Page 1

BYOD & DISCLOSURE · A GUIDE FOR UK LAWYERS BYOD and Disclosure Personal Devices, Work Data and the Collection Nobody Signed Up For COMPUTER FORENSICS LAB

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM PRIVACY-SCOPED EXTRACTION PROTOCOLS CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the company's evidence on the employee's phone 03 Control: when personal-device data is disclosable 04 The routes: consent, contract, compulsion 05 Targeted collection: taking the work, leaving the life 06 Privacy, proportionality and the device owner's rights 07 Leavers, refusers and wiped devices 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: WORKDATAONPERSONALDEVICESISUSUALLYDISCLOSABLE, RARELYSEIZABLE, ANDALWAYSCOLLECTABLEWITHTHERIGHTPROTOCOL: THECRAFT IS THE PROTOCOL

§ 02 · FIRST PRINCIPLES The problem in plain English: the company's evidence on the employee's phone

§ 03 · CONTROL Control: when personal-device data is disclosable