Logo
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Forensic Discoveries Newsletter

June 2009
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Welcome to Forensic Discoveries' eDiscovery and Digital Forensics Newsletter. Keeping you and your practice informed of the ever-changing realm and value of Electronic Discovery and Digital Forensics is the purpose of this newsletter. If you have a colleague that may be interested in subscribing, follow the instructions at the bottom of this newsletter to be added to the distribution. If you choose not to continue receiving this newsletter, follow the directions at the bottom of this newsletter and accept our apologies for intruding.
in this issue
Two Weeks Until the New Rules
What Judges Should Know About Computer Forensics
Ease The Pain Of E-Discovery
Sword & Shield makes VAR Top 500 Business list
Upcoming Speaking Engagements
EDiscovery Case Law
Previous Newsletters
 
We hope you enjoyed last month's article, "eDiscovery Everywhere!". Due to a steady increase in new subscribers, Forensics Discoveries will continue to list previous newsletters. As others have done, please let us know of a specific topic you would like to see covered.

We have added a new newsletter archive section to our website. The improved archive interface provides the same interaction with the newsletter as the distributed newsletter. View the new newsletter archive here.
 
Below is a review of our previous newsletters:
 

August 2007 - "What is Computer Forensics?"

September 2007 - "Preparing Your Clients for EDiscovery - Part 1"
October 2007 - "Preparing Your Clients for EDiscovery - Part 2"
November 2007 - "Preparing for Your Clients' EDiscovery"
December 2007 - "Why Does My Case Need Electronic Discovery?"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Two Weeks Until the New Rules
 
The date has finally arrived for the state of Tennessee to adopt updated Rule of Civil Procedure to handle electronically stored information (ESI). The proposed rules can be found here. For those that are familiar with the Federal Rules that were updated Dec. 1 of 2006, there are little differences between the TN and Federal Civil Rules as they apply to eDiscovery. 
 
With corporate clients no longer able to hide from eDiscovery in litigation, now is the time for them to properly prepare. Proper eDiscovery preparation before the discovery request will ensure the process is smoother (see below article "Ease the Pain of E-Discovery"). An analogy that I like to give in speaking engagements is that some companies budget resources to develop, plan, implement, and test disaster recovery plans in preparation for the small opportunity that a disaster will occur requiring this investment. With eDiscovery now being virtually unavoidable, one can almost be guaranteed that a company will see a discovery request for electronic information before a disaster that requires the disaster recovery plan. If a company will spend a fraction of the time and resources dedicated to a disaster to eDiscovery preparation, the investment will provide the return many times over.

This newsletter has covered the specifics of the rules since last August. Below are some additional resources for you and your clients:
 
  • "eDiscovery Everywhere!" article that was published in the May DICTA
  • "New Rules for E-Discovery" article in the June TBA Journal
  • In addition, Forensic Discoveries can provide our "eDiscovery 101" presentation either at your location or via WebEx at no cost to you.

For those of you that have not yet been involved in litigation involving electronic discovery, there has never been a better time. I have been a technologist for approaching 16 years. In 1994, I first encountered the Internet. From 1994 until now, the evolution and improvements of the Internet have been very painful and expensive. In contrast, there are third world nations that wake up one morning and have wireless/broadband internet access. They did not endure the same frustrations and expense that I have. Being new to eDiscovery, you have this same luxury. Just in the past two years, the technological advances and reduced costs are astounding. Less than two years ago, capital investments to perform eDiscovery in-house started at about $15k. Today, many of the eDiscovery tools are provided on a "pay as you use" model in which no captial investments are required. In the past three years, processing costs for file conversions has reduced by approximately 60%. In addition, the efficiency of the tools to provide you with the information you need faster as improving daily.



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

What Judges Should Know About Computer Forensics


Although the title indicates the specific purpose for educating Judges, the article is an insightful read for anyone in the legal field. The article covers topics such as the differences between eDiscovery and computer forensics, when computer forensics is needed, and some very good explanations of the process.

Read the full article here


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Ease The Pain Of E-Discovery

InformationWeek recently published a very good article how companies can pull together "IT, legal, and other stakeholders to reduce the complexity and cost of finding information when the lawyers come calling.The full article can be read here . After reviewing the article, it is also a valuable read for your corporate clients. to understand the importance of ediscovery preparation.

In every speaking engagement over the past two years, Forensic Discoveries spends time expressing the importance of eDiscovery preparation to reduce confusion, significantly lower costs, and give peace of mind to all involved
. With our experience in eDiscovery and large corporate IT environments, Forensic Discoveries offers a services package to assist companies to "Ease The Pain". The package positions Forensic Discoveries to be an outsourced litigation response and internal investigation team to provide the attorney with a dedicated expert and to handle the process for companies.

