Page 1
THEREASONABLESEARCH · A GUIDE FOR UK LAWYERS What Is a Reasonable Electronic Search? Custodians, Dates, Keywords, Analytics and Defensibility COMPUTER FORENSICS LAB DISCOVERY. UK
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM ACPO / NPCC DIGITAL EVIDENCE PRINCIPLES SEARCH-TERM NEGOTIATION SUPPORT TAR / CAL WITH STATISTICAL VALIDATION FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: two ways to fail 03 The legal standard: CPR 31.7, PD 31B and PD 57AD 04 Lever 1 · Custodians 05 Lever 2 · Date ranges 06 Lever 3 · Sources 07 Lever 4 · Keywords 08 Lever 5 · Analytics and technology-assisted review 09 Lever 6 · Proportionality 10 Lever 7 · Sampling and validation 11 Worked examples: the overly narrow search 12 Worked examples: the excessively broad search 13 Defensibility: the paper trail behind the search 14 Negotiating search terms with the other side 15 Common mistakes and technical limitations 16 Questions to ask · Suggested wording for instructions 17 Checklist and red flags · When to involve a digital forensic expert 18 Frequently asked questions 19 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE ANSWER: WHATISAREASONABLESEARCH?
§ 02 · FIRST PRINCIPLES The problem in plain English: two ways to fail THE KEYHOLE (OVERLY NARROW) THE LANDSLIDE (EXCESSIVELY BROAD)
§ 03 · THELAW The legal standard: CPR 31.7, PD 31B and PD 57AD FOR THE PRACTITIONER
Page 2
§ 04 · LEVER1 Custodians
§ 05 · LEVER2 Date ranges
§ 06 · LEVER3 Sources
§ 07 · LEVER4 Keywords
§ 08 · LEVER5 Analytics and technology-assisted review
§ 09 · LEVER6 Proportionality
Page 3
§ 10 · LEVER7 Sampling and validation
§ 11 · IN THE WILD Worked examples: the overly narrow search EXAMPLE1 · THEPLEADINGSVOCABULARYTRAP EXAMPLE2 · THERANGETHATSTARTEDATTHECONTRACT EXAMPLE3 · THEMISSINGCHANNEL
§ 12 · IN THE WILD Worked examples: the excessively broad search EXAMPLE1 · THESINGLE - WORDTERMLIST EXAMPLE2 · RESTOREEVERYTHING, JUST IN CASE EXAMPLE3 · EVERY ON E, TOBESAFE
§ 13 · THEPAPERTRAIL Defensibility: the paper trail behind the search DOCUMENT WHAT IT RECORDS
§ 14 · ACROSS THE TABLE Negotiating search terms with the other side
§ 15 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
Page 4
§ 16 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording for instructions Ask your client Ask your opponent Ask an e Discovery provider SUGGESTED WORDING · SEARCHPROTOCOLPREAMBLE ( CORE PA R AG RAPHS ) SUGGESTED WORDING · PROPOSINGTERMSTOTHEOTHERSIDE
§ 17 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The reasonable-search checklist Red flags When to involve a digital forensic expert
§ 18 · COMMON QUESTIONS Frequently asked questions What is a reasonable electronic search? Do we have to search backups? Can we rely on keywords alone? Are we required to use TAR? A relevant document has surfaced that our search never caught. Is the certificate wrong? Who decides if the parties cannot agree terms?
§ 19 · REFERENCE Glossary TAR Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
Cite as: Joseph Naghdi, What Is A Reasonable Electronic Search, Computer Forensics Lab, https://e-discovery.uk/library/what-is-a-reasonable-electronic-search/pdf.