Technology Advantage

Impact of the Amendments to FRE 902 on E-Discovery Professionals

David Welch March 20th, 2018
Digital Footprint

Amendments to Federal Rule of Evidence 902 went into effect on December 1, 2017. FRE 902 governs evidence that is “self-authenticating,” meaning evidence that does not require any extrinsic evidence of authenticity in order to be admitted into evidence at trial. One of the primary objectives of the amendments was to simplify the process of admitting into evidence electronically stored information (ESI), hopefully reducing discovery costs and burdens along the way. Specifically, the amendments added two new paragraphs: (1) FRE 902(13), which addresses records generated by an electronic process or system; and (2) FRE 902(14), which addresses data copied from an electronic device, storage medium or file, and contains a digital identification (a/k/a “digital footprint" or "hash value”). Under both, authenticity may be shown by the introduction of an affidavit by a “qualified person” without the necessity of court testimony for the sole purpose of authenticating the electronic evidence. While addressing these important changes, the focus here is on the implications of these amendments for litigation support professionals.

Presuming that most in the legal industry support the idea of streamlining e-discovery processes and costs, these amendments are likely to be greeted warmly. However, it would be prudent to wait to see how the courts interpret some of the more vague aspects of the amended language. For example, what is a “qualified person”? Further, how will the courts define, and respond to, failures to meet these simplified requirements? While we will have to wait on these answers, there are other questions that can be tackled now in an effort to be prepared for future judicial interpretations. For example, does this mean the end to self-collection of data? Does this signal an increased workload for litigation support and IT personnel in the area of data collection? What tools can be utilized that will be compliant with the new rules?

Given my experience as an e-discovery professional, client self-collection of data is something that I generally discourage, especially if the entity organization lacks internal IT with significant experience in e-discovery. However, business units not in the midst of, or imminently anticipating, litigation (and therefore not yet engaged with counsel) are unlikely to abandon self-collection entirely.

So What Do We Do Now and, for Starters, What is a Hash Value?

The amendments’ explicit expansion of evidence self-authentication through the verification of hash values is a wise, if not overdue, change. A hash value (a/k/a “digital footprint”) is determined through an algorithm that generates an alphanumeric sequence of characters unique to a document. An original document and its duplicate or copy would have the same hash value. Put differently, there is a very high probability that two documents with the same hash value are identical. While MD5 and SHA-1 hash algorithms (those most commonly used) are easy to generate, they provide sufficient uniqueness to verify electronic document authenticity. The Advisory Committee on Rules of Evidence also considered the fast pace of changing technology, noting that hash values may not always be the best and only method of document identification: “The rule is flexible enough to allow certifications through processes other than comparison of hash value, including by other reliable means of identification provided by future technology.”

Educating clients is always the first step. It is highly unlikely that anyone outside of the legal industry will be aware of changes to the Federal Rules of Evidence. Clients need to understand that data must be collected in a defensible manner, which means in a manner that captures hash values when they exist and by a “qualified person.” Although the amendments do not specifically state that the “qualified person” must be an IT specialist or e-discovery expert, they do state that the person should be able to provide an affidavit as to the process and authenticity of the data collection. This person should also be someone who could testify if necessary. For this reason, this person should also have an up-to-date bio that includes their computer experience and professional certifications.  

While the education we provide our clients is critical, we also need to be sure to follow our own advice when asked to perform collections. Most e-discovery pros likely fall under the definition umbrella of a “qualified person” for performing collections, but it is still vital to keep our bios updated, use appropriate technical tools and keep detailed collection notes and logs. 

Having a defined, repeatable process outlined in a formal Standard Operating Procedure, and following it, is key to ensuring defensible collections. 

Collection Best Practices Include:

  1. Participate in an initial interview with IT and/or the exchange administrator to get a good understanding of the data sources in play. Be sure to consider retention and archival practices.
  2. Participate in, or carefully review, the custodian interview regarding the location and organization of potentially relevant data. Be sure to take detailed notes on data types and locations identified during the interview.
  3. Develop a collection plan that, when appropriate, includes the custodian’s participation in locating data. Custodians may be able to point you to a specific folder that contains all of the relevant data, meaning you can avoid an overly broad collection.
  4. Bring in an organization’s exchange administrator or internal IT team to assist when needed. In most collections, the participation of someone on the inside is critical to a collection’s success.
  5. Conduct a targeted collection whenever possible. This is why custodian interviews are so important.
  6. Make detailed notes during the actual collection. These notes often include folder paths for targeted collections and any follow up needed.
  7. Create a collection log that includes (at minimum):
  • Custodian information;
  • Date and location of collection;
  • Device information (Model, Serial Number);
  • Description of the collection process;
  • Local and network locations of data collected;
  • File count and file size collected; and
  • Log exported from the collection software.

