Custodian Abroad Cross Border Collection

CROSS - BORDERCOLLECTION · AGUIDEFORUKLAWYERS Custodian Abroad: Cross-Border Collection Data Transfer, Blocking Statutes and Local Law When the Evidence Sits in Another Country COMPUTERFORENSICSLAB § ABOUTTHEAUTHOR PRE PA REDBYCOMPUTERFORENSICSLABE - DISCOVERYTEAM ESTABLISHED 2007 · LONDON ISO 17025-ALIGNED PROCEDURES CROSS-BORDER COLLECTION TRANSFER & BLOCKING-STATUTE ANALYSIS CPR PART 35 EXPERT REPORTS FULL CHAIN-OF-CUSTODY DOCUMENTATION § CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the evidence is under someone else's law 03 International data transfer under the UK GDPR 04 Blocking statutes and local law that forbid what disclosure demands 05 The routes: cloud-side, in-country collection and letters of request 06 Planning the cross-border collection with local counsel 07 Deployment: reconciling English disclosure duties with foreign law 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist § 0 1 · ORIENTATION Executive summary THEHEADLINEPOINT : ACUSTODIANABROADTURNSCOLLECTIONINTOALEGAL EXERCISEBEFOREATECHNICALONE : THEDATAISUNDERLOCALLAW , ITSTRANSFER TOENGLANDISRESTRICTED , ABLOCKINGSTATUTEMAYCRIMINALISEEXPORT , AND THEEVIDENCEMUSTBECOLLECTEDBYAROUTETHATSATISFIESENGLISHDISCLOSURE ANDFOREIGNLAWATONCE , PLANNEDWITHLOCALCOUNSELFROMTHESTART § 0 2 · FIRSTPRINCIPLES The problem in plain English: the evidence is under someone else's law § 0 3 · INTERNATIONALDATATRANSFER International data transfer under the UK GDPR § 0 4 · BLOCKINGSTATUTESANDLOCALLAW Blocking statutes and local law that forbid what disclosure demands § 0 5 · THEROUTES The routes: cloud-side, in-country collection and letters of request § 0 6 · PLANNINGWITHLOCALCOUNSEL Planning the cross-border collection with local counsel § 0 7 · DEPLOYMENT Deployment: reconciling English disclosure duties with foreign law § 0 8 · THEWIDERMAP Source architecture: where else the evidence lives QUESTION (VARIOUS DATA CHANNEL DEVICE CONTROLLED ENTIT Y'S ABROAD CLOUD OWN ACCOUNT SYSTEMS COUNTERPARTIES PROVIDER FORMAL- JURISDICTIONS) CENTRES ONLY § 0 9 · INTHEWILD Worked examples EXAMPLE1 · THEBLOCKINGSTATUTEANDTHELETTEROFREQUEST EXAMPLE2 · THECLOUDACCOUNTTHATNEVERLEFTTHEUK ' SCONTROL EXAMPLE3 · THEIN - COUNTRYCOLLECTIONTHATWAITEDFORTHETRANSFER MECHANISM § 1 0 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations § 1 1 · INTERROGATORIES & DRAFTINGAIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your eDiscovery / forensic provider (and local counsel) SUGGESTEDWORDING · INSTRUCTIONFORACROSS - BORDERCOLLECTION § 1 2 · QUICKCONTROL Checklist and red flags · When to involve a digital forensic expert The cross-border-collection checklist Red flags When to involve a digital forensic expert § 1 3 · COMMONQUESTIONS Frequently asked questions The court has ordered disclosure. Can we just image the custodian's device abroad? What is a blocking statute and why does it matter so much? Is moving the data to England just a logistics question? Can cloud-side collection avoid the whole problem? What do we tell the English court if foreign law blocks disclosure? Can the employee just consent to us collecting their device abroad? § 1 4 · REFERENCE Glossary IDTA Sources and authoritative references DISCLAIMER § HOWASPECIALISTLABORATORYCANASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY