New York Boston Washington, DC

San Francisco Los Angeles Las Vegas

Chicago Denver Albany Redmond

Europe Asia South America    

Computer Forensics Electronic Discovery Security Auditing
    Home | Contact | Site Map

 

COMPUTER FORENSICS Forensic Services

Email Forensics

INCIDENT RESPONSE

TRAINING
CORPORATE SERVICES
ATTORNEYS

PRIVATE INVESTIGATORS

COMPUTER FORENSIC FAQ

COMMON MISTAKES

QUICK ANALYSIS PLAN

FORENSIC PROCESS

CASE STUDIES

CORPORATE CV

REQUEST A QUOTE

FORENSIC LINKS

 

ELECTRONIC DISCOVERY
E-DISCOVERY SERVICES

DISCOVERY CONSULTING

EXPERT WITNESSES
CASE STUDIES

EVOLUTION OF DISCOVERY

STATE OF THE LAW

E-DISCOVERY LAW

E-DISCOVERY LIBRARY

SPOLIATION CASE LAW

E-DISCOVERY NEWS

REQUEST INFORMATION

CORPORATE CV

 

DATA SECURITY
MAINFRAME SECURITY
APPLICATION SECURITY

NETWORK SECURITY

SECURITY ALERTS

END USER TIPS

SECURITY LINKS

 

SOFTWARE
MaxPatrol

KEY FEATURES

ACCURACY

SCAN QUALITY

PERFORMANCE

RELIABILITY

COMPARISONS

CASE STUDIES

DATABASE

UPDATE SYSTEM

DOWNLOAD

 

RESOURCES
CONTACT INFO
COMPUTER FORENSICS
ELECTRONIC DISCOVERY
PARTNERS
PRIVACY POLICY

TERMS OF USE

 

 

New MaxPatrol Demo Available!
New Demo version includes new intelligent algorithms for detection of blind SQL-injection vulnerabilities in ANY (including custom) web-applications.

 

Go to Demo Download page

DIGITAL DISCOVERY STATE OF THE LAW

Here's an excerpt form "Ball in Your Court"

There's a new species of evidence in town. It's called ESI, for electronically stored information, and it encompasses any potentially relevant data that's stored on computers, disks, tape, gadgets and the Internet.

The amendments don't so much create new rights as compel lawyers and litigants to deal with the central role computers and the Internet play in business and our lives. ESI comprises a startling 95 percent of all information created nowadays, yet legions of lawyers have been remiss in marshalling this rich evidentiary resource, preferring instead to focus on familiar paper documents. The Federal Rules of Civil Procedure make clear that discovery of ESI stands on equal footing with discovery of paper documents and require that any request for production of documents be understood to include a request for ESI. Although the committee members who drafted the ESI amendments could have stretched the definition of "document" to include ESI, they wisely recognized that more was needed. After all, so much of the electronic information that impacts our lives -- databases, Web content, voice messaging, even spreadsheets -- bears little resemblance to conventional documents. Instead, ESI is defined broadly to encompass the forms computer-based information takes today and adapt to whatever tomorrow brings.  Read the rest here

 

In 1970, the Supreme Court amended the Federal Rules of Civil Procedure to clarify the issue of discoverability of information stored in computers. Generally, the Supreme Court stated, the discovery principles that apply to paper-based records should apply with equal force to electronic-based records. Electronic-based records include an employee's word processing files, spreadsheets, databases, personal e-mail, backup tapes, and other items. Both the language of the Federal Rules and recent case law make clear that digital discovery requests are controlled by the traditional discovery rules set forth in Federal Rules 26 and 34.  See Anti-Monopoly, Inc. v. Hasbro, Inc., 1995 WL 649934 (SDNY 1995), Crown Life Insurance Co. v. Craig, 995 F.2d 1376 (7th Cir. 1993), and National Union Electric Corp. v. Matsushita Electric Industrial Co. 494 F. Supp. 1257 (ED 1980).

While the translation of discovery principles from the traditional paper to the digital context is largely fluid, issues of cost present a potential disjoint. Traditional discovery procedure dictates that the producing party pays the costs of internal preparation for discovery, while the discovering party pays for the costs of copying and transportation. Electronic evidence introduces a more problematic situation. Copy and transportation costs are negligible, but production of the data can be extremely expensive due to the scale of what can be saved-and thereby requested-for discovery. See Sattar v. Motorola, Inc., 138 F.3d 1164 (7th Cir. 1998).

