36 Crisis Response: The Legal Lens

Learning Objectives

You will be able to:

Identify the legal obligations that arise immediately when a crisis occurs.
Explain evidence preservation, the legal hold, and why routine deletion becomes a serious problem.
Identify the regulatory, disclosure, contractual and personal exposures a crisis creates.
Explain the tension between legal caution and the other lenses, and how it should be resolved.
Apply the legal lens to a corporate episode and recommend a defensible sequence of actions.

36.1 Introduction

Chapter 35 set out the anatomy of a crisis and introduced the running case. This chapter applies the first of three lenses.

The legal lens asks a narrow set of questions: what must be done, by when, and by whom; what exposure exists and to whom; and what must be preserved so that the answers can be given later. It is the lens that operates on deadlines, and its distinguishing feature is that several of its requirements are unforgiving. A missed statutory notification cannot be cured by a good explanation, and a document deleted after an obligation to preserve arose is a separate and often more serious problem than whatever the document contained (K. R. Bulchandani, 2021).

The lens has a characteristic distortion, and this chapter is candid about it. Legal advice under pressure tends toward caution: say less, admit nothing, wait for facts. That advice minimises one exposure and can increase others, and Chapters 37 and 38 explain why. The right use of the legal lens is to establish the floor of what must be done, not the ceiling of what may be.

flowchart TD
    A["<b>Crisis occurs</b>"] --> B["<b>Immediate</b><br>stop harm, preserve evidence,<br>legal hold, engage counsel"]
    B --> C["<b>Notification</b><br>sector regulator, SEBI and<br>exchanges, customers,<br>insurers, counterparties"]
    C --> D["<b>Investigation</b><br>scope, independence,<br>privilege, interviews"]
    D --> E["<b>Exposure map</b><br>regulatory, disclosure,<br>consumer, contractual,<br>personal, criminal"]
    E --> F["<b>Remediation and<br>resolution</b>"]
    style B fill:#ffebee,stroke:#C62828
    style C fill:#fff8e1,stroke:#F9A825
    style E fill:#ede7f6,stroke:#7E57C2
    style F fill:#e8f5e9,stroke:#388E3C

36.2 Preserving the Record

The first legal act in any crisis is not to advise on liability. It is to stop the destruction of evidence, and the reason is that ordinary business practice destroys evidence continuously and automatically.

The Legal Hold

Element	What it requires
Scope	The people, systems and materials likely to hold relevant information: email, messaging, shared drives, plant records, laboratory data, samples, CCTV, phone records, supplier correspondence
Suspension	Immediate suspension of automatic deletion, retention schedules, mailbox archiving and device reallocation
Instruction	A written notice to each custodian, stating what must be preserved, that deletion must stop, and that the instruction continues until lifted
Physical evidence	Retention of retained samples, failed components and production records, with chain of custody documented
Acknowledgement	A record that each custodian received and understood the instruction
Monitoring	Periodic confirmation that the hold is being observed, since a hold nobody checks is frequently not observed

Common Misconception: Deleting Routine Material Is Not Serious Because It Was Routine

Once an investigation, a claim or a regulatory inquiry is reasonably foreseeable, the character of ordinary deletion changes. Material destroyed after that point invites an inference against the company, and the inference is often more damaging than the material would have been.

Three patterns cause most of the harm, and none involves anybody intending to conceal. Automatic deletion continues because nobody suspended it, and thirty days later the relevant mailbox archive is gone. Tidying occurs because an employee who is worried clears a folder or a chat, on their own initiative and without instruction. And device reallocation wipes a laptop belonging to someone who has left, in the ordinary course of information technology practice.

The consequence is that a company defending a difficult but arguable position finds itself defending a destruction question instead, and losing it. The hold must therefore be issued within hours, in writing, before anyone has decided what the company’s position is.

36.3 Notification

A crisis usually triggers several notification obligations at once, on different deadlines, to different recipients, and the list must be constructed early because the deadlines run from the event rather than from the company’s readiness.

Recipient	Trigger and content
Sector regulator	Statutory reporting duties, which in a food safety matter arise under the food safety framework (Government of India, 2006) and in other sectors under the relevant regulator’s requirements described in Chapter 4
Stock exchanges	Disclosure of a material event under the listing framework, on the timelines Chapter 27 described, applying the company’s own materiality policy (Securities and Exchange Board of India, 2015)
Customers and distributors	Contractual notification duties, and the practical need to stop further distribution
Insurers	Policy conditions requiring prompt notice, breach of which can void cover at the moment it is needed
Lenders	Covenant and material adverse change provisions
Overseas authorities and customers	Where product has been exported, obligations arising in the destination market, which may be stricter and faster than domestic ones
Employees	Not a legal obligation in most cases, and the omission that most reliably produces leaks

The disclosure obligation deserves particular attention because it is the one managers most often get wrong under pressure. Chapter 27 established that waiting for certainty misreads the obligation, since the market prices probability. The correct discipline in a crisis is that the event triggers the assessment immediately, the authorised person decides, and the decision either way is recorded with its reasoning.

36.4 Mapping the Exposure

A crisis rarely creates one legal problem. It creates several, running to different parties on different standards, and a response designed around only the most visible one will make the others worse.

The Exposure Map

Exposure	Who is at risk	Governed by
Regulatory	The company, through licence conditions, penalties, product recall directions, prosecution	Sector statute and regulator, per Chapters 3 and 4
Securities and disclosure	The company and its officers, for late, incomplete or misleading disclosure	Chapters 5 and 27
Consumer and product liability	The company as manufacturer, and in some circumstances sellers and service providers	Chapter 14, including failure to warn as an independent ground
Contractual	The company, toward customers, distributors and lenders	Chapter 10, including indemnities, warranties and termination rights
Employment	The company, in how it treats employees connected with the events	Chapters 20 and 21, including retaliation
Directors and officers	Individuals, as officers in default or for breach of duty	Chapter 12
Criminal	Individuals and the company, where a statute imposes it	Sector statutes and the general criminal law

Practitioner Insight: Separate the Four Questions That Get Confused

Under pressure, four distinct questions collapse into one conversation and produce a worse answer than any of them would separately.

What must we do? Statutory and contractual obligations with deadlines. This is not a matter of judgement and should be settled first, as a list with dates and owners.

What are we exposed to? The map above, assessed on the facts as currently known and updated as they develop. This informs decisions; it does not decide them.

What should we say? A communications question with legal constraints, not a legal question. Chapter 38 takes it.

What is the right thing to do? An ethical and governance question that the legal analysis cannot answer and frequently obscures. Chapter 37 takes it.

The failure mode is allowing the second question to answer the third and fourth. Minimising exposure is a legitimate objective and a poor decision rule, because the actions that minimise short-term legal exposure often maximise regulatory, reputational and long-term legal exposure together. A recall not made because it would be an admission is the standard example.

36.5 Investigation and Privilege

Two structural decisions about the investigation have legal consequences.

Independence. Where anyone senior may be implicated, an investigation conducted through the normal management line is worth little and will be treated as worth little by regulators, courts and the market. Independence can be supplied by external counsel, by a board committee, or by both, and the decision should be recorded with the reason.

Privilege. Communications for the purpose of obtaining or giving legal advice attract protection, and the scope of that protection in India is narrower than managers often assume. Three practical points follow. Involving lawyers does not make an operational investigation privileged; the purpose matters, not the recipient list. Copying counsel on an ordinary business email does not protect it. And a company that wishes to share an investigation report with a regulator or a customer should understand what that does to the position before it does it.

The tension is real and should be stated plainly. A fully privileged investigation preserves legal position and produces a report the company cannot use to demonstrate that it investigated properly. An open investigation produces something the company can show and cannot recall. The choice is a board decision, not a legal one, and it should be taken consciously rather than by default.

36.6 Where the Legal Lens Misleads

The legal lens is necessary and insufficient, and its characteristic failures are worth naming because they are predictable.

It treats admission as the danger, when the greater danger is usually delay. Regulators and courts treat prompt voluntary action favourably, and treat concealment as an aggravating factor.
It optimises for the proceeding that may never happen over the customer relationship, the licence and the workforce, which are certain.
It answers what is defensible rather than what is right, and the two diverge exactly in the cases that become crises.
It has no view on the people, so the employee who raised the original concern, the operator who followed an instruction, and the plant that will be blamed are outside its frame.
It is slow by design, and a crisis moves faster than legal certainty can be obtained.

The resolution is not to overrule counsel. It is to use the legal lens for what it does well, which is establishing obligations, deadlines, preservation and exposure, and to decide the remaining questions with the other two lenses in the room.

