Category Archives: eDiscovery & Compliance

February 28, 2023 · 2:26 PM

A Tectonic Shift is Occurring in eDiscovery

Guest Blog Post by Insight Optix
Original post date by IO: February 23, 2023

Editor’s note: Today we are featuring a guest blog post from legal technology company Insight Optix on the changes occurring in eDiscovery with reference to key survey reports by Doug Austin and Rob Robinson.

Are you tired of hearing about high eDiscovery costs? Legal professionals spend countless hours talking about it, yet year after year the only thing that changes is that costs continue to rise. Will 2023 be any different? We’re seeing a number of indicators pointing to yes.

The eDiscovery software and services market is expected to grow from $14.05 billion in 2022 to $22.31 billion in 2027, according to Rob Robinson’s An eDiscovery Market Size Mashup: 2022-2027 Worldwide Software and Services Overview (complexdiscovery.com). With current economic pressures, it is difficult to see how corporations can continue this trajectory without making significant changes in how they manage eDiscovery.

Corporate legal departments are starting to say enough is enough. While we have recently seen legal departments bringing more work inhouse and moving discovery responsibilities to mid-sized firms or boutique practices, we’re now seeing an even bigger shift — corporate legal departments are actively seeking innovation in the delivery of legal services that drastically reduces discovery spend.

Evidence of this change can be found in eDiscovery Today’s third annual State of the Industry Report Survey published in January. When asked what the top eDiscovery challenge is that not enough people are talking about, the second-highest answer from the 410 respondents was the move to the left of the EDRM and indexing in place, with nearly double the percentage than was received in 2021. As Doug Austin stated in his 5 Legal Tech Predictions for 2023 blog post, “I’m hearing more legal and eDiscovery professionals than ever talk about the importance of information governance, early data assessment (EDA) and targeted collection in discovery.”

Recent technology innovations that focus on identification and collection are shining a spotlight on these critical early stages of the EDRM, finally making it achievable to counteract the high costs of eDiscovery. Insight Optix’s early case strategy and discovery scoping solution, Evidence Optix® and the X1 Enterprise Collect iterative search and targeted collection platform are two examples of innovative solutions that can achieve significant cost reduction.

Corporations that embrace innovation, such as Evidence Optix and X1 Enterprise Collect, are positioning themselves to counteract the rising volume of data and the proliferation of data sources to accomplish what the 2015 amendments to the FRCP intended — right-sized discovery.

While many law firms continue to maintain the status quo, innovative firms who recognize the value of blending early-stage solutions into their case strategies to impact their clients’ bottom line are emerging. These firms are focused on assisting their clients with building better workflows to reduce costs, while also differentiating their services in a highly competitive market.

This past year, many eDiscovery service providers began talking about the early stages of the EDRM and strategically planning a move to the left. This is one of the most telling indicators of the tectonic shift that is changing the landscape of eDiscovery.

How is your company or firm addressing this shift? If you would like to leverage recent technology innovations and get out in front of this important trend, contact us at info@insightoptix.com.

Leave a comment

Filed under Best Practices, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Information Management

December 6, 2022 · 10:23 AM

Significant Microsoft 365 eDiscovery Challenges Require a New Approach

By John Patzakis

The adoption of cloud-based Microsoft 365 (“MS 365”) by enterprises continues to grow exponentially, with the company recently reporting 300 million monthly active users, and the addition of over 100 petabytes of new content each month. There is no question that MS 365 is now a major data source for eDiscovery, second only to file-shares and laptops, and as such provides challenges to every legal and eDiscovery practitioner.

While MS 365 includes built-in eDiscovery tools in the Security and Compliance Center, many users look to third party alternatives due to the high cost, perceived concerns over the accuracy of search results, and other key challenges. However, most non-MS eDiscovery tools collect from MS 365 by simply making bulk copies of data associated with individual accounts, and then attempting to transfer that data en masse to their own proprietary processing and/or review platform. This problematic approach is counter-productive to the very purpose of why you put data in the cloud.

Such an effort is very costly, time consuming, and inefficient for many reasons. For one, this bulk transfer triggers data transfer throttling by Microsoft, causing significant time delays. But the main problem is that clients who are investing in MS 365 do not want to see all their data routinely exported out of its native environment every time there is an eDiscovery or compliance investigation. Organizations are fine with a targeted set of potentially relevant ESI leaving MS 365. What they do not want is a mass bulk export of terabytes of data at great expense because eDiscovery and processing tools need to first broadly ingest that data in their disparate platform in order to even begin the indexing, culling and searching process.

Additionally, organizations, especially larger enterprises, rarely house all or even most of their data within MS 365, with hybrid cloud and on-premise environments being the norm. MS 365 eDiscovery tools can only address what is contained within MS 365. Any on-premise data, including on-premise Microsoft sources (SharePoint, Exchange) cannot be readily consolidated by MS 365, and neither can data from other cloud sources such as Google Drive, Box, Dropbox, etc. And of course, laptops and file-shares are critical to eDiscovery collections and are also not supported by the MS 365 eDiscovery tools, with Microsoft indicating that they do not have any plans to address all of these non-MS 365 data sources.

So, eDiscovery software providers need to have a good process to perform unified search and collection of MS 365 and non-MS 365 sources. To achieve requisite efficiency and the minimization of data transfer, this process should be based upon a targeted search and collection in-place capability, and not simply involve mass export of data out of MS 365 for downstream processing and searching.

To answer this unmet critical need, X1 has added MS 365 data connectors to our X1 Enterprise Collect platform. X1 Enterprise Collect provides users the unique ability to search and collect MS 365 data in-place. X1’s optimized approach of iterative search and targeted collection enables organizations to apply proportionality principles across both cloud and on-premise data sources with clear and consistent results for effective eDiscovery. The search results are returned in minutes, not weeks, and thus can be highly granular and iterative, based upon multiple keywords, date ranges, file types, or other parameters. This approach typically reduces the eDiscovery collection and processing costs by at least one order of magnitude (90%).

The X1 Enterprise Collect Platform is available now from X1 and its global channel network in the cloud, on-premise, and with our services available on-demand. For a demonstration of the X1 Enterprise Collect Platform, contact us at sales@x1.com. For more details on this innovative solution, please visit www.x1.com/x1-enterprise-collect-platform.

Leave a comment

Filed under Best Practices, Cloud Data, Corporations, Data Audit, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Information Governance, Information Management, OneDrive, Preservation & Collection, SharePoint

Tagged as , , , ,

October 4, 2022 · 9:49 AM

Flawed Collection Methods Prevent TAR and Other Applications of Analytics on Social Media Evidence

By John Patzakis

Every litigator and eDiscovery practitioner is aware of the critical importance of analytics as a tool to support their cases. AI-driven analytics supercharges compliance investigations, data security, privacy audits, and Technology Assisted Review (TAR) of documents, emails, social media and other web-based items. AI machine learning employs mathematical models to assess enormous datasets to gain deep insights into key information. This enables the identification of discrete and hidden patterns in thousands of emails, social media posts and other electronic files to categorize and cluster documents by concepts, content, or topic.

However, it is important to understand that such a powerful capability requires the extracted text and metadata of the subject documents, emails and social media posts. So when examiners resort to screenshots, including flat file PDF image captures, this prevents the use of game-changing analytics in your case. Screenshots do not natively preserve the subject text or metadata and are useless if fed into analytics engines. This is a major disconnect with many eDiscovery practitioners who may not fully understand that by utilizing print screen, they are forfeiting their clients’ ability to utilize otherwise game-changing analytics on the social media and other web-based data they are collecting.

Bobby Malhotra, eDiscovery team co-lead at Munger Tolles highlighted this point in a recent webinar addressing the importance of native file collection for social media evidence: “If you are on a matter that is going to be very data intensive in terms of collecting voluminous amounts of data from social media sites, and you are going to need to mine through that data to understand what happened and get the relevant context (with an AI engine) the only way to really do that is to collect the full text and metadata, and so, screenshots will not suffice.” Malhotra emphasized that this is a “really critical point regarding the analytics process as a lot of people don’t think about that.”

In fact, not only will screenshots omit text and metadata, the screenshot will create a false record if introduced into the review and analytics workflow as the metadata of the screenshot itself will be completely different that the metadata of the original native object. For these reasons, it is important under an attorney’s duty of competency related to eDiscovery technology, to understand the implications of not collecting social media and web based evidence in native format, and strongly consider utilizing best practices technology to properly collect and preserve this critical source of evidence.

Leave a comment

Filed under Authentication, Best Practices, Data Audit, eDiscovery & Compliance, ESI, law firm, Preservation & Collection, Social Media Investigations, Social Media Metadata

Tagged as , , , , ,

September 20, 2022 · 10:46 AM

The Traditional Workplace is Not Coming Back, with Major Implications for eDiscovery

By John Patzakis

The world has in many ways returned to life as it was prior to the pandemic. Restaurants and hotels are packed again. Children are all back in their classrooms. Rock bands and philharmonics are playing in front of full audiences. But this is not so for the office.

Only about a third of knowledge workers are back in the office more than once a week, but, according to CNN, only 5 percent of employers are requiring in-office attendance five days a week. And it doesn’t look like these trends are going to change dramatically any time soon. In fact, the trend toward remote work should continue as office leases continue to expire. The vast majority of knowledge workers prefer some form of hybrid or remote work, and executives are increasingly coming to accept that reality. Remote and hybrid work is here to stay. And this has major repercussions for eDiscovery practices.

This is because the legacy manual collection workflow involving travel, physical access and one-time mass collection of custodian laptops, file servers and email accounts is a non-starter for the new era of remote and distributed workforces. Manual collection efforts are expensive, disruptive and time-consuming as many times an “overkill” method of forensic image collection process is employed, thus substantially driving up eDiscovery costs.

When it comes to technical approaches, endpoint forensic crawling methods are now a non-starter. Network bandwidth constraints coupled with the requirement to migrate all endpoint data back to the forensic crawling tool renders the approach ineffective, especially with remote workers needing to VPN into a corporate network. Corporate network bandwidth is at a premium, and the last thing a company needs is their network shut down by inefficient remote forensic tools.

For example, with a forensic crawling tool, to search a custodian’s laptop with 20 gigabytes of email and documents, all 20 gigabytes must be copied and transmitted over the network, where it is then searched, all of which takes at least a day or so per computer. So, most organizations choose to force collect all 20 gigabytes. But while this was merely inefficient and expensive pre-pandemic, it is now untenable with the global remote workforce.

Solving this collection challenge is X1 Enterprise Collect, which is specially designed to address the challenges presented by remote and distributed workforces. X1 enables enterprises to remotely, quickly and easily search across up to thousands of distributed endpoints and data servers from a central location. Legal and compliance teams can perform unified complex searches across both unstructured content and metadata, obtaining statistical insight into the data in minutes, and full results with completed collection in hours, instead of days or weeks. The key to X1’s scalability is its unique ability to index and search data in place, thereby enabling a highly detailed and iterative search and analysis, and then only collecting data responsive to those steps.

X1 operates on-demand where your data currently resides — on desktops, laptops, servers, or the cloud — without disruption to business operations and without requiring extensive or complex hardware configurations. After indexing of systems has completed (typically a few hours to a day depending on data volumes), clients and their outside counsel or service provider may then:

  • Conduct Boolean and keyword searches of relevant custodial data sources for ESI, returning search results within minutes by custodian, file type and location.
  • Preview any document in-place, before collection, including any or all documents with search hits.
  • Remotely collect and export responsive ESI from each system directly into a Relativity or RelativityOne® workspace for processing, analysis and review or any other processing or review platform via standard load file. Export text and metadata only or full native files.
  • Export responsive ESI directly into other analytics engines, e.g. Brainspace®, H5® or any other platform that accepts a standard load file.
  • Conduct iterative “search/analyze/export-into-Relativity” processes as frequently and as many times as desired.

To learn more about this capability purpose-built for remote eDiscovery collection and data audits, please contact us.

Leave a comment

Filed under Best Practices, ECA, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, Preservation & Collection

Tagged as , , , , , , ,

June 28, 2022 · 1:39 PM

Relativity and X1 Publish Updated Joint Legal Whitepaper on ESI Collection Best Practices

By John Patzakis

Relativity and X1 have published an updated joint legal whitepaper addressing full-disk imaging as a disfavored collection practice in civil litigation, with Relativity eDiscovery attorney David Horrigan as the lead author. This paper is a substantive update from the original published a year ago, adding discussion of important and relevant new case law published in the past 12 months. The paper notes that “if the preliminary data from the first five months of 2022 are any indication, we may be seeing that the law of proportionality is becoming more settled — and that courts continue to disfavor full-disk imaging.”

The paper delves into all the legal reasons, including detailed analysis of case law, the Federal Rules of Civil Procedure, and the Sedona Principles establishing why forensic collection is not required in civil litigation. The paper primarily focuses on the principles of proportionality in its legal analysis as well as case law issued prior to the 2015 amendment to the Federal Rules of Civil Procedure, which gave greater prominence and clarification of the proportionality rules.

One of the recent updated cases included is Besman v. Stafford, where the appellate court reversed and remanded a trial court’s order of a forensic examination of a law firm computer, holding the trial court erred in failing to take precautions to protect the privileged and confidential information on the device. “Generally, courts are reluctant to compel forensic imaging, largely due to the risk that imaging will improperly expose privileged and confidential material contained on the hard drive,” Judge Anita Laster Mays wrote for the appellate court.

This is an important topic as a key problem in eDiscovery that drives inefficiencies and higher costs is that default collection methods often involve full-disk imaging—a forensic examination of an entire computer—when searching for responsive data. As the whitepaper notes, “it turns out full-disk imaging is not required for most eDiscovery collections. In fact, courts often disfavor the practice.”

A copy of the whitepaper can be found here.

Leave a comment

Filed under Best Practices, Case Law, collection, eDiscovery, eDiscovery & Compliance, Enterprise eDiscovery, ESI, proportionality, Relativity