For more information, contact us at (865) 244-3505 or bill.dean@forensicdiscoveries.com to discuss how we can assist our clients.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Sword & Shield makes VAR Top 500 Business list


Sword & Shield Enterprise Security, the parent company of Forensic Discoveries, has made VAR's Top 500 Business list. Below is an excerpt from the Knoxville News Sentinel:

"In a time when many companies are struggling to survive, one Knoxville based company has made the 2009 VAR Business 500 list, a rating of solutions providers based on their financial performance.

Sword & Shield Enterprise Security Inc., a firm that does information security consulting, came in at No. 432 on the list with a 2008 revenue of more than $43.7 million.

Other companies that made the cut include: Verizon Communications, Inc., which made its mark at No. 5, Office Depot- Business Solutions at 37 and Microsoft Corp. ranked 43rd.

Sword & Shield is headquartered in Knoxville at 1431 Centerpoint Drive Suite 150. It also has an office in Washington D.C."

The article can be found here

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Upcoming Speaking Engagements

eDiscovery Seminars

U.S. Magistrate Judge Cliff Shirley, Chuck Young from Kramer Rayson, and I conducted a half day seminar last month for the Tennessee Bar Association. The seminar, in contrast to conventional eDiscovery presentations, presented five interactive modules based on hypothetical situations. The scenarios0 were drawn from actual cases, with some adjustments, and were by no means "far-fetched." As we asked our participants to work through the problems, we provided legal, technical, and judicial perspectives on how each situation can be best handled - and what traps can be avoided.  The TBA held other eDiscovery seminars at about the same time as ours, and our seminar earned higher ratings from attendees than the others did.   In view of the success of the seminar, we are approaching bar associations in East Tennessee to determine their interest in our conducting the seminar for them.  If you, or someone you know, would be interested in this seminar, please contact your local bar association and request this seminar.

ILTA '09

Bill Dean will be speaking at ILTA '09 (International Legal Technology Association) August 23-27 in Washington D.C. The topic will be data destruction.

2009 CyberSecurity Summit

Bill Dean will be speaking at the 2009 CyberSecurity Summit here in Knoxville, TN. Although the presentation title is not confirmed, the topic will be the growing threat of intellectual property theft that is occurring during this recession

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
EDiscovery Case Law



Court Denies Demand for Paper Production of Electronic Documents


In re the Account of Tamer, 2009 WL 1058594 (N.Y.Sur. Apr. 20, 2009).

In this contested accounting of a revocable trust, the objectant sought authorization to produce approximately 6,000 documents electronically on CD-ROMs and DVDs, while the trustees filed a cross-motion seeking paper production. Noting the relevant state statute neither authorizes nor prohibits electronic production, the court stated, "It is implicit that where a party seeks electronic discovery, the responding party will produce the information sought by some form of electronic means." Accordingly, the court held the objectant may produce documents electronically, provided the production is accompanied by an index identifying each document's file location and responsiveness to a discovery demand. The court concluded that the index would prevent the imposition of an undue burden on the trustees who would otherwise need to read through 6,000 documents.



Court Denies Sanction Request Citing Party's Routine Deletion Policy  

Patterson v. Goodyear Tire & Rubber Co., 2009 WL 1107740 (D.Kan. Apr.23, 2009).

In this employment litigation, the plaintiff soughtproduction of various electronic employee records and policies, and anadverse inference instruction alleging spoliation of attendance records. The defendant argued electronic copies no longer existed due to the routine document deletion every 12 months, but that all records were preserved and produced in hard copy. Denying the motion to compel as untimely, the court noted "both parties neglected the issue of ESI from the outset of this litigation" in violation of their obligations under Rule 26 of Kansas' Guidelines for Discovery of Electronically Stored
Information. Because many of the documents sought were contained on backup tapes, if available at all, the court was hesitant to intervene at the late time, but ordered the defendant to search two backup tapes pursuant to its offer to do so. The court denied the adverse inference instruction request, determining there was no evidence the attendance records were intentionally destroyed given the defendant's routine deletion system.



Court Permits Testimony of Forensic Expert Regarding Alleged Evidence Destruction

Mintel Int'l Group, Ltd. v. Neergheen, 2009 WL 1033357 (N.D.Ill.Apr.17, 2009).

In this ongoing misappropriation of trade secrets litigation, both parties offered testimony from qualified computer forensics and electronic discovery experts. The defendant sought exclusion of the plaintiff's expert from testifying, alleging the expert failed to meet the appropriate standards, and requested exclusion of evidence regarding spoliation allegations claiming the evidence was irrelevant and prejudicial. The plaintiff objected to the magistrate judge's order denying production of a mirror image from a third party. Granting the defendant's motion to exclude in part, the court ordered preclusion of the expert's legal conclusions regarding whether the defendant's conduct constituted spoliation, but otherwise allowed testimony. The court noted the expert must be able to technically explain the conclusion reached regarding whether the defendant used a "defrag" program and not simply speculate "to please the side that hired him." Turning to the spoliation issue, the court denied the defendant's motion, concluding the experts' views on whether evidence was deleted would be "extremely helpful given the complexity of the electronic evidence issues." Finally, the court upheld the magistrate judge's recommendation to deny production of the third party's mirror image given the magistrate judge's previous analysis of the conflicting expert testimony and evidence presented by the plaintiff.