36.7 Case Studies

36.7.1 Case Study 1: The Hold That Was Not Issued

Return to Suvarna Foods. By Wednesday morning no legal hold has been issued. The plant head has asked his team to “get the quality files in order before anyone asks”. The company’s email retention policy deletes mailbox contents after ninety days unless archived. The quality assurance analyst has forwarded her original fourteen-month-old note to her personal email address. The retained samples from the batch in question are held at the plant with no chain of custody record.

Discussion questions

Identify every preservation failure and rank them by how much damage each is likely to cause.
The plant head’s instruction was probably innocent in intent. Explain why intent will not help the company.
Draft the legal hold notice, in no more than one hundred and fifty words, and state who must receive it and within what time.

36.7.2 Case Study 2: The Notification Sequence

Return to the case on Tuesday evening. The company has confirmed the batch, the production line and the shared raw material lot with the domestic product. Testing of the domestic stock has not begun.

Discussion questions

Build the notification list with deadlines. Identify which obligations run from Tuesday and which from a later trigger.
The domestic product is within Indian limits. Does an obligation to notify the domestic regulator arise, and what is the argument on each side?
The company secretary asks whether the stock exchange disclosure should wait until domestic testing is complete. Answer, applying Chapter 27, and draft the disclosure.

36.7.3 Case Study 3: The Investigation Nobody Can Show

Return to the case two weeks in. The board has commissioned an investigation through external counsel, structured to be privileged. Counsel’s report finds that the sourcing head’s decision fourteen months earlier was the pivotal failure and that the quality function had raised the issue appropriately. A major export customer asks for the investigation findings as a condition of resuming purchases. The regulator asks what the company has established. Counsel advises that sharing the report waives privilege.

Discussion questions

Set out the consequences of sharing and of not sharing, for each of the customer, the regulator, the litigation position and the workforce.
Whose decision is this, and on what basis should it be taken?
Design an approach that meets the customer’s and regulator’s needs without a full waiver. State honestly what it costs and whether it will satisfy them.

36.8 Applying the Chapter

Exercise: The Legal Response Plan

You are general counsel of Suvarna Foods. It is Tuesday, six in the evening, four hours after the European alert became public. CO-6 requires evaluation of a corporate episode and recommendation of improvements, so your plan must both act and identify what failed.

Issue the immediate instructions. List everything that must happen tonight, with the owner and the time. Include the legal hold, its scope and its custodians.
Build the notification schedule. Every recipient, the trigger, the deadline, who signs, and what the notification must contain. Flag any obligation whose deadline has already begun to run.
Decide on the domestic product. Set out the options from continuing sale through voluntary hold to recall. For each, state the legal consequence, the regulatory consequence and the consequence if the domestic testing later shows an exceedance. Recommend one and state what would change your mind.
Map the exposure. Complete the exposure table for this case, naming who is at risk under each head and what facts would increase or reduce it. Identify the two exposures the board is most likely to underestimate.
Constitute the investigation. Decide who investigates, what independence is required and why, what the scope is, and whether to structure it as privileged. Set out the consequences of your choice.
Separate the four questions. For this crisis, write the four lists explicitly: what must be done, what the exposure is, what should be said, and what the right thing to do is. Identify where the legal answer and the right answer diverge.
Handle the analyst. State what the company must not do, what it should do, and what the exposure is if her treatment is later examined.
Identify the legal failures that preceded the crisis. Looking back fourteen months, state what legal and compliance controls were absent, and recommend the four that must now be built.

Present an action list with times and owners, a notification schedule, an exposure map, and a two-page memorandum to the board setting out the four separated questions and your recommendation on the domestic product.

36.9 Summary

Chapter Summary

The legal lens asks what must be done and by when, what exposure exists and to whom, and what must be preserved so the questions can be answered later (K. R. Bulchandani, 2021). Several of its requirements are unforgiving: a missed notification cannot be cured by explanation, and a document destroyed after a preservation obligation arose is a separate and often worse problem than its contents.

The first legal act is stopping the destruction of evidence, because ordinary practice destroys it continuously and automatically. A legal hold defines scope across email, messaging, drives, plant and laboratory records, samples and supplier correspondence; suspends automatic deletion, archiving and device reallocation; instructs each custodian in writing; preserves physical evidence with chain of custody; records acknowledgement; and is monitored, since an unchecked hold is frequently not observed. Three patterns cause most harm without anyone intending concealment: automatic deletion nobody suspended, an anxious employee tidying a folder, and routine wiping of a departed colleague’s device.

