Known Adverse Documents In The Digital Age

KNOWNADVERSEDOCUMENTS · AGUIDEFORUKLAWYERS Known Adverse Documents in the Digital Age Methodology, People and the Places Nobody Searches COMPUTERFORENSICSLAB DISCOVERY . U K § ABOUTTHEAUTHOR PRE PA REDBYCOMPUTERFORENSICSLABE - DISCOVERYTEAM FULL CHAIN-OF-CUSTODY DOCUMENTATION § CONTENTS In this guide 01 Executive summary 02 The problem in plain English: a human duty in a machine estate 03 The legal anatomy of the duty 04 Why the digital age changes everything 05 Pillar 1 · Search methodology matters 06 Pillar 2 · Employee knowledge matters 07 Pillar 3 · Unusual repositories matter 08 The identification programme, step by step 09 Handling an adverse find 10 Worked examples 11 Common mistakes and technical limitations 12 Questions to ask · Suggested wording 13 Checklist and red flags · When to involve a digital forensic expert 14 Frequently asked questions 15 Glossary · References · Disclaimer · How a specialist laboratory can assist § 0 1 · ORIENTATION Executive summary THEHEADLINEPOINT : THEDUTY , ANDTHETHREEPILLARSOFPERFORMINGIT § 0 2 · FIRSTPRINCIPLES The problem in plain English: a human duty in a machine estate § 0 3 · THELAW The legal anatomy of the duty § 0 4 · THESHIFT Why the digital age changes everything DIGITAL REALIT Y CONSEQUENCE FOR THE DUT Y § 0 5 · PILLAR1 Search methodology matters § 0 6 · PILLAR2 Employee knowledge matters § 0 7 · PILLAR3 Unusual repositories matter § 0 8 · METHOD The identification programme, step by step STEP ACTION AND OUTPUT 2 · Census the knowledge List the people whose awareness counts (events and litigation-conduct), including leavers; 3 · Ask the adverse question Census interviews with the direct question, safely framed; privileged notes with factual 4 · Design the search Both-vocabulary terms, adverse coding in the protocol, TAR trained on relevance, 7 · Disclose on the timetable With Extended Disclosure or within the fallback timetable; late-arising knowledge disclosed 8 · Refresh on triggers Amendments, witness statements, new custodians, significant finds: steps 2 to 5 re-run for § 0 9 · WHENITHAPPENS Handling an adverse find § 1 0 · INTHEWILD Worked examples EXAMPLE1 · THEINCIDENTLOGNOBODYCONNECTED EXAMPLE2 · THELEAVERWHOANSWEREDHONESTLY EXAMPLE3 · TWOREVIEWROOMS , ONEDOCUMENT § 1 1 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations § 1 2 · INTERROGATORIES & DRAFTINGAIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your eDiscovery / forensic provider SUGGESTEDWORDING · THECENSUSINTERVIEWQUESTION ( FORTHENOTE ) § 1 3 · QUICKCONTROL Checklist and red flags · When to involve a digital forensic expert The known-adverse checklist Red flags When to involve a digital forensic expert § 1 4 · COMMONQUESTIONS Frequently asked questions What makes a document "adverse"? Whose knowledge counts as the company "knowing"? Do we have to go looking for adverse documents? What if the adverse document is privileged? We have just found something bad, late in the case. Now what? How does this play in criminal and regulatory matters? § 1 5 · REFERENCE Glossary Sources and authoritative references DISCLAIMER § HOWASPECIALISTLABORATORYCANASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY