| November 2002 Vol. 11, Issue 5
Computer
Forensics In The Age Of Electronically Stored Data - Part II The
Need For A Document Retention Policy Many companies operate without any kind of formal document retention policy. Paper files are closed and stored, and little or no attention is paid to the electronic counterparts of what is in those files. And the electronic versions will likely contain much more information than their paper siblings. One of the problems in this area is that there are at least two distinct reasons for retaining documents. One is for disaster backup. It gives the company the ability to restore data in the event of some sort of computer crash. This is quite different from electronic record keeping, which allows the user to manage documents so that they can be retrieved, if necessary, in some sort of cost efficient manner. Even a good written document retention policy needs to be audited to make sure it is in compliance. Having such a policy and testing compliance has several benefits:
A good document retention policy cannot be accomplished in a vacuum. It requires that the Information Systems (“IS”) people are aware of the legal reasons for document retention and that the management team understands the technical limits of the IS department. What To Do
When The Lawsuit Comes
A policy that is haphazardly followed may be as bad or worse than no policy at all. For example, in In re Prudential Ins. Co. of America Sales Prac. Litig., uncoordinated implementation of the Prudential document retention was held to have denied its opponents relevant evidence, and resulted in substantial sanctions. There was no evidence presented that Prudential had acted maliciously. And in another case, a default judgment was entered against a defendant who purposely destroyed records that might be detrimental to it in litigation. The recent Arthur Andersen fiasco reminds us how important the records retention issue can be. An Arthur Andersen partner recently admitted, “I obstructed justice. I instructed people on the (Enron project) to follow the document retention policy, which I knew would result in the destruction of documents.” When the law firm of Vinson & Elkins was sued in the Enron class action litigation, it was reported that it took the cautious but expensive step of trading out all its hard drives and preserving the old ones—at an estimated cost of $800,000. How
Long Is Long? Just because you “can” keep something a long time, doesn’t mean you “should.” Some organizations simply box up old files and store them away without any attempt to cull out what should not be kept. Now that electronic document storage is so inexpensive, the “easy” decision may seem to be that everything should be electronically stored. Generally speaking, that is a mistake. Most organizations should not retain documents longer than they are needed; yet most do retain them in one form or another. How long should documents be retained? Perhaps 75% of all documents created have no legally required retention period. For the other 25%, there are retention periods in statutes or regulation periods, statutes of limitations, or other factors requiring their retention. And how will they be retained? Tapes are fragile. Humidity and heat affect microfilm. And will the medium you use be readable when you need it? Do you remember CP/M, an early operating system? Or 5¼ inch floppy disks? Will the Word® document you save today be readable in 10 years? Should it be saved in a static form such as PDF or TIFF? The decision regarding how long to keep documents should be a combined management/legal decision. Certain documents are not legally required to be maintained, but may be helpful for historical purposes. After all, people die, retire, quit, or even have honest differences in their recollections of what took place. Management needs to decide what makes sense for the organization. Whose Cost Is It? An example of the reasoning employed by some courts can be found in Rowe Entertainment, Inc., et al. v. The William Morris Agency, Inc., et al., in which eight cost shifting factors were considered: (1) specificity of the discovery requests; (2) likelihood of a successful search; (3) availability from other sources; (4) purposes of retention; (5) benefit to the parties; (6) total costs; (7) ability of each party to control costs; and (8) the parties’ resources. Why
Keep It At All? A finding of spoliation can be very costly. Even in jurisdictions where there is no independent tort of spoliation, courts have given juries an instruction on “spoliation of evidence” which essentially say that if a party destroyed it, you can assume that it was harmful to that party. Not only traditional “documents” must be preserved, but it is also important that other electronic media such as website content be retained as well. While there is little case law to date, at law, a California court sanctioned a party under a spoliation theory when it changed its web site during litigation. Who
Pays For All This?
Many courts encourage cost sharing or a sampling to determine the “success” of the discovery efforts. Some, however, continue to maintain that the cost of complying with an electronic discovery request is simply a cost of doing business. Why
A Forensic Expert?
Forensic experts can image a computer without ever turning it on; enabling them to testify that the data has not been altered in any way. Forensic experts understand the protocols necessary to make their findings admissible. They can assist in protecting the data and the chain of evidence by following forensic procedures including:
Forensic experts have the tools and know where to look. They examine such areas as:
What Will The Forensic Expert Need?
Places to look may include:
Some
Of The Lingo A block usually consists of 512 bytes. A byte (Binary Term) consists of 8 bits. A cache is a small fast memory holding recently accessed data, designed to speed up subsequent access to the same data. A cookie is a packet of information sent by an HTTP server to a World-Wide Web browser and then sent back by the browser each time it accesses that server. A file is a basic unit of storage. It consists of numbers, words, images, or instructions. It is stored as space allows, in groups of blocks. To partition means to divide a physical disk into smaller, usable logical segments. A sector holds a single block of data. Conclusion Joel Mirman is a Shareholder and member of the Litigation Practice Group. He can be contacted at jmirman@bdblaw.com or 614.227.4264.