Email provides a probing example. An organization with 100 employees, each generating an average of 10 to 15 email messages per day, will accumulate 240,000 to 360,000 email messages in a year, before we even factor in copies and back-ups. Neither the emails nor, most certainly, the backups and copies will be neatly organized and labeled; as a result, they will need to be searched and categorized in response to a discovery request or turned over wholesale for inspection by the opposing party. While the Federal Rules allow for some cost shifting, we have little idea of  how courts will use this discretionary power. See Fennell v. First Step Designs. Ltd., 83 F.3d 526 (1st Cir. 1996); see also Monotype Corp. PLC v. International Typeface Corp., 43 F.3d 443 (9th Cir. 1994); see also Playboy Enterprises, Inc. v. Terri Welles, 60 F.Supp. 2d 1050; 1999 US Dist. LEXIS 12895 (SD Cal 1999). "Come and get it" options appear unworkable, as no one wants adversarial parties examining personal computer systems. See Lawyers Title Ins. Corp. v. US Fidelity & Guar. Co., 122 FRD 567 (ND Cal. 1988); see also Strasser v. Yalamanchi, 669 So.2d 1142 (Fla. Dist. Ct. App. 1996). It is possible that opposing parties will not act economically when the other party pays for discovery costs.  On the other hand, overseeing the process of discovery oneself places significant burden on the producing party, rendering no option particularly compelling.  

National Union Electric Corp. v. Matsushita Electric Industrial Co. 494 F. Supp. 1257 (ED 1980) demonstrates another cost issue raised by digital discovery. In National Union, the court addressed the added burden imposed by digital discovery due to the myriad of available formats in which data can be produced. The requesting party asked the court to order its opponent to provide a computer tape containing the same information as was contained on a computer printout. The producing party contested, arguing that there was no computer-readable tape of this material in existence; therefore, it should not be required to "create" the tapes for the sole purpose of discovery production. The court ordered the producing party to create the computer-readable tape, indicating that a requesting party that receives discoverable documents in hard format is not precluded from requesting and receiving a digital -- and more easily readable -- version of the same information. Further, the fact that such discoverable information never existed in a digital format in the first place does not obviate its production.

Cost and expediency of discovery concerns are complicated further by issues of volume. The simplicity of saving and archiving data with electronic media can be a burden when it comes to discovery. Digital discovery tends to be voluminous, as electronic data are easier to copy, archive and distribute; electronic data, unlike their conventional counterparts, do not disappear easily. It is difficult to actually delete and destroy an electronic document. Whether it exists as active, replicant, archival, or residual data, a document rarely dies. The requesting party can easily lose sight of the relationship between the potential value of desired data and the projected cost of retrieving it.

The new media through which electronic documents can be transmitted raise serious privacy issues. Email, records of Web sites visited, transcripts of chat room discussions, and digital voicemail are but a few examples of the relatively new venues for discovery that courts can allow. The permissive attitude courts are taking towards these media tempt employers to monitor employees' emails and Internet use and to otherwise limit workers' privacy.

These questions of cost, volume, and privacy remain open. The courts' and our legal tradition's proclivity towards integrating new forms into extant categories is the source of many of the problems of, as well as the potential solutions for, digital discovery questions. The lingering quandary that judges and advocates must grapple with is whether or not there is anything inherently different about digital discovery that would logically lead to a new discovery approach, or whether the existing discovery procedures are sufficiently elastic to meet the challenges of digital discovery.

If a new discovery approach is deemed necessary-thereby spurring clarification of the current rules or the drafting of new rules-the pace of technological change then becomes an issue. The concern is whether the process of rule adapting and adoption is quick enough to keep up with the technological times, or if any such effort is inherently doomed to obsolescence.


 

New York ° Washington, DC ° Tampa ° Los Angeles ° Chicago

Boston ° Miami ° Denver ° Albany ° San Francisco ° Los Angeles

Phone (800) 868-8189
Int Phone (212) 561-5860

FAX (727) 287-6011

Copyright 2000-2011 Global Digital Forensics, Inc.