Early Data Assessment Before Disclosure Costs Escalate

EARLYDATAASSESSMENT · AGUIDEFORUKLAWYERS Early Data Assessment Before Disclosure Costs Escalate Estimate First, Commit Second COMPUTERFORENSICSLAB § ABOUTTHEAUTHOR PRE PA REDBYCOMPUTERFORENSICSLABE - DISCOVERYTEAM RELATIVIT Y-READY HOSTED REVIEW FULL CHAIN-OF-CUSTODY DOCUMENTATION § CONTENTS In this guide 01 Executive summary 02 The problem in plain English: decisions made blind 03 Why early assessment matters legally 04 What early data assessment actually is 05 Estimate 1 · Volume 06 Estimate 2 · Custodians 07 Estimate 3 · File types 08 Estimate 4 · Duplication 09 Estimate 5 · Communication patterns 10 Estimate 6 · Privileged material 11 Estimate 7 · Potentially relevant datasets 12 The ten-day EDA workflow and the assessment report 13 The post-assessment decision tree 14 Worked example: Marwell v Casterbridge, with numbers 15 Data protection, privilege and the assessment itself 16 Common mistakes and technical limitations 17 Questions to ask · Suggested wording for instructions 18 Checklist and red flags · When to involve a digital forensic expert 19 Frequently asked questions 20 Glossary · References · Disclaimer · How a specialist laboratory can assist § 0 1 · ORIENTATION Executive summary THEHEADLINEPOINT : WHYEARLYDATAASSESSMENTMATTERS § 0 2 · FIRSTPRINCIPLES The problem in plain English: decisions made blind § 0 3 · WHYITMATTERSLEGALLY Why early assessment matters legally § 0 4 · DEFINITIONS What early data assessment actually is LEVEL WHAT IS DONE WHAT IT YIELDS 1 · In-place reporting Tenancy and platform statistics without moving data: Volume and per-custodian scale in 2 · Metadata-only Collect targeted seed sources; index metadata (dates, File-type profiles, dedupe rates, 3 · Sampled content Extract text for samples and priority sets; test Term hit forecasts with relevance 4 · Assessment platform / Seed data in an early-case-assessment environment The full assessment report of §12, § 0 5 · ESTIMATE1 Volume § 0 6 · ESTIMATE2 Custodians § 0 7 · ESTIMATE3 File types § 0 8 · ESTIMATE4 Duplication 60 per cent are routine, and the exact figure moves review budgets by six figures in volume matters. § 0 9 · ESTIMATE5 Communication patterns § 1 0 · ESTIMATE6 Privileged material § 1 1 · ESTIMATE7 Potentially relevant datasets § 1 2 · INPRACTICE The ten-day EDA workflow and the assessment report DAYS WORK § 1 3 · THEDECISION The post-assessment decision tree QUESTION1 YESNO QUESTION2 QUESTION3 QUESTION4 § 1 4 · INTHEWILD Worked example: Marwell v Casterbridge, with numbers WHATTHEASSESSMENTMEASURED WHATTHENUMBERSCHANGED § 1 5 · CONSTRAINTS Data protection, privilege and the assessment itself § 1 6 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations § 1 7 · INTERROGATORIES & DRAFTINGAIDS Questions to ask · Suggested wording for instructions Ask your client Ask your opponent Ask an eDiscovery / forensic provider SUGGESTEDWORDING · ASSESSMENTINSTRUCTIONTOAPR OV IDER ( CORE PA R AG RAPHS ) § 1 8 · QUICKCONTROL Checklist and red flags · When to involve a digital forensic expert The assessment checklist Red flags When to involve a digital forensic expert § 1 9 · COMMONQUESTIONS Frequently asked questions Why does early data assessment matter? What does it cost, and how long does it take? Is assessment wasted work if we process everything anyway? Can we assess before proceedings are issued? Will the court or our opponent see the assessment? How accurate are the estimates? § 2 0 · REFERENCE Glossary ECA / EDA Sources and authoritative references DISCLAIMER § HOWASPECIALISTLABORATORYCANASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY