An online review dispute can become a legal evidence problem before anyone files a lawsuit. Reviews can be edited, replies can be deleted, platform dashboards can change, messages can disappear, employees can overwrite notes, payment processors can close chargeback windows, and account access can move from one person to another. A business that expects litigation, subpoenas, insurance review, a platform appeal, or a serious legal demand should think in terms of a litigation hold before it thinks in terms of public response.
Why a Review Dispute Can Trigger Preservation Duties
A negative review may begin as a customer-service problem, but it can quickly become a civil evidence problem. The review may accuse the business of fraud, theft, unsafe conduct, discrimination, billing manipulation, professional negligence, counterfeit products, privacy violations, or criminal behavior. The owner may consider a platform report, a public reply, a cease-and-desist letter, a subpoena to identify the reviewer, an insurance notice, a chargeback response, or a lawsuit. Once those possibilities become realistic, the business should stop treating the matter as ordinary marketing cleanup and start preserving the records that may later matter.
Federal Rule of Civil Procedure 37(e) addresses lost electronically stored information in federal litigation. The rule focuses on information that should have been preserved in anticipation or conduct of litigation, whether reasonable preservation steps were taken, whether information was lost, whether it can be restored or replaced, prejudice, and intent. New York practice has its own discovery-sanction framework, including CPLR 3126, which allows courts to issue consequences for refusal or willful failure to disclose information that should have been disclosed. These rules do not mean every angry review automatically creates a full litigation hold. They do mean that when the dispute is serious enough to make legal action reasonably foreseeable, preservation should be deliberate and documented.
This article is general information and attorney advertising, not legal advice. Litigation-hold duties depend on jurisdiction, forum, sophistication of the parties, timing, expected claims, control over records, platform architecture, contracts, insurance language, and the actual likelihood of litigation. A small business should not panic and preserve every byte forever. It should make a reasonable, counsel-guided preservation plan that fits the dispute and prevents avoidable destruction of relevant evidence.
Start With the Exact Online Publication
The first item in the file is the publication itself. Preserve the URL, platform, profile name, rating, headline, body text, images, video, comments, business replies, date, visible edit history, report buttons, surrounding thread, and search-result context. If the review appears on a location profile, capture the business name, address, category, star rating, review count, and any visible owner response. If the accusation appears in a video, preserve the title, channel, upload date, description, transcript, timestamps, comments, and related reposts. If the post appears in a forum or social thread, preserve the parent comment and the replies that show spread or interpretation.
A cropped screenshot is rarely enough. It may show the damaging words, but it often fails to show the URL, date, account context, nearby comments, image attachments, visible rating, or whether the post was edited later. Use full-page captures, PDFs, image files, and browser metadata where feasible. Record who collected the evidence, when, from what account state, on what device, and whether the page was public or required login. The point is not technological perfection. The point is to make the file understandable to counsel, insurers, platform reviewers, judges, mediators, and future business managers.
Preservation should happen before the business flags the post, replies publicly, asks customers to counter-post, contacts the suspected reviewer, deletes old messages, changes the location profile, or edits its own response. Those actions can change what the platform displays and can make later reconstruction harder. Glinskylaw's guide on business records and evidence preservation before online review disputes explains the same first principle: capture unstable online evidence before it moves.
Preserve the Business Records That Test Truth or Falsity
Defamation analysis often turns on whether a statement is fact, whether it is false, whether it caused harm, and whether a defense such as truth, opinion, privilege, consent, or fair report may apply. A review that says the staff was rude may be difficult to litigate. A review that says the business stole a deposit, forged an invoice, hid fees, poisoned a customer, overbilled an estate, or charged for services never provided is closer to a factual accusation that records may confirm or contradict. The legal file should therefore include the business records that test the statement, not only the words on the screen.
