Your leaver's inbox deletes itself in 30 days. A claim can now arrive months later.
From 1 October 2026, the time limit for most employment tribunal claims doubles to six months, and Acas Early Conciliation can already run for up to 12 weeks. Microsoft 365's default leaver settings were never built for that gap. Here is what happens to the data, and how to keep it.
The gap
The evidence disappears long before the claim arrives
This is what Microsoft 365 does by default when you remove a leaver's licence or delete their account, and no hold is in place.
The balance
Your retention settings have two jobs
Don't keep everything forever
UK GDPR expects personal data to be kept only as long as it's needed, so keeping every email indefinitely isn't the answer.
Don't let defaults decide
Automatic cleanup doesn't know a dispute has started. Unless someone switches it off, it keeps deleting on schedule.
Where it hides
Teams scatters a leaver's data across three places
Two of them belong to the leaver, so they disappear with the account. Only channel conversations stay with the team.
The fix
Hold first, then offboard
The damage is done by the order of the steps, not by any one step. Same leaver, two sequences.
What usually happens
- Employee dismissed
- Licence removed the same dayto save the cost
- Day 30mailbox and chats deleted
- Month 4HR asks for their emails
- Nothing left to find
Hold before offboard
- Block sign-inlicence stays on
- Check with HRdoes this data need keeping?
- Apply a holdmailbox, OneDrive, Teams chats
- Confirm it applied
- Hand files to the manager
- Remove the licence
- Mailbox kept as inactivesearchable, no licence needed
| Microsoft 365 plan | Can it hold a mailbox? | What to do |
|---|---|---|
| Business Basic | Not on its own | Add Exchange Online Archiving for at-risk leavers |
| Business Standard | Not on its own | Add Exchange Online Archiving for at-risk leavers |
| Business Premium | Yes, included | Build the hold into every leaver checklist |
No hold available? Keep the leaver licensed until the risk has passed. One licence costs far less than losing the evidence.
When HR asks
IT's first 48 hours when HR asks you to keep someone's data
Get the list
- Confirm with HR whose data needs keeping
- Pause any leaver offboarding already in progress
- Don't remove licences or delete accounts yet
Stop the deletion
- Place holds on their mailboxes, OneDrive and Teams chats
- Exclude them from any auto-delete or cleanup policies
- Check the holds have actually applied
Record and prepare
- Log what was held, when and who asked
- Test that an eDiscovery search finds their data
- Agree a review date with HR for releasing the holds
Also worth checking
Can you find the data, and does it stay put?
Can you search it quickly?
- Microsoft Purview eDiscovery searches email, OneDrive and Teams chats for one person in one pass
- Data on personal phones or unmanaged apps sits outside it
- Run a test search now, not on day 29
Is data leaving with people?
- Data loss prevention rules can flag or block sensitive files going to personal email
- Alerts for bulk downloads help during notice periods
- Sensitivity labels mark HR and client material