Court Grants Motion for Hearing on Spoliation Citing Possible
Application of Zubulake Exception
 
Forest Labs., Inc. v. Caraco Pharm. Labs., Ltd., 2009 WL 998402 (E.D. Mich. Apr. 14, 2009).

In this patent litigation, the defendants moved for a hearing on sanctions for spoliation alleging the plaintiffs intentionally or recklessly destroyed backup tapes. Opposing the motion, the plaintiffs denied misconduct claiming they preserved electronic records pursuant to their standard operating procedures but admitted they did not halt all backup tape recycling. Thus, the court determined that potentially relevant evidence was destroyed after the duty to preserve arose. However, the court also determined the backup tapes were inaccessible and there is no duty to preserve inaccessible backup tapes beyond a company's normal retention period unless the Zubulake exception applies. The Zubulake exception requires the preservation of backuptapes containing documents of "key players" if the information is not otherwise available. Zubulake v. UBS Warburg, LLC, 220 F.R.D. 212(S.D.N.Y. 2003). The court granted the defendants' motion and ordered a hearing to determine whether the Zubulake exception applies and, if so, whether the plaintiffs acted with the requisite culpability and whether the spoliated evidence was relevant.



Court of Appeals Affirms Trial Court's Award of Monetary Sanctions and Admission of Expert Forensic Testimony

Oz Optics Ltd. v. Hakimoglu, 2009 WL 1017042 (Cal. App. 1 Dist. Apr. 15, 2009).

In this employment dispute, both parties appealed the denial of their respective motions for judgment notwithstanding the verdict\ (JNOV). The defendant argued that the court improperly allowed expert forensic testimony alleging it was "devoid of substance" and improperly awarded $90,000 in monetary sanctions based on the defendant's hard drive file scrubbing. The plaintiff argued that the court abused its discretion by limiting sanctions to $90,000. The court of appeals affirmed the trial court on all grounds. First, the court rejected the defendant's argument that the forensic testimony was prejudicial, citing the defendant's inability to demonstrate why the testimony was inappropriate. Second, the court affirmed the sanctions as reasonable compensation for attorney's fees, costs and expenses incurred as a result of the defendant's discovery misconduct. In affirming, the court rejected the defendant's argument that the spoliation was unintentional, determining that intent is not required for monetary sanctions under the California Code of Civil Procedure. The court also rejected the plaintiff's argument that the monetary sanctions did not provide full compensation for reasonable expenses, finding the plaintiffs failed to establish the amount awarded was "arbitrary, capricious or whimsical."  


 
Court Orders Retrieval of Deleted Responsive Files Following Parties' Discovery Shortcomings

Bank of Mongolia v. M & P Global Fin. Servs., Inc., 2009 WL 117312 (S.D.Fla. Apr. 24, 2009).

In this RICO action, the plaintiff sought a production response from the defendants after a previous motion to compel proved fruitless. The plaintiff also requested sanctions in the form of direct access to the defendants' computer hardware andelectronic information. Finding the defendants failed to present a sufficient reason for the discovery inadequacies, the court determined an independent computer expert should be appointed to retrieve deleted responsive files from the defendants' computers. The court ordered the plaintiff to submit search terms and bear the expert's costs unless future evidence of discovery misconduct necessitated cost allocation to the defendants, but awarded attorneys' fees to the plaintiff. The court also afforded the defendants the right to review the search terms and determine privilege and responsiveness.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Forensic Discoveries is available to provide onsite presentations or Q&A sessions on topics such as Electronic Discovery, Technical Implications of the updated Federal Rules of Civil Procedure, or Computer Forensics. Forensic Discoveries is also available to you, obligation free, to answer any specific questions pertaining to these topics. Simply give us a call and we will be glad to answer any questions pertaining to Electronic Discovery and Digital Forensics.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

a division of Sword & Shield

   Knoxville Office

   Phone:    (865)-244-3500

   Address:  1431 Centerpoint Blvd, Suite 150

                  Knoxville, TN 37932


   Washington D.C. Office

   Phone:    (410)-414-5580

   Address:  1425 K Street NW, Suite 350

                 Washington, DC 20005-3514


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 

If you have a topic that you would like addressed in the newsletter, please let us know. Either visit http://www.forensicdiscoveries.com/newsletter.html and submit your suggestion there or reply to this e-mail with your suggestion. 

For previous versions of Forensic Discoveries EDiscovery newsletters, visit http://www.forensicdiscoveries.com/pastnewsletters.html  

 

This document does not provide legal or other professional advice and should not be relied upon as anything other than a starting point for research and information on the subject of electronic evidence and digital forensics.