That would probably be the best defense. If the destruction was carried out as part of a regularly scheduled program instead of as a specific response to law enforcement's demand for the data, you might be alright.

Lots of companies automatically delete all email older than six months for this exact reason, actually.