17.01.2013 Views

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

Electronic Discovery and Computer Forensics Case List - Kroll Ontrack

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

plaintiffs’ alleged failure to meet the terms of a stipulated preservation <strong>and</strong> production agreement.<br />

Contending the defendants’ interpretation of the agreement was overbroad, unrealistic <strong>and</strong> a<br />

moving target, the plaintiffs argued their obligations were satisfied by interviewing all stipulated<br />

custodians except former employees. Although the court agreed with the plaintiffs’ narrower<br />

interpretation, it characterized the plaintiffs’ decision not to interview former employees as "an<br />

inadequate <strong>and</strong> unsupportable excuse" <strong>and</strong> concluded the plaintiffs failed to comply with the<br />

custodian protocol required by the agreement. However, finding an order to fully comply at this<br />

point in the litigation would likely do "violence," <strong>and</strong> that the parties might already have received the<br />

requested information in late productions, the court instead ordered the parties to meet <strong>and</strong> confer<br />

<strong>and</strong> report any agreement concerning how to proceed with non-expert discovery, after which time<br />

the court will rule on the 12 categories included in the defendants’ motion to compel.<br />

Trickey v. Kaman Indus. Techs. Corp., 2010 WL 5067421 (E.D. Mo. Dec. 6, 2010). In this<br />

employment discrimination litigation, the plaintiff sought production of all relevant electronic<br />

communications, alleging the defendants failed to adequately preserve electronic data in<br />

anticipation of litigation. Employees of the defendants manually selected <strong>and</strong> preserved documents<br />

<strong>and</strong> e-mails contained in the live database or archive that they deemed potentially relevant instead<br />

of preserving a mirror image of the e-mail server <strong>and</strong> relevant data sets. Although concerned by<br />

the defendants’ failure to create a mirror image, the court declined to issue sanctions as the plaintiff<br />

made no spoliation claims <strong>and</strong> the defendants made considerable remedial efforts by hiring an<br />

independent forensic computer expert to examine the electronic data for relevant information.<br />

Based on this retention of the forensic IT consultant <strong>and</strong> efforts to search existing data, the court<br />

agreed that the requested documents no longer existed <strong>and</strong> denied the motion to compel unless<br />

the plaintiff could identify now-existing databases that were not previously searched.<br />

� Secure Energy, Inc. v. Coal Synthetics, 2010 WL 597388 (E.D.Mo. Feb. 17, 2010). In this<br />

business dispute, the plaintiffs sought production of electronic engineering drawings in native<br />

format with metadata. The plaintiffs argued that the definition of “documents” in previous discovery<br />

requests included ESI, that they were under the impression the defendants agreed to produce the<br />

files <strong>and</strong> that the terms of a proposed joint scheduling plan entitled them to native production.<br />

Citing Fed.R.Civ.P. 34, the court determined the defendants were not obligated to produce the<br />

drawings in native format since the plaintiffs failed to identify a specific format in their requests. The<br />

court also found the plaintiffs’ motion untimely, since they waited until two months after the<br />

discovery <strong>and</strong> motion to compel deadlines had passed. Finally, the court recognized that expert<br />

testimony may be required regarding retrieval <strong>and</strong> interpretation of the metadata from the drawings<br />

<strong>and</strong> determined the defendants would be prejudiced if the plaintiffs’ request was granted. Thus, the<br />

court denied the plaintiffs’ motion <strong>and</strong> held the defendants fulfilled discovery obligations by<br />

producing the drawings in PDF format.<br />

� Am. Boat Co., Inc. v. Unknown Sunken Barge, 2008 WL 1821486 (E.D.Mo. April 22, 2008). In<br />

this negligence action, the plaintiffs moved to reopen the time to file an appeal claiming the<br />

plaintiffs’ attorney did not receive the electronic notice of the court order. The defendants’ computer<br />

forensic expert imaged the computer hard drive belonging to the plaintiffs’ counsel <strong>and</strong> found no<br />

evidence the notice had ever been on the computer system. Based on his investigation, the expert<br />

opined the notice was successfully sent, but was removed from the server after the attorney’s<br />

secretary accessed the e-mail from a remote computer using the internet Post Office Protocol. The<br />

court found that proof an e-mail is not in a recipient’s possession is insufficient to rebut the<br />

presumption that a generally reliable, properly dispatched e-mail reached its intended recipient.<br />

209

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!