Finding Hidden Relationships Between Competitors Using E-Discovery

Cartels, market-sharing pacts, and bid-rigging arrangements rarely operate across corporate email with transparent subject lines. Commercial operatives colluding with competitors deliberately use off-channel messaging platforms, personal webmail, trade association fringes, and coded project pseudonyms to conceal illicit contact from compliance officers and competition authorities. When misconduct occurs, the paper trail is fractured across mobile devices, personal archives, and fragmented messaging data stores.

When the Competition and Markets Authority (CMA) issues a formal Section 26 notice under the Competition Act 1998, or when defending against follow-on damages claims in the Competition Appeal Tribunal (CAT), basic keyword searching across custodial inboxes will miss the underlying conspiracy. Uncovering covert ties requires targeted digital forensics, structured metadata cross-referencing, communication network analysis, and the systematic reconstruction of competitor touchpoints across disparate enterprise and personal datasets.

The Evidentiary Markers of Anti-Competitive Collusion

Collusive behaviour leaves distinct digital footprints, even when the participants take active steps to disguise their activity. Anti-competitive agreements require ongoing alignment on pricing, territory, or customer allocations. This necessity produces operational rhythms that can be detected through forensic data interrogation.

The most common evidentiary marker is temporal correlation. Direct communications between competitors routinely cluster around pivotal commercial dates, including quarterly price announcements, public procurement submission deadlines, and industry association conferences. Even if the text of an email appears innocuous - such as arranging a social lunch or sharing generic industry commentary - the proximity of that exchange to a tender submission or market price shift provides vital context.

A second marker is channel displacement. Covert relationships frequently exhibit sudden shifts in medium. An exchange that begins on corporate email may abruptly move to a personal WhatsApp chat, an encrypted Signal thread, or a telephone call following a request to 'speak offline' or 'take this to mobile'. Recognising the phrases that trigger channel displacement enables forensic teams to follow the investigative thread from corporate servers to secondary devices.

Finally, content anomalies reveal covert ties. Bid-rigging and cover-pricing schemes regularly produce document metadata discrepancies. When a competitor prepares a cover bid on behalf of another party to ensure a tender process appears competitive, fragments of the original author, template styling, shared calculation formulas, or software licence identifiers often persist within the properties of the submitted file.

The eDiscovery Workflow in Competition Enquiries

Addressing suspected competitor collusion requires an adapted eDiscovery model aligned with UK procedural rules, whether responding to a regulatory investigation or managing disclosure under Practice Direction 57AD. The workflow must balance speed, technical precision, and evidentiary defensibility.

1. Identification and Scoping

Traditional custodial scoping based solely on organisational charts is insufficient in competition matters. Identifying the correct sources requires mapping commercial decision-making authority down to local estimators, regional sales directors, and bidding coordinators. Forensic practitioners must identify not only corporate IT assets, but also personal devices utilised under bring-your-own-device (BYOD) arrangements, private webmail accounts accessed from work networks, and collaborative platforms like Slack or Microsoft Teams where informal channels may exist.

2. Covert and Rapid Preservation

Preservation in competition matters often carries acute risk of spoliation. Once internal suspicions arise or the CMA conducts a dawn raid under Section 27 of the Competition Act 1998, individuals involved in cartel conduct may attempt to purge mobile chat histories or delete cloud backups. Targeted, silent preservation of Microsoft 365 audit logs, mobile device management (MDM) profiles, and centralised mail stores must precede custodian interviews. Forensic images of physical mobile devices must be secured in compliance with the ACPO principles to ensure all extracted data remains admissible in court or regulatory proceedings.

3. Processing and Normalisation

Mobile chat databases, call logs, and email records must be processed into a unified timeline. Fragmented chat threads from WhatsApp or SMS present challenges because individual messages lack the formal header data found in emails. Advanced processing engines must parse SQLite databases from mobile images, extract deleted records from write-ahead logs (WAL), and normalise timestamps across different time zones into a consistent UTC standard. This step establishes an uninterrupted, multi-channel narrative of all interactions between key custodians and external entities.

4. Analysis and Review

Rather than relying solely on linear document review, competition investigations demand analytical tools. Concept clustering, communication matrix analysis, and thread summarisation allow legal teams to evaluate thousands of exchanges quickly. Review sets can be prioritised using predictive coding and continuous active learning (CAL) trained specifically on anti-competitive terminology, competitor aliases, and covert meeting arrangements.

5. Production and Regulatory Disclosure

Producing data to the CMA or adversaries in CAT follow-on litigation requires strict adherence to technical production protocols. Regulators frequently demand native productions accompanied by detailed metadata manifests, cross-reference tables for personal telephone numbers, and defensible redactions covering commercially sensitive non-cartel data or third-party personal data under UK GDPR. Defensibility hinges on maintaining a complete audit trail from initial bit-stream imaging to the final load file.

