Logo
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Forensic Discoveries Newsletter

September 2008
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Welcome to Knoxville's EDiscovery and Computer Forensics Newsletter. Keeping you and your practice informed of the ever-changing realm and value of Electronic Discovery and Computer Forensics is the purpose of this newsletter. If you have a colleague that may be interested in subscribing, follow the instructions at the bottom of this newsletter to be added to the distribution. If you choose not to continue receiving this newsletter, follow the directions at the bottom of this newsletter and accept our apologies for intruding.
in this issue
Upcoming Speaking Engagements
Proposed TN Rules of Civil Procedure Rules 16.01 and 26.02
Leveraging Computer Forensics in Cases Involving Theft of Intellectual Property
EDiscovery Case Law
Previous Newsletters
 
We hope you enjoyed last month's article "Proposed Updated TN Rules of Civil Procedure". Due to a steady increase in new subscribers, Forensics Discoveries will continue to list previous newsletters. This month we will be briefly discussing the proposed updates to the TN Rules of Civil Procedure that addresses ESI. As others have done, please let us know of a specific topic you would like to see covered.
 
Below is a review of our previous newsletters:
 

Upcoming Speaking Engagements


Bill Dean of Forensic Discoveries will be speaking at various seminars and conferences this fall:


HalfMoon Seminars - Friday, October 3rd, 2008

Bill Dean will be giving a 2 hour presentation on Participating in Electronic Discovery. Topics covered will be:
  • Federal and Tennessee Rules on electronic discovery
  • Preserving information in anticipation of litigation
  • Balancing the need and cost of electronic discovery
  • Making and responding to requests for e-discovery
  • Working with opposing parties to find reasonable solutions
  • Understanding issues with Metadata
  • Working with e-discovery consultants and experts in computer forensics
  • Handling ethical issues: confidentiality and privilege
More details and registration can be found on the HalfMoon Seminars website.


East Tennessee Cyber Security Summit 2008 - October 21-22, 2008

Bill Dean will be presenting on the topic of Protecting Mobile Data with Cryptography.

This summit promotes a close working relationship among law enforcement, higher education, and industry participants in identifying and managing cyber crime and related matters and provides an opportunity to bring together security professionals from the East Tennessee region and beyond. The 2008 East Tennessee Cyber Security Summit will again be co-hosted by the Federal Bureau of Investigation (FBI), University of Tennessee, Fountainhead College of Technology, the Tennessee Valley Authority (TVA), and the TVA Office of inspector General.

More details can be found on the CyberSecurity Summit website.


Forensic Discoveries is also in discussions with 2-3 other seminars to speak this year and will update as those progress.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Proposed TN Rules of Civil Procedure Rules 16.01 and 26.02

As discussed in last month's newsletter, the Amendments to the Tennessee Rules of Civil Procedure to address the handling of electronically stored information (ESI) were submitted for comment on June 20, 2008. Many feel that the rules will be adopted in the first quarter of 2009. Fortunately for those that have been working under the guidance of the updated Federal Rules of Civil Procedure that went into effect in 2006, there are very few differences. The plan for this newsletter and the next few issues is to provide a technical interpretation of the proposed rules as they will apply to parties involved. In this newsletter, Forensic Discoveries has decided to discuss both amended Rule 16.01 and 26.06. To be honest, Rule 16.01 has little technical interpretation so the majority of this issue will be on Rule 26.06, Pre-trial conferences.

To cite the specific Amendment for Rule 26.06, "Rule 26.06 is amended to direct the parties to discuss discovery of electronically stored information if such discovery is contemplated in the action." This is where it all begins. There are so many issues that should be addressed at this point to avoid disputes later. What is ESI available? Where is the ESI located? What will be preserved and how? What are the plans of discovery? What format will be the data be provided in? And the always-popular topic of data "not reasonably accessible because of undue burden or cost". I ran across a good list of questions that provide an example checklist of items to be considered in the meet and confer. My opinion, and the focus of this month's newsletter, is that one of the most important items on the list is #3 "Who are the persons most knowledgeable about ESI systems?"