For a service business, that may mean appointment logs, intake forms, contracts, service notes, photos, quality-control checklists, customer messages, refund records, staff schedules, incident reports, supplier records, insurance communications, payment processor records, and follow-up emails. For a professional or fiduciary business, it may include engagement letters, trust or estate records, accounting files, account statements, billing entries, tax records, distributions, approvals, and beneficiary communications. For a retailer, it may include product records, shipping information, serial numbers, return logs, warranties, complaint notes, and inventory data.
Accounting evidence deserves special discipline because review disputes often become payment disputes. If the accusation involves hidden charges, tax misconduct, unpaid invoices, fake receipts, cash handling, refunds, deposits, chargebacks, payroll, owner withdrawals, or trust-account concerns, the legal team should know where ledgers, bank statements, processor reports, reconciliations, and invoices are stored. A business that wants outside help organizing those materials may naturally consult accountants or a bookkeeping provider; in an international or small-business context, a discreet resource such as a best accounting firm can be relevant when the dispute depends on clean records rather than marketing tone.
Do Not Confuse Platform Policy With Litigation Evidence
Platform rules and court rules ask different questions. Google Maps policy states that contributions should reflect genuine experiences and should not include fake engagement, rating manipulation, incentivized reviews, conflicts of interest, off-topic content, advertising, or certain forms of restricted content. Google Business Profile materials also provide a process for reporting inappropriate reviews. Those policies can support a report or appeal, but a platform moderator is usually deciding whether the post violates platform standards. A court, insurer, or opposing counsel may ask a wider set of questions about truth, damages, notice, preservation, contracts, communications, and proportionality.
A common mistake is sending a platform report before the business has saved what it submitted. The report may include categories, explanations, attachments, screenshots, dates, and legal assertions. If the platform denies the report, removes the review, limits appeal rights, or asks for more information, those messages become part of the file. Preserve confirmation numbers, emails, dashboard notices, policy categories, rejection language, appeal deadlines, and any versions of the post that remain visible after moderation.
Another mistake is writing platform reports and legal letters as if they were the same document. A platform report should be narrow, policy-specific, and supported by clean attachments. A legal letter may address falsity, privilege, harm, preservation, demand terms, jurisdiction, and remedies. An insurance notice may require different facts again. When the business recycles one emotional narrative across every channel, it increases inconsistency risk. Separate the routes and preserve each submission.
Avoid Self-Inflicted Spoliation Problems
Businesses sometimes damage their own evidence position while trying to protect their reputation. They delete owner replies because the tone was angry. They ask staff to clean up internal chats. They remove old appointment notes because they look incomplete. They alter refund descriptions. They overwrite a spreadsheet. They change the customer record after learning that a lawsuit may be coming. They disable a platform integration that contains message history. Even if the motive is tidiness rather than bad faith, these actions can create arguments that relevant evidence was lost.
A litigation hold should identify the sources to preserve and the routine processes to pause or modify. Sources may include email, texts, messaging apps, CRM notes, review dashboards, booking systems, payment processors, accounting software, cloud drives, employee devices used for business communications, call logs, voicemail, CCTV retention, social media inboxes, customer-service tickets, and website forms. The hold should name an owner, list custodians, define the relevant date range, explain what not to delete, and set a review cadence. It should be practical enough that managers can follow it.
Reasonable preservation does not require perfection. Federal Rule 37(e) recognizes that electronically stored information can be lost and focuses on reasonable steps, restoration or replacement, prejudice, and intent for severe measures. But a court is more likely to understand an imperfect process that was documented than a vague claim that everyone simply knew to keep everything. The file should show when the hold began, who received it, what sources were covered, what steps were taken, and what limits were reasonable for the business.
Build a Chain of Custody That a Non-Technical Reader Can Follow
Online evidence is persuasive only when someone can understand where it came from. A chain-of-custody log does not need to be theatrical. It can be a simple spreadsheet or memorandum that records the item, URL, source system, collection date, collector, method, file name, storage location, notes, and later changes. If a PDF, image, or video is created, preserve the original export and avoid overwriting it with annotated copies. If the team uses hashes or forensic tools, record those details. If not, at least keep file names, collection dates, and unedited source files consistent.
