Apple: A Tax Protective Order Distinguished Managed Copies, Destruction and Outside Recipients

A demand to destroy every electronic copy of confidential tax-discovery records met detailed evidence about how government systems actually store them. In Apple Inc. v. Department of Revenue, No. TC 5471 (Or. Tax Ct. Jan. 23, 2026), the Oregon Tax Court adopted a tailored protective order. It distinguished secure managed systems, other electronic copies and records shared with outside recipients. The ruling concerns the protective order in this Oregon corporate tax litigation. Apple, opinion at 1.

Apple established sensitivity; the state explained its systems

Apple supported the proprietary value of its technology and business information. It proposed irretrievable destruction of electronic copies after the case, with limited server and backup retention. The revenue department objected to the operational burden.

Declarations described encryption, access controls and security frameworks used by the Department of Justice and revenue department. They described six to eight hours to wipe a workstation and another two to three to rebuild it, as well as destruction and replacement of affected iPhones under Apple’s proposed irretrievable-deletion terms. Apple’s evidence established commercial sensitivity but did not address why these particular safeguards were inadequate. The court found the state’s detailed evidence more persuasive on that disputed question. Apple, opinion at 6–10.

The adopted language preserved qualifying managed copies

The court adopted the state’s “Alternative 2” with modifications. Its exact language matters. Electronic copies not stored on the defendant’s or counsel’s secure server must be irretrievably deleted or destroyed within 30 days after the appeal periods expire, including any remand judgment. But the order expressly exempts network- or server-managed copies temporarily stored on laptops or similar devices when the same security practices apply as for other confidential tax information.

Thus, a local device copy is not necessarily subject to destruction merely because it is on a laptop. The management and security conditions matter. The order also preserves obligations imposed by law. Apple, adopted order, page 17.

Other agencies’ retention required a separate mechanism

The state’s evidence about its own systems did not establish every recipient’s safeguards. At the same time, the court recognized that authorized intergovernmental tax administration can continue beyond one lawsuit. It therefore used notice and a chance to seek modification rather than giving all outside recipients the same retention treatment automatically. Apple, opinion at 10–13.

The adopted language provides for notice of the protective terms when covered disclosures occur. Within 30 days after the case-resolution date, the state must notify the specified recipients of final resolution. A recipient then has 60 days after receiving that notice either to certify destruction of its electronic copies or move to intervene and seek a modification allowing retention, including on the basis of adequate protections. The order contains specified recipient exceptions and preserves legally required retention. The two clocks run from different events. Apple, adopted order, page 17–18.

Future protection remained a matter for the court

The court also preserved the ability to request additional protection or modification. Any later request requires the governing procedure and facts; the original order is not a promise that storage conditions can never change. The opinion discusses reliance interests in considering modification. Apple, opinion at 13–14.

The decision supplies a concrete example of evidence-based drafting: Identify where copies reside, who controls them, what security applies and what happens when litigation ends. The operative terms are case-specific. A business seeking protection should bring its sensitive-record categories and a technically accurate account of the proposed storage and sharing arrangements, so counsel can seek terms addressing the actual risk.