Forensic Analytics and Communication Mapping

Locating hidden competitor relationships requires forensic teams to look beyond text content to relational metadata. Communication network analysis, or social network analysis, visualises the volume, frequency, and direction of interactions between individuals across an organisation and external networks.

By mapping external communication domains, investigators can immediately spot non-corporate email traffic connecting staff with competitor organisations. However, sophisticated cartel participants avoid using corporate domains. Investigators must therefore execute cross-dataset entity resolution. This process matches private email addresses, personal telephone numbers, and mobile contact cards extracted from address books against known competitor staff lists.

Once entities are resolved, timeline slicing isolates communications occurring within narrow windows surrounding market events. For example, if a major tender closed at 12:00 on 14 March, analytics tools can isolate every communication event - including phone calls, instant messages, calendar appointments, and email exchanges - involving the bidding team during the preceding 72 hours. An unrecorded phone call or off-channel message exchanged with a rival estimator during this window immediately warrants rigorous qualitative scrutiny.

Document similarity engines also play a decisive role in bid-rigging enquiries. When multiple competitors submit responses to a public procurement authority, text comparison algorithms can evaluate structural overlap between supposedly independent proposals. Identical paragraphs, shared typographical errors, and matching calculation errors across submissions provide direct evidence of co-ordinated drafting or document sharing.

Practical Investigation Checklist: Uncovering Illicit Competitor Links

When instructed to investigate potential cartel conduct or respond to regulatory information requests, legal teams and investigators should execute the following technical measures:

• Build a competitor entity index: Compile a comprehensive list of competitor trading entities, corporate domains, brand names, and key commercial personnel. Include former employees who recently migrated to rival organisations, as these individuals frequently serve as conduit points for market-sharing intelligence.
• Perform mobile device parsing and SQLite carving: Collect physical or full file system extractions of mobile hardware used by commercial staff. Carve SQLite databases and unallocated space to recover deleted chats, call records, and contact cards that link custodians to competitor telephone numbers.
• Correlate proxy and network access logs: Review corporate web proxy logs and VPN access records to identify instances where commercial custodians accessed personal webmail providers (such as Gmail, Yahoo, or Outlook) from office workstations, particularly during working hours leading up to tender deadlines.
• Map trade association and industry event calendars: Collate external industry conferences, working groups, and association meetings attended by commercial staff. Cross-reference travel records, expense reports, and electronic calendar entries against competitor attendance lists to identify opportunities for off-record collusion.
• Cross-reference bid submission metadata: Compare file properties across tender submissions, including author fields, software licence serials, last-modified dates, and font or template profiles. Look for indications that tender documents originated from, or were reviewed by, an external competitor infrastructure.
• Execute targeted off-channel communication searches: Run keyword searches tailored to identify requests for channel switching, such as 'call my mobile', 'check your WhatsApp', 'ping me on Signal', 'delete this message', or 'use my private email'.
• Deploy social network visualisation tools: Construct interactive communication matrices that display all out-of-band contacts between internal sales, pricing, and leadership custodians and external counterparty networks.

Navigating Regulatory Scrutiny and Section 26 Demands

The CMA exercises extensive investigative powers under the Competition Act 1998. Under Section 26, the regulator can require the production of specified documents or categories of information. Failure to comply without reasonable excuse is an offence, and providing false or misleading information carries criminal sanctions. Regulatory compliance requires technical approaches that withstand intense scrutiny.

In competition investigations, the CMA routinely scrutinises the methodology used to identify responsive records. Presenting simple keyword search results is rarely sufficient if the methodology failed to account for encrypted communications, personal devices used for business purposes, or mobile backups. Legal teams must be prepared to articulate the full forensic collection workflow, detailing how custodians were scoped, how duplicate records were suppressed, and how technical limitations - such as encrypted chat applications - were resolved.

For follow-on damages litigation in the High Court or the Competition Appeal Tribunal, disclosure is governed by the principles of proportionality and the disclosure models set out in Practice Direction 57AD or the CAT Rules. Claimants in follow-on claims will aggressively seek broad disclosure of internal communications, pricing matrices, and regulator correspondence. Employing structured analytics and clear early case assessment frameworks ensures that external counsel can defend reasonable, proportionate search parameters while identifying smoking-gun documents before they are disclosed to opponents.

Uncovering covert competitor relationships is fundamentally an exercise in joining fragmented technical data points. By integrating forensic mobile collection, entity resolution, and relational communications analysis, litigators and in-house counsel can uncover anti-competitive coordination, meet regulatory demands, and safeguard their legal position.