Tools will vary depending on the type of collection, but an emphasis should now be placed on those that will generate hash values and reports as part of the collection process. This will help with the self-authentication of electronic evidence and ease the admission of this evidence.

These amendments provide a good opportunity for e-discovery professionals to examine our processes and make sure they are repeatable, defensible and well-documented. We will be watching to see how far the courts will go in allowing data to be self-authenticated. We will also be watching to see how courts address the inevitable failure by some to adequately, accurately and properly collect data.

 

DISCLAIMER: The information contained in this blog is not intended as legal advice or as an opinion on specific facts. For more information about these issues, please contact the author(s) of this blog or your existing LitSmart contact. The invitation to contact the author is not to be construed as a solicitation for legal work. Any new attorney/client relationship will be confirmed in writing.

Subscribe to the E-Discovery Newsletter

Related Posts

  • Data Mapping - Why is it Important for Successful E-Discovery?

    A data map is usually something that is generated along with a data retention plan and is a great starting point if and when an organization becomes involved in litigation and discovery. Long before litigation and discovery, however, it is important to understand the relevant data sources that may be in play and where those can be found within the organization’s various data systems. This blog explains what a data map is, what it contains and how it is helpful.

  • Pitfalls of Complex Search Protocols in ESI Agreements

    ESI Agreements cover the full gambit of e-discovery issues, from preservation expectations to production specifications. Sometimes, these agreements include an overview of the process by which the parties will identify the universe of potentially responsive documents by using specific date ranges, identifying priority custodians and developing proposed search terms. Adding another layer of complexity, this discussion is often had in a vacuum before the parties even know how much data their clients have. Coming up with criteria that identifies the relevant documents, but is not overly broad, in this vacuum can be difficult. However, the process is important because the date range, custodians and terms will inevitably dictate how much data is collected, processed and reviewed, which can significantly affect any litigation budget.

Newest Posts

  • Planting the Seeds of Accountability for Spoliation Sanctions

    When seeking sanctions for spoliated evidence, the nature of the evidence and your jurisdiction can play a pivotal role. Are you in state or federal court? Is the missing evidence electronically stored information or not? The same facts and circumstances could yield vastly different outcomes depending on the answers to those questions. It is important to recognize up front, at the start of your case, how your jurisdiction may impact discovery issues that could arise later down the road so that you can plan accordingly. In the case in this post, while the court did not ultimately affirm the imposition of an adverse jury instruction for spoliation of evidence, it did find a duty to preserve existed based not only on the parties’ contract, but on evidence the party in question had promised to preserve such evidence. By contrast, the insurers failed to demonstrate that same party owed them a duty to preserve. 

  • You’re Gonna Need A Bigger Boat: Data Management and E Discovery Strategy

    “You’re gonna need a bigger boat.” 

    This iconic line was uttered by Chief Brody in the 1975 blockbuster film Jaws when he first saw the massive size of the shark they were trying to catch. At that moment, Brody realized they were in completely over their heads, and the boat they had was not big enough to accomplish their task. While Quint’s Orca fishing boat and his traditional methods were capable of handling previous assignments, they were not going to be enough to take on the enormous shark they were chasing. 

    For better or worse, the digital environment we live in has resulted in an explosion in the number of documents and amount of information created and used by companies in their daily operations. A mid-sized company’s internal emails alone can run into the tens of thousands a day, and that is before factoring in reports, meeting minutes, studies, presentations, and other business documents. Adding in external emails and related attachments, you are looking at millions of documents a year. Because of this increased volume of data, companies dealing with potential litigation must adjust accordingly. 

    Like Brody, they need a bigger boat. An effective e-discovery strategy can provide companies with a bigger boat capable of handling even the most massive litigation matters.

  • Now You See Me, Now You Don’t: Ephemeral Messaging Challenges

    The emergence of ephemeral messaging applications to communicate with friends, family, and coworkers quickly, securely, and effortlessly has boomed over the past decade. In that time, users of ephemeral messaging apps have risen significantly, from millions to billions of active users! Ephemeral messaging is an integral and evolving part of both individual and company communications with advantages and challenges impacting companies and the legal industry. Companies must consider the ramifications of their employees' use of ephemeral messaging and adopt policies and procedures to best protect themselves and comply with requirements relating to litigation and regulation. Courts have already begun addressing the failure to preserve relevant ephemeral messages and have been issuing sanctions in a myriad of legal challenges. Ephemeral messaging is here to stay, and companies, courts, and attorneys must understand and adapt to evolve with this emerging technology.