The same principle applies to business records. If a receipt was pulled from a point-of-sale system, say so. If a ledger was exported from accounting software, preserve the export date and the reporting period. If a staff member created a chronology from memory, label it as a chronology rather than a contemporaneous record. If a customer message was copied from a phone, preserve screenshots and, where feasible, the underlying conversation export. If a platform dashboard only shows data for a limited time, record that limitation.
This discipline helps counsel decide what can be used and what should remain internal. It also protects the business from overclaiming. A lawyer can say with more confidence that a record was preserved on a certain date, from a certain system, by a certain person, if the file says exactly that. A vague folder of screenshots may still help, but it gives the other side more room to question authenticity, completeness, and context.
Subpoenas, Anonymous Reviewers, and Third-Party Platforms
If the reviewer is anonymous, the business may want a subpoena. That decision should come after evidence preservation, not before it. Federal Rule of Civil Procedure 45 governs subpoenas to nonparties in federal civil litigation, and state procedures may apply in state court. Platforms may have procedures for civil legal requests, user notice, objections, jurisdictional limits, and data retention. Courts may also consider anonymous speech interests, the strength of the claim, relevance, proportionality, and whether the business has enough evidence to justify identification.
Before seeking identity information, ask whether the identity is actually necessary. Sometimes the business can resolve the matter through platform policy, private customer service, insurance review, a chargeback response, or a measured public reply without naming the speaker. Sometimes the accusation is serious enough that identity matters, especially where the post alleges crimes, targets a professional license, reveals confidential records, or appears coordinated with a competitor or extortion demand. The answer depends on the facts, not on frustration.
Preserving third-party platform information is time-sensitive. The business does not control all platform logs, account data, IP information, edit history, device signals, or internal moderation records. A legal team may need to evaluate whether a preservation letter, subpoena, court order, or other request is possible and proportionate. Glinskylaw's guide on anonymous online reviews and subpoenas provides related background for that analysis.
Review Suppression, the FTC Rule, and Consumer Review Fairness
A litigation hold is not a license to suppress criticism. The FTC's Consumer Reviews and Testimonials Rule, which took effect on October 21, 2024, addresses deceptive or unfair conduct involving reviews and testimonials, including fake reviews, review buying, insider reviews, company-controlled review sites, certain review suppression, and misuse of fake social media indicators. Businesses should be careful when asking for edits, offering refunds tied to review removal, threatening reviewers without a grounded basis, or presenting curated testimonials as if they represent all feedback.
The federal Consumer Review Fairness Act, codified at 15 U.S.C. Section 45b, also restricts certain contract provisions that prevent or penalize consumer reviews. This does not mean a false factual accusation must be ignored. It does mean that review governance should separate legitimate preservation, investigation, and legal action from intimidation, confidentiality overreach, or attempts to block honest consumer speech. A business can preserve evidence and challenge false statements while still respecting lawful consumer-review rights.
The safest posture is to document the reason for every action. If the business asks a reviewer for clarification, preserve the message and avoid pressure. If it offers a refund, do not condition the refund on a particular review outcome unless counsel has reviewed the risk. If it reports a review to a platform, cite the policy category and evidence. If it sends a demand letter, make sure the legal basis is specific and supportable. That record can matter if the reviewer later claims the business tried to suppress a lawful review.
Public Replies Should Not Destroy the Legal File
A public reply can help future customers see that the business is attentive, but it can also create evidence, admissions, privacy issues, and escalation risk. Before replying, preserve the review and the internal records. Then decide what the reply should accomplish. In many cases, the best public response is short: acknowledge concern, avoid discussing private customer details, invite offline contact, and avoid accusing the reviewer of fraud unless counsel has reviewed the facts. The reply should not reveal payment details, medical facts, personnel information, family information, estate records, security footage, or private messages.