On December 3, 2002, James L. Fisher (Buckingham AkronSM) will present “Important Terms and Conditions of Commercial Purchase Agreements,” at the 2002 Real Property Law Forum sponsored by the Akron and Cuyahoga County Bar Associations. Please reference www.akronbar.org or www.cuybar.org. On December 10, 2002, Gerald B. Chattman and John P. Slagter (Buckingham ClevelandSM) will be presenting on “Legal Issues Involving Ohio Local Governments” at a National Business Institute sponsored seminar. Please reference www.nbi-sems.com for additional information. On December 13, 2002, Joseph J. Feltes and Rhonda L. Warren (Buckingham CantonSM) will present HIPAA Compliance for Nursing Professionals in Ohio at the Holiday Inn Express in Akron, Ohio. Please reference www.lorman.com for additional information and registration. On January 22, 2002, Rhonda L. Warren (Buckingham CantonSM) will be a presenter at a National Business Institute sponsored seminar titled Medical Records for Attorneys in Akron, Ohio. Please reference www.nbi-sems.com for additional information. On February 5, 2002, Joseph J. Feltes and Shila Nalawadi (Buckingham CantonSM) will be speaking at the Lorman Education Services sponsored seminar titled “HIPAA Compliance-Understanding and Implementing the Security and Privacy Regulations in Ohio” in Akron, Ohio. Please reference www.lorman.com for additional information and registration Out and About – Recent Presentations: Business Law Practice Group Bret A. Adams and Paul J. Hess, Jr. (Buckingham ColumbusSM) presented at the Columbus Bar Association Sports/Entertainment Committee’s CLE Issues in Sports Law in Ohio. Their topics were: “Sports Contracts and Negotiation,” “Ohio Agent Law,” “The Proposed Federal Legislation (SPARTA) to Regulate Sports Agents,” and “Uniform Athlete Agents Act.” Bret A. Adams and Paul J. Hess, Jr. also spoke on “Current Trends in Sports Law” sponsored by the Columbus Bar Association. Also, Paul J. Hess, Jr. presented “Legal Aspects of Sports Marketing” at the Columbus State Community College. Rana M. Gorzeck and Mary Sue Donohue (Buckingham Boca RatonSM) gave a presentation, on behalf of the Firm, titled “The Patriot Act,” to the local chapter of American Woman’s Society of Certified Public Accountants at the Tower Club in Fort Lauderdale, Florida. Robert W. Malone (Buckingham AkronSM) was the Chair of the Cleveland Tax Institute Panel for the Cleveland Bar Association. Employment Law Practice Group Ashley M. Manfull, Vincent J. Tersigni (Buckingham AkronSM), Jason M. Baasten, Robert C. Meyer, Tod T. Morrow (Buckingham CantonSM), Gerald B. Chattman, Natalie F. Grubb, and Debbie Sesek (Buckingham ClevelandSM) were presenters at Buckingham’s 14th Annual Employment Law Seminar. Their topics included: Effective Use of Employee Separation Agreements, Family and Medical Leave Act Compliance Update, 2002 Update on the Americans with Disabilities Act, How to Address Union Organizing Campaign Issues, Workplace Accidents and Aggressive, and Workers’ Compensation Claims Management Issues. Vincent J. Tersigni (Buckingham AkronSM) conducted a workshop on “Managing Employment Law Issues in the Workplace” for the Ohio Housing Authorities Conference Directors Retreat in Cambridge, Ohio. Vincent J. Tersigni also presented “Fundamental Issues in Employment Law” for the Akron Bar Association and “Splitting Hairs – Legal Aspects of Drug Testing in the Workplace.” Health Law Practice Group Thomas W. Hess and Joel H. Mirman (Buckingham ColumbusSM) presented a series of seminars sponsored by the Association of Ohio Philanthropic Homes, Housing, and Services for the Aging. Their topic was “Nursing Home Malpractice in Ohio: Successful Case Management from Investigation to Trial.” Christopher S. Humphrey (Buckingham AkronSM), Eric M. Simon (Buckingham ClevelandSM), and Thomas W. Hess (Buckingham ColumbusSM) presented at a series of Buckingham Health Law Seminars for Long Term Care Providers. The topics were "Effectively Managing HIPAA Issues, Patient Bill of Rights/Negligence Litigation Update, and The Survey Process. Patrick H. Reymann (Buckingham AkronSM), Joseph J. Feltes (Buckingham ClevelandSM) and Dirk E. Riemenschneider (Buckingham ColumbusSM) presented at a series of Buckingham Health Law Seminars for Hospitals and Physicians. The topics included: Effectively Managing HIPAA Issues, Medical Malpractice/Negligence Litigation Update, and 10 Major Physician Billing/Coding Problems. Litigation Practice Group Robert E. Pershes (Buckingham Boca RatonSM) presented “Electronic Evidence and How Do You Get It” in Washington D.C. at the Annual Meeting of the American Intellectual Property Lawyer Association. Real Estate & Construction Law Practice Group Robert A. Hager (Buckingham ClevelandSM) spoke on “Lien Law” for Lorman Education Services. Trusts & Estates Practice Group Phylip J. Divine (Buckingham AkronSM) presented at the Canton Estate Planning Forum sponsored by the Akron/Canton Chapter of the Ohio Society of CPAs. Thomas J. Sigmund (Buckingham ColumbusSM) gave a presentation on the “New Qualified Plan Designs After EGTRRA” at the Columbus Tax Conference sponsored by the Columbus Bar Association.
|
|||||
|
http://www.bdblaw.com In all of our offices, we provide skilled advice and effective legal counsel
to individuals and businesses in virtually every industry and trade. We focus
on practical solutions that meet our clients’ goals.
|