Notification obligations arise simultaneously on different deadlines to sector regulators (Government of India, 2006), stock exchanges under the listing framework (Securities and Exchange Board of India, 2015), customers, insurers whose cover can be voided by late notice, lenders, overseas authorities where product was exported, and employees, whose omission most reliably produces leaks. Waiting for certainty misreads the disclosure obligation; the event triggers the assessment, the authorised person decides, and the decision either way is recorded.

Exposure runs simultaneously to regulatory, securities and disclosure, consumer and product liability, contractual, employment, directors and officers, and criminal heads. Four questions must be kept separate: what must be done, what the exposure is, what should be said, and what the right thing to do is. The failure mode is letting exposure minimisation answer the last two, because the actions that minimise short-term legal exposure often maximise regulatory, reputational and long-term legal exposure together.

Investigation raises two structural choices. Independence is required wherever anyone senior may be implicated. Privilege protects communications for the purpose of legal advice, is narrower than managers assume, is not conferred by copying counsel, and creates a real trade-off: a privileged investigation preserves position and cannot be shown, while an open one can be shown and cannot be recalled. That is a board decision, not a legal one.

The lens misleads predictably: it treats admission rather than delay as the danger, optimises for a proceeding that may never happen over relationships that are certain, answers what is defensible rather than what is right, has no view on the people involved, and is slow by design.

Key Terms

Legal hold · Custodian · Suspension of deletion · Chain of custody · Acknowledgement and monitoring · Automatic deletion · Tidying · Device reallocation · Adverse inference · Notification schedule · Material event disclosure · Insurer notice conditions · Overseas obligations · Regulatory exposure · Product liability · Failure to warn · Contractual exposure · Officer in default · Criminal exposure · The four separated questions · Independence of investigation · Privilege · Waiver · Admission versus delay · Defensible against right

Summary

Concept	Description
Preserving the Record
Legal hold	The instruction preserving everything relevant, issued within hours and before any position is formed
Custodian	A person or system holding material that must be preserved
Suspension of deletion	Halting retention schedules, archiving and automated purges, which otherwise continue by default
Chain of custody	The documented handling record without which a retained sample proves little
Acknowledgement and monitoring	The confirmation that custodians received the hold and the checks that it is observed
Automatic deletion	The commonest destruction pattern, involving nobody's intent and considerable damage
Tidying	An anxious employee clearing a folder or chat without instruction
Device reallocation	The routine wiping of a departed colleague's device in ordinary practice
Adverse inference	The conclusion drawn against a company from destruction, often worse than the material
Notification
Notification schedule	The list of every recipient with trigger, deadline, signatory and content
Deadlines run from the event	The feature making early construction essential, since readiness does not start the clock
Material event disclosure	The listing obligation triggered by the event and decided by the authorised person
Insurer notice conditions	The policy terms whose breach can void cover at the moment it is needed
Overseas obligations	Duties in destination markets, which may be stricter and faster than domestic ones
Employee notification	Not usually a legal duty, and the omission that most reliably produces leaks
The Exposure Map
Regulatory exposure	Licence conditions, penalties, recall directions and prosecution under sector statute
Product liability	Claims for harm caused by a defective product, reaching manufacturer and in cases sellers
Failure to warn	The independent ground arising from inadequate instructions or warnings
Contractual exposure	Indemnities, warranties, termination rights and notification duties toward counterparties
Employment exposure	Exposure arising from how employees connected with the events are treated
Officer in default	Personal liability of directors and officers for contraventions they knew of or failed to prevent
Criminal exposure	Liability of individuals and the company where a statute imposes it
Four Questions
What must we do	The first separated question: obligations with deadlines, settled first and not by judgement
What are we exposed to	The second: the exposure map, which informs decisions rather than making them
What should we say	The third: a communications question with legal constraints, not a legal question
What is right	The fourth: the question legal analysis cannot answer and frequently obscures
Investigation
Independence of investigation	Required wherever anyone senior may be implicated, and worth recording with the reason
Privilege	Protection for communications made for the purpose of obtaining or giving legal advice
Purpose not recipient	The rule that involving or copying lawyers does not by itself confer protection
Waiver	The consequence of sharing a privileged report, which is a board decision rather than a legal one
Where the Lens Misleads
Admission versus delay	The common misjudgement, since regulators treat prompt action favourably and concealment as aggravating
Defensible against right	The divergence that occurs precisely in the situations that become crises