If you and your firm were going into battle in unknown territory, you would want to consult with someone that was an expert in that territory. While this may seem like a dramatic analogy, it fits very nicely after some of the larger eDiscovery matters that I have been involved in. While it can be of benefit to have an eDiscovery expert, the most applicable person is the one that knows the design of the information technology systems involved. If you do choose to consult with an eDiscovery expert, make sure that they have broad experience in varying sizes of IT departments and different industries. The information this person will provide for the meet and confer can be vital. Information such as:

·    Developing or providing a data map of the ESI systems
·    Data retention policies
·    Backup and system recovery plans
·    Locations of email (reported as 40% of ESI produced in discovery)
·    Locations of other applicable data
·    Plans for preservation
·    Justifications for data that is not "reasonable accessible"

When handled properly, the proposed Rule 26.02 can address major area of contention in discovery that are likely to arise later. In my opinion, and the opinion of most other eDiscovery professionals in the industry, this opportunity is not leveraged to it capabilities in heading off eDiscovery disputes later down the road. While my promise was to provide a technical interpretation of each rule, the point I want to make in this issue covering 26.02 is to leverage the knowledge and experience of in house IT staff or an eDiscovery expert for this conference. The investment made discussing and resolving these issues during the meet and confer will certainly pay dividends later in discovery.



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Leveraging Computer Forensics in Cases Involving Theft of Intellectual Property

Recently, the Law.com website published an article titled "Computer Issues When Key Personnel Defect". Forensic Discoveries takes great interest in articles on this topic as theft of intellectual property is consistently a large percentage of our case load.

From contact lists to proprietary designs, most all companies store intellectual property digitally.  To demonstrate how easy computers make the act of intellectual property theft, there is an analogy that I often use in speaking engagements. If an employee turned in their resignation to go work for a competitor started carrying out large bankers boxes of information to their trunk, someone would definitely ask questions. However, few people think twice about portable USB drives that are carried in and out of companies that could store more intellectual property than a 1000 banker boxes. The beauty of digital information is the level "fingerprints" when digital information is copied, emailed, or transferred to or form a computer that can be tracked and proven using computer forensics. For more information on the value of computer forensics, please reference our February newsletter, "Computer Forensics Proves Intellectual Property Theft"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
EDiscovery Case Law

State Court Rejects Appeal of Discovery Order Requiring Production of "Broken" Computers


Law Office of Douglas T. Harris, Esq. v. Philadelphia Waterfront Partners, LP, 2008 WL 4291319 (Pa. Super. Sept. 22, 2008)

In this case involving breach of fiduciary duty and related claims, plaintiff had requested the production of certain email and documents maintained on the computers of two individual defendants.  When defendants failed to produce the requested material, plaintiff moved to compel. At the hearing on the motion, defense counsel informed the court that the two computers were inoperable and that technicians were currently working on the computers.  The court pressed defense counsel for an explanation of how the computers were broken, and observed that plaintiff was entitled to the information that had been requested.  When the court asked defense counsel what order it should enter, defense counsel responded:  "We can produce the computers."  After the court entered its order, defendants appealed. Read more here.



Court Dismisses Case Citing Party's Complete Failure to Comply with Discovery Obligations

Gaddis v. Smith & Nephew, Inc., 2008 WL 2415183 (S.D.Miss. June 11, 2008).

In this product liability litigation, the defendants filed a motion to dismiss claiming the plaintiff failed to comply with the deadline for court ordered initial disclosures. After the plaintiff failed to make initial disclosures despite a second order and extended deadline, the defendants sent a letter in an attempt to resolve the discovery dispute under Fed.R.Civ.P. 37. Finding the plaintiff completely failed to comply with any discovery requirements and respond to the motion to dismiss, the court dismissed the plaintiff's case without prejudice for failure to meet discovery obligations and comply with court orders.



