Treating disposition as synonymous with destruction is a common confusion; disposition is the broader concept, and review is the point at which the specific outcome is confirmed or reconsidered.

Is disposition review the same as archiving?

Not necessarily. Archiving typically refers to the ongoing retention and preservation of records that continue to have value, often those identified for permanent or long-term keeping. Disposition review is the decision-making step that may lead to archiving as one outcome, but it may also lead to destruction or transfer. Retention and archiving should not be treated as identical, and disposition review is distinct from both because it is the evaluative process rather than the storage arrangement itself.

What typically triggers a disposition review?

Disposition reviews are often triggered when records reach the end of a defined retention period as specified in a retention schedule. Depending on organizational policy, reviews may also be prompted by scheduled cycles, system flags, business or functional changes, or the closure of a matter or case. The specific triggers depend on the retention framework in use and how disposition is operationalized within a given organization.

How do legal holds affect a disposition review?

In many jurisdictions, records subject to a legal hold are excluded from disposition actions such as destruction until the hold is lifted, even if their retention period has otherwise lapsed. A disposition review therefore typically includes a check for any applicable holds, litigation, investigations, or other obligations that would suspend disposition. The precise requirements depend on jurisdiction, sector, and organizational policy.

Who is usually involved in a disposition review?

Participation depends on organizational structure, but disposition reviews often involve records management staff alongside relevant business owners who understand the ongoing value of the records. Depending on the outcomes under consideration, input may also be sought from legal, compliance, privacy, or archival functions. Assigning clear accountability for review decisions helps support defensible disposition.

What should be documented as part of a disposition review?

Organizations typically document the records considered, the applicable retention rule or schedule, the disposition outcome decided, confirmation that no holds apply, and the authorization for the action. Maintaining this documentation supports the defensibility of disposition decisions and provides evidence that records were dealt with in accordance with policy. The specific documentation practices depend on organizational policy and any applicable regulatory expectations.

Common misconceptions

Disposition review is just a step before destroying records.

Destruction is only one possible disposition outcome. A disposition review may also confirm transfer to another organization or archive, or permanent preservation, so it is not synonymous with destruction.

Once a retention period expires, records can be disposed of automatically without further checks.

Expiry of a retention period typically establishes eligibility, but a review still confirms that no legal hold or other outstanding obligation applies before any action proceeds. Such obligations often depend on jurisdiction and sector.

A disposition review needs no record of its own once the action is complete.

The review and its authorization are usually documented so the disposition can be shown to be authorized and defensible, and metadata about disposed records is often retained even after the records themselves are gone.

Best practices

Confirm eligibility against the current, approved retention schedule and any applicable time- or event-based triggers before proposing any disposition action.

Check for and clear legal holds and any outstanding audit, investigation, or statutory obligations, recognizing that these requirements typically vary by jurisdiction and sector.

Distinguish the intended disposition outcome for each record or class, since disposition may involve destruction, transfer, or permanent preservation rather than destruction by default.

Obtain and record appropriate authorization consistent with organizational policy and delegations before the action is carried out.

Maintain a documented audit trail of what was reviewed, decided, approved, and executed so the disposition remains demonstrably defensible.

Retain metadata about disposed records where policy or obligations require it, to preserve accountability after the underlying records are removed.