Do not use the public reply as the first place to test the evidence. If the review says a charge was unauthorized, pull the authorization documents and processor logs before answering. If it says a staff member did something unsafe, preserve schedules, incident reports, CCTV retention status, and staff statements before responding. If it says the business committed a crime, preserve the post and discuss the legal route before accusing the reviewer of extortion, harassment, or defamation. An angry reply can become the next exhibit.
If the business later edits the reply, preserve both versions. Platforms, customers, and opposing parties may have screenshots of the earlier version. A clean record of why the reply changed is better than pretending it never existed. Treat business replies as publications with their own risk profile, not as casual social media comments.
A Practical First-Week Checklist
First, assign one owner for the file. Second, preserve the online publication in full context before reporting or replying. Third, save platform notices, dashboard screens, report confirmations, and appeal options. Fourth, identify the records that prove or disprove the specific accusation: contracts, receipts, ledgers, messages, service notes, booking files, chargeback records, payroll records, incident reports, insurance documents, or fiduciary records. Fifth, stop routine deletion of the sources most likely to matter while counsel decides whether a formal hold is needed.
Sixth, create a short chronology. Include the underlying transaction, customer communications, disputed event, publication date, business awareness, internal investigation, platform reports, public replies, refund discussions, legal letters, insurer contact, and any deletion or edit. Seventh, separate response routes. Platform report, public reply, private outreach, insurance notice, subpoena strategy, and lawsuit evaluation should have different drafts and different evidence attachments. Eighth, record custody: who collected what, when, from where, and where it is stored.
Ninth, review whether the dispute implicates broader systems. A review about billing may reveal accounting controls that need improvement. A review about safety may reveal staff training or incident-reporting issues. A review about confidentiality may reveal access-control problems. A review about a family business or fiduciary service may reveal governance gaps. Tenth, update the system after the dispute. Better recordkeeping is not only defensive. It reduces future legal cost and helps management respond calmly when the next online issue appears.
Bottom Line
A litigation hold for an online review dispute is a practical business discipline. It does not mean every review becomes a lawsuit. It means the business recognizes that online content changes, platform processes move quickly, and the most important evidence may be scattered across review dashboards, accounting software, messages, payment systems, service records, and staff devices. Preserving those materials early gives counsel better options and reduces the risk that the business accidentally destroys the evidence it needs.
The strongest file is organized around exact statements, exact records, and exact actions. It distinguishes platform policy from legal claims. It preserves original versions before edits. It keeps accounting and operational evidence with the online publication. It documents custody. It avoids threatening, deleting, suppressing, or publicly overexplaining before the legal file is stable. For many businesses, that discipline is the difference between a manageable online review problem and a civil litigation problem made worse by missing evidence.
This article is general information and attorney advertising. It is not legal advice, accounting advice, tax advice, employment advice, platform-policy advice, or a recommendation for any particular preservation notice, subpoena, takedown request, demand letter, lawsuit, or public response. Businesses facing a real online review dispute, civil claim, subpoena issue, insurance notice, accounting dispute, or defamation question should consult qualified advisors familiar with the facts, jurisdiction, contracts, platform rules, and timing.
Related Firm Practice
For related services, see Online Review Litigation Holds & Business Evidence.
External References
- Legal Information Institute: Federal Rule of Civil Procedure 37
- New York Senate: Civil Practice Law and Rules Section 3126
- Legal Information Institute: Federal Rule of Civil Procedure 45
- Google Maps: Prohibited and Restricted Content
- Google Business Profile: Report Inappropriate Reviews
- FTC: Consumer Reviews and Testimonials Rule
- Legal Information Institute: 15 U.S.C. Section 45b Consumer Review Protection
- Legal Information Institute: 47 U.S.C. Section 230
- Legal Information Institute: Defamation
- New York Senate: CPLR Section 215