Court Orders Production of Overdue Electronic Documents Threatening Sanctions if Further "Discovery Shenanigans" Occurred

Race Tires Am., Inc., a Div. of Specialty Tires of Am., Inc. v. Hoosier Racing Tire Corp., 2008 WL 2487835 (W.D.Pa. June 16, 2008).

In this antitrust litigation, the plaintiffs filed a motion to compel seeking the completed production of paper documents and electronically stored information (ESI). The defendants had been continually producing documents on a "rolling basis" and had not specified a completion date. Addressing the plaintiffs' motion, the court noted the defendants' production was due four months prior and ordered completed production of all non-privileged documents and responsive ESI within seven days. Noting this dispute was the fifth discovery motion filed in this litigation, the court reminded both parties that discovery is supposed to occur with minimal judicial intervention. The court also warned both parties sanctions would be imposed if further "discovery shenanigans" or other discovery abuse were to occur.



Court Orders Party to Bear Cost of Third-Party Forensic Analyst Following Insufficient Production Response

Canon U.S.A., Inc. v. S.A.M., Inc., 2008 WL 2522087 (E.D.La. June 20, 2008).

In this litigation involving an alleged breach of a dealer agreement between the plaintiff distributer and the defendant dealer, the plaintiff filed a motion to compel production and sought sanctions. The plaintiff sought paper and electronic documents from the defendant's server and argued the defendant's withholding of responsive documents and incomplete responses justified sanctions. The defendant argued that either the documents did not exist due to the destruction caused by Hurricanes Katrina and Rita, or that production would occur if the current searches yielded responsive information. Finding the defendant's responses to date to be insufficient as they appeared to have been conducted "lackadaisically," the court ordered the defendant to bear the costs of employing a third-party computer forensic analyst to search its server and produce the requested information. The court also granted sanctions in part, awarding costs to the plaintiff incurred in issuing a third-party subpoena and in seeking insurance information.



Court Finds Party Failed to Establish Relevance of E-Mail Preservation Upon No Showing of Missing E-Mail

Cunningham v. Standard Fire Ins. Co., 2008 WL 2668301 (D.Colo. July 1, 2008).

In this insurance contract dispute, the defendants moved for a protective order to prevent the plaintiff from inquiring into various topics contained in the plaintiff's Rule 30(b)(6) Notice of Deposition. The defendants argued that the plaintiff's notice of the topic regarding "knowledge concerning the storage, preservation and backup" of e-mail was irrelevant to the breach of contract claim. The plaintiff stated that he communicated with the defendants via e-mail about his claim, requested all e-mail relating to his claim, and yet received almost no e-mail. The court held that the plaintiff had not met his burden of establishing the topic's relevance after noting that the defendants asserted the plaintiff had not referenced any specific missing e-mails. The court granted the defendants' motion for a protective order in part and denied in part; the court granted the motion with respect to the topic of e-mail storage, preservation and backup.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Forensic Discoveries is available to provide onsite presentations or Q&A sessions on topics such as Electronic Discovery, Technical Implications of the updated Federal Rules of Civil Procedure, or Computer Forensics. Forensic Discoveries is also available to you, obligation free, to answer any specific questions pertaining to these topics. Simply give us a call and we will be glad to answer any questions pertaining to Electronic Discovery and Computer Forensics.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Contact Information
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Phone: (865)-809-7590

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

If you have a topic that you would like addressed in the newsletter, please let us know. Either visit http://www.forensicdiscoveries.com/newsletter.html and submit your suggestion there or reply to this e-mail with your suggestion. 

For previous versions of Forensic Discoveries EDiscovery newsletters, visit http://www.forensicdiscoveries.com/pastnewsletters.html  

 

This document does not provide legal or other professional advice and should not be relied upon as anything other than a starting point for research and information on the subject of electronic evidence and computer forensics.

Quick Links...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~