Blog

In 2019, I co-authored an article published by the American Bar Association regarding the future of U.S. pretrial discovery involving European Union data following the decision by the United States District Court for the District of Arizona in Salt River Project Agricultural Improvement & Power District v. Trench-France SAS, 303 F. Supp. 3d 1004 (D. Ariz. 2018). The article concluded that Salt River represented a potential watershed moment promoting the application of a foreign mechanism to U.S. discovery overseen by a foreign discovery master under the Hague Convention, as opposed to U.S. courts’ typical deference to domestic discovery practices. Recently, however, I was involved in a matter which demonstrated that state courts may be reluctant to follow Salt River’s lead.

In the wake of recent cybersecurity incidents of historical significance on May 12, 2021, President Biden issued an executive order to improve the federal government’s efforts to “identify, deter, protect against, detect, and respond” to cybersecurity incidents.

President Biden’s executive order is far more comprehensive than past government efforts in the realm of cybersecurity, nevertheless the government has also used this moment as a call to action for the private sector to step up its game. After all, a significant chunk of our critical infrastructure is owned and operated by private entities.

Companies and organizations use social media ("SoMe") to gain market advantage, shape and model their own image, market and advertise to customers, track how effective their marketing campaigns might be, understand who their customers are, test new products or services and provide a platform through which customers can provide feedback. Every post or piece of analytics could be considered a “business record,” subjecting it to discovery in both civil and criminal litigation, internal and government investigations or audits. As a result, attorneys and their IT teams should understand the best practices for preserving, processing, reviewing, and producing data from SoMe sites to acquire valuable – and usable – evidence.

In my experience as an e-discovery project manager, I’ve found that one of the primary reasons for lengthy document reviews is the need to redact documents. While the extent to which redactions will be needed may not be known at the outset of a review, good project management should include recognizing when and what type of redactions may be needed. Factors to consider include the type of case, the extensive nature of the collection process, the type of files processed for review, the stipulations agreed to in the ESI protocol and protective order, the sophistication of the legal teams involved, the contentious nature of the dispute and, perhaps of equal importance, the technology available to apply those redactions.