Page 1
CROSS - B ORDER COLLECTION · A GUIDE FOR UK LAWYERS Custodian Abroad: Cross-Border Collection Data Transfer, Blocking Statutes and Local Law When the Evidence Sits in Another Country COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM ESTABLISHED 2007 · LONDON ISO 17025-ALIGNED PROCEDURES CROSS-B ORDER COLLECTION TRANSFER & BLOCKING-STATUTE ANALYSIS CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the evidence is under someone else's law 03 International data transfer under the UK GDPR 04 Blocking statutes and local law that forbid what disclosure demands 05 The routes: cloud-side, in-country collection and letters of request 06 Planning the cross-border collection with local counsel 07 Deployment: reconciling English disclosure duties with foreign law 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: ACUSTODIANABROADTURNSCOLLECTIONINTOALEGAL EXERCISEBEFOREATECHNICALONE: THEDATAISUNDERLOCALLAW, ITS TRANSFER TOENGLANDISRESTRICTED, ABLOCKINGSTATUTEMAYCRIMINALISEEXPORT, AND THEEVIDENCEMUSTBECOLLECTEDBYAROUTETHATSATISFIESENGLISHDISCLOSURE ANDFOREIGNLAWATONCE, PLANNEDWITHLOCALCOUNSELFROMTHESTART
§ 02 · FIRST PRINCIPLES The problem in plain English: the evidence is under someone else's law
§ 03 · INTERNATIONALDATATRANSFER International data transfer under the UK GDPR
Page 2
§ 04 · BLOCKINGSTATUTESANDLOCALLAW Blocking statutes and local law that forbid what disclosure demands
§ 05 · THEROUTES The routes: cloud-side, in-country collection and letters of request
§ 06 · PLANNINGWITHLOCALCOUNSEL Planning the cross-border collection with local counsel
§ 07 · DEPLOYMENT Deployment: reconciling English disclosure duties with foreign law
§ 08 · THEWIDERMAP Source architecture: where else the evidence lives QUESTION (VARIOUS DATA CHANNEL DEVICE CONTROLLED ENTIT Y'S ABROAD CLOUD OWN ACCOUNT SYSTEMS COUNTERPARTIES PROVIDER FORMAL- JURISDICTIONS) CENTRES ONLY
§ 09 · IN THE WILD Worked examples EXAMPLE1 · THEBLOCKINGSTATUTEANDTHELETTEROFREQUEST EXAMPLE2 · THECLOUDACCOUNTTHATNEVERLEFTTHEUK ' SCONTROL EXAMPLE3 · THEIN - COUNTRYCOLLECTIONTHATWAITEDFORTHETRANSFER MECHANISM
Page 3
§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider (and local counsel) SUGGESTED WORDING · INSTRUCTION FOR ACROSS - B ORDER COLLECTION
§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The cross-border-collection checklist Red flags When to involve a digital forensic expert
§ 13 · COMMON QUESTIONS Frequently asked questions The court has ordered disclosure. Can we just image the custodian's device abroad? What is a blocking statute and why does it matter so much? Is moving the data to England just a logistics question? Can cloud-side collection avoid the whole problem? What do we tell the English court if foreign law blocks disclosure? Can the employee just consent to us collecting their device abroad?
§ 14 · REFERENCE Glossary IDTA Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
Cite as: Joseph Naghdi, Custodian Abroad Cross Border Collection, Computer Forensics Lab, https://e-discovery.uk/library/custodian-abroad-cross-border-collection/pdf.