What Is A Reasonable Electronic Search

THEREASONABLESEARCH · AGUIDEFORUKLAWYERS What Is a Reasonable Electronic Search? Custodians, Dates, Keywords, Analytics and Defensibility COMPUTERFORENSICSLAB DISCOVERY . U K § ABOUTTHEAUTHOR PRE PA REDBYCOMPUTERFORENSICSLABE - DISCOVERYTEAM ACPO / NPCC DIGITAL EVIDENCE PRINCIPLES SEARCH-TERM NEGOTIATION SUPPORT TAR / CAL WITH STATISTICAL VALIDATION FULL CHAIN-OF-CUSTODY DOCUMENTATION § CONTENTS In this guide 01 Executive summary 02 The problem in plain English: two ways to fail 03 The legal standard: CPR 31.7, PD 31B and PD 57AD 04 Lever 1 · Custodians 05 Lever 2 · Date ranges 06 Lever 3 · Sources 07 Lever 4 · Keywords 08 Lever 5 · Analytics and technology-assisted review 09 Lever 6 · Proportionality 10 Lever 7 · Sampling and validation 11 Worked examples: the overly narrow search 12 Worked examples: the excessively broad search 13 Defensibility: the paper trail behind the search 14 Negotiating search terms with the other side 15 Common mistakes and technical limitations 16 Questions to ask · Suggested wording for instructions 17 Checklist and red flags · When to involve a digital forensic expert 18 Frequently asked questions 19 Glossary · References · Disclaimer · How a specialist laboratory can assist § 0 1 · ORIENTATION Executive summary THEHEADLINEANSWER : WHATISAREASONABLESEARCH ? § 0 2 · FIRSTPRINCIPLES The problem in plain English: two ways to fail THE KEYHOLE (OVERLY NARROW) THE LANDSLIDE (EXCESSIVELY BROAD) § 0 3 · THELAW The legal standard: CPR 31.7, PD 31B and PD 57AD FORTHEPRACTITIONER § 0 4 · LEVER1 Custodians § 0 5 · LEVER2 Date ranges § 0 6 · LEVER3 Sources § 0 7 · LEVER4 Keywords § 0 8 · LEVER5 Analytics and technology-assisted review § 0 9 · LEVER6 Proportionality § 1 0 · LEVER7 Sampling and validation § 1 1 · INTHEWILD Worked examples: the overly narrow search EXAMPLE1 · THEPLEADINGSVOCABULARYTRAP EXAMPLE2 · THERANGETHATSTARTEDATTHECONTRACT EXAMPLE3 · THEMISSINGCHANNEL § 1 2 · INTHEWILD Worked examples: the excessively broad search EXAMPLE1 · THESINGLE - WORDTERMLIST EXAMPLE2 · RESTOREEVERYTHING , JUSTINCASE EXAMPLE3 · EVERYONE , TOBESAFE § 1 3 · THEPAPERTRAIL Defensibility: the paper trail behind the search DOCUMENT WHAT IT RECORDS § 1 4 · ACROSSTHETABLE Negotiating search terms with the other side § 1 5 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations § 1 6 · INTERROGATORIES & DRAFTINGAIDS Questions to ask · Suggested wording for instructions Ask your client Ask your opponent Ask an eDiscovery provider SUGGESTEDWORDING · SEARCHPROTOCOLPREAMBLE ( CORE PA R AG RAPHS ) SUGGESTEDWORDING · PROPOSINGTERMSTOTHEOTHERSIDE § 1 7 · QUICKCONTROL Checklist and red flags · When to involve a digital forensic expert The reasonable-search checklist Red flags When to involve a digital forensic expert § 1 8 · COMMONQUESTIONS Frequently asked questions What is a reasonable electronic search? Do we have to search backups? Can we rely on keywords alone? Are we required to use TAR? A relevant document has surfaced that our search never caught. Is the certificate wrong? Who decides if the parties cannot agree terms? § 1 9 · REFERENCE Glossary TAR Sources and authoritative references DISCLAIMER § HOWASPECIALISTLABORATORYCANASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY