Page 1
CROSS - B ORDER COLLECTION · A GUIDE FOR UK LAWYERS
Custodian Abroad: Cross-Border Collection
Data Transfer, Blocking Statutes and Local Law When the Evidence Sits in
Another Country
COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR
PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM
ESTABLISHED 2007 · LONDON ISO 17025-ALIGNED PROCEDURES CROSS-B ORDER COLLECTION
TRANSFER & BLOCKING-STATUTE ANALYSIS CPR PART 35 EXPERT REPORT S
FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS
In this guide
01 Executive summary
02 The problem in plain English: the evidence is under someone else's law
03 International data transfer under the UK GDPR
04 Blocking statutes and local law that forbid what disclosure demands
05 The routes: cloud-side, in-country collection and letters of request
06 Planning the cross-border collection with local counsel
07 Deployment: reconciling English disclosure duties with foreign law
08 Source architecture: where else the evidence lives
09 Worked examples
10 Common mistakes and technical limitations
11 Questions to ask · Suggested wording
12 Checklist and red flags · When to involve a digital forensic expert
13 Frequently asked questions
14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION
Executive summary
THE HEADLINE POINT: ACUSTODIANABROADTURNSCOLLECTIONINTOALEGAL
EXERCISEBEFOREATECHNICALONE: THEDATAISUNDERLOCALLAW, ITS TRANSFER
TOENGLANDISRESTRICTED, ABLOCKINGSTATUTEMAYCRIMINALISEEXPORT, AND
THEEVIDENCEMUSTBECOLLECTEDBYAROUTETHATSATISFIESENGLISHDISCLOSURE
ANDFOREIGNLAWATONCE, PLANNEDWITHLOCALCOUNSELFROMTHESTART
§ 02 · FIRST PRINCIPLES
The problem in plain English: the evidence is under someone
else's law
§ 03 · INTERNATIONALDATATRANSFER
International data transfer under the UK GDPR
Page 2
§ 04 · BLOCKINGSTATUTESANDLOCALLAW
Blocking statutes and local law that forbid what disclosure
demands
§ 05 · THEROUTES
The routes: cloud-side, in-country collection and letters of
request
§ 06 · PLANNINGWITHLOCALCOUNSEL
Planning the cross-border collection with local counsel
§ 07 · DEPLOYMENT
Deployment: reconciling English disclosure duties with foreign
law
§ 08 · THEWIDERMAP
Source architecture: where else the evidence lives
QUESTION (VARIOUS DATA CHANNEL
DEVICE CONTROLLED ENTIT Y'S
ABROAD CLOUD OWN
ACCOUNT SYSTEMS
COUNTERPARTIES PROVIDER FORMAL-
JURISDICTIONS) CENTRES ONLY
§ 09 · IN THE WILD
Worked examples
EXAMPLE1 · THEBLOCKINGSTATUTEANDTHELETTEROFREQUEST
EXAMPLE2 · THECLOUDACCOUNTTHATNEVERLEFTTHEUK ' SCONTROL
EXAMPLE3 · THEIN - COUNTRYCOLLECTIONTHATWAITEDFORTHETRANSFER
MECHANISM
Page 3
§ 10 · WHEREITGOESWRONG
Common mistakes and technical limitations
Common mistakes
Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS
Questions to ask · Suggested wording
Ask your client
Ask your opponent
Ask your e Discovery / forensic provider (and local counsel)
SUGGESTED WORDING · INSTRUCTION FOR ACROSS - B ORDER COLLECTION
§ 12 · QUICK CONTROL
Checklist and red flags · When to involve a digital forensic
expert
The cross-border-collection checklist
Red flags
When to involve a digital forensic expert
§ 13 · COMMON QUESTIONS
Frequently asked questions
The court has ordered disclosure. Can we just image the custodian's device abroad? What is a blocking statute and why does it matter so much? Is moving the data to England just a logistics question? Can cloud-side collection avoid the whole problem? What do we tell the English court if foreign law blocks disclosure? Can the employee just consent to us collecting their device abroad?
§ 14 · REFERENCE
Glossary
IDTA
Sources and authoritative references
DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST
Working with Computer Forensics Lab
Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB
NEWENQUIRIESEMAILE - DISCOVERY