Spoliation Risks of Legal Hold Methods

Digital data has presented new and unique problems for today’s litigants. Data is easy to create, and so is created in prodigious quantities, and easy to manipulate, requiring cautious protocols for management. The 3 primary risks a potential litigant must manage are:

  1. Finding and providing data to satisfy the court
  2. Preventing good actors from unintentionally damaging the data
  3. Protecting data from deliberate modification by bad actors

Finding and tracking relevant data is challenging because of the great volume of information, and so this is an excellent role for a software solution. Several developers have produced software that either include this function as part of broader information governance or a specific solution for Early Case Assessment (ECA).

Communication with personnel about what information is being held should be done early, clearly, and repeatedly. From regular backup deletion to technicians not knowing why that locker of computers hadn’t been wiped yet, companies have lost much data to unintended destruction. Be sure to give custodians clear responsibilities and reiterate them for as long as the hold stands.

Protecting data from bad actors is currently being done in several software-based ways. We highlight this risk as the weak link in current legal hold methods because of their software-only implementation. A software-only implementation cannot be protected from the administrators who manage and govern it.

The first method used, and apparently most common, is Access Control Lists (ACLs); the supposition that “even a database admin would not be able to alter the stored logs.” Unfortunately ACLs are active only when the software is running. For example: MySQL implements limits in what users can change in a database; however, it cannot protect its data files as they rest on the hard drive. Modifying these files directly is possible and of trivial security difficulty for a system administrator, though of potential technical difficulty. Alternatively, if the user can start MySQL on the host computer they can simply use the --skip-grant-tables option and have root access; a technique used to reset a lost password.

The next approach is encryption or digital signatures, themselves a form of encryption. When properly implemented, encryption is an extremely effective way to preserve secrets and protect data from modification. Because cryptography scrambles data into something incomprehensible, it is not possible to make specific modifications for nefarious ends. Unfortunately, this still does not work in a software-only implementation because the key needed to decrypt the data must be available to the software and is therefore necessarily accessible to the administrator.

Finally, we arrive at the best approach we found currently used in legal hold systems: cryptographic hash values for tamper-detection. These hash values allow even the slightest changes to be detected and require no keys to be kept secret. However, when used alone they too are ineffective. The hash values must be stored by the software system and are not themselves protected except by the aforementioned methods, so nothing prevents the administrator from simply recalculating the new hash value after modifying the document of interest. Some solutions use a trusted third-party to protect these hash values.

Businesses trust their system administrators to protect their interests. They must because of the incredible power they give them over the systems that allow them to do business. Should a business assume that a court, or opposing counsel, will trust their system administrators in the same measure? Or should they get auditable, third-party witnessed proof that their records have not been altered?

Please share your thoughts:

Posted by monta? anten Skwierzyna on
Schludny blog! Czy Twój motyw robi?e? na zamówienie lub mo?na go pobra? gdzie? Motyw?
monta? anten Skwierzyna http://montazantengorzow.blox.pl/2014/08/Montaz-anten-Gorzow.html
Posted by JazonKeR on
viagra pills canada subscriptions
http://viagra-withoutdoctorprescriptions.org - viagra without a doctor prescription
viagra 20mg composizione
viagra without prescription
- viagra 5 mg coupon the team
viagra compatibility with other medication
Posted by LazryMag on
http://cialiswithoutadoctorsprescription.org - cialis without doctor prescription
cialis rbook.cgi
cialis without a doctor prescription usa
- can i get cialis in saudi arabia
fake cialis
Posted by ZilliamToobe on
no prescription generic cialis
http://cialis-withoutdoctorsprescriptions.org - cialis without a doctor's prescription
cialis from canada with a prescription topics
cialis without prescription
- cialis information levitra biography
cialis 20mg coupons posts
Posted by KennethLiant on
????????? ??????? ???????? ?????? ????????? http://centr-vt.ru/index.php?page-id=18943 ?????? ? ?????????? ?? ???? ?? ?????? ??????? ????????????
Posted by Norzanbub on
what is cialis, uk
http://pharmshop-online.com - generic cialis cialis faq
generic cialis - cialis 5mg dosage forum rules
cialis pills cheap help
Posted by Edzinfoots on
cialis 10 mg 4 tablet delete all board cookies
http://cialis-walmart.org - cialis over the counter at walmart
cialis generic date who is online
generic cialis at walmart
- cialis price with insurance
cialis buy online no prescription guests
Posted by Delmezdor on
viagra 20 mg 8 table i forgot my password
http://viagrawithoutadoctorsprescriptions.org - viagra without doctor prescription
viagra for women blogs positive 1
viagra without a doctor prescription
- viagra viagra cheapest
viagra 20mg dosage topics
Posted by Gilberzgal on
over counter levitra
http://levitra20mg-usa.org - levitra 20 mg
levitra facts
levitra 20mg
- levitra 20 mg 4 tablet users browsing this forum
online apotheke levitra levitra levitra
Posted by Juztinhug on
poppers levitra and meth
http://levitra20mg-online.org - levitra 20 mg
levitra with levitra
levitra 20 mg
- levitra pills yim
Posted by SouccugPlult on
chce schudnac 4kg eft odchudzanie chomikuj mapquest driving directions tabletki na odchudzanie zmniejszajace apetyt Odchudzanie Suwałki odchudzanie orbitrek jak schudnąć 50 kg w pół roku buy facebook likes
Posted by DawizNok on
viagra dosages
http://viagra-withoutadoctorsprescriptions.org - viagra without a doctor prescription
viagra u.k.
viagra without a doctor prescription
- how much viagra should i take each time
viagra 20mg pills search
Posted by EdgazSkisy on
levitra cost comparison last active
http://levitra20mg-us.org - generic levitra online
levitra 20 mg 8 table login
generic levitra
- levitra generic canada display topics from previous
canadian pharmacy levitra professional occupation
Posted by Jamizepsype on
cialis tadalafil 20mg uk guestbook.pl
http://cialiswithoutdoctorsprescription.org - cialis without a doctor's prescription
buy cialis online total members
cialis without a doctor's prescription
- levitra vs cialis drugs gstbk_add.php?sid=
cialis 5mg canada announcements
Posted by udowidajefe on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by acumeyejo on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by apoqikult on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by qozfogex on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by ixidejixur on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by akuvarudaz on
http://usa-onlineprednisone.net/ - usa-onlineprednisone.net.ankor salbutamol-ventolin-buy.net.ankor http://online-viagracanada.net/
Posted by Denzisurild on
does viagra work more than once bbs.cgi?mode=
http://viagra-withoutdoctorsprescription.net - viagra without a doctor prescription usa
viagra uk pharmacy
viagra no prescription
- acheter viagra
can i split viagra tablets
Posted by massage lyon 4 on
Le lendemain je m'en fus a Perigueux acheter quelques petites affaires pour elle,
comme une bague en or et un anneau de mariage, une chaine de cou avec un coeur,
des rubans, de la dentelle, un chale, des bas fins et quelques petits affiquets. http://www.sophiechassat.com
Posted by ThozasDiume on
low price on cialis
http://pharmashop-online.com - generic cialis online
cialis 10mg name
generic cialis online
- cialis suppliers email e-mail
non prescription generic cialis
Posted by spa massage lyon on
Pour terminer cet apercu general du caractere philosophique de la mecanique rationnelle,
il ne nous reste plus maintenant qu'a considerer sommairement les divisions principales de cette science, les divisions
secondaires devant etre envisagees dans les lecons suivantes. http://www.sophiechassat.com
Posted by Melaniestive on
- Order Delivery Lasix Overnight Prescription. Benadryl Ointment Installing Testosterone Cream Natural And Synthetic Sources Of Aspirin White Willow Tree Tylenol News . Tylenol Banned Pain Reliever Can Synthroid Cause Drug Interactions . No Prescription Furazolidone Generic Free Shipping On Zoloft Zantac Pregnancy Safe Normal Treatment For Prozac Infant Acetaminophen Injection And Doxycycline Acute Bacterial Sinusitis
http://gcci.gy/forums/topic/symbicort-online-fast-delivery-no-prescription-buy-symbicort-online-australia - http://gcci.gy/forums/topic/symbicort-online-fast-delivery-no-prescription-buy-symbicort-online-australia/ http://www.warawmilk.com/threads/buy-overnight-celexa-no-prescription-buy-celexa-all-credit-cards-accepted.547146 - http://www.warawmilk.com/threads/buy-overnight-celexa-no-prescription-buy-celexa-all-credit-cards-accepted.547146/ http://expd.uw.edu/pipeline/forums/topic/cheap-viani-usa-buy-generic-viani-no-prescription-fast-delivery - http://expd.uw.edu/pipeline/forums/topic/cheap-viani-usa-buy-generic-viani-no-prescription-fast-delivery/ No Estare Alli Iiona How Long Cane I Take Erythromycin Nasal Spray Allergy Runny Nose Sneezing http://www.curlynikkiforums.com/forum/naturally-curly-hair/general/1707254-etoposide-online-pharmacy-mastercard-etoposide-no-prescription-fedex-overnight - Etoposide no prescription fedex overnight, Etoposide Online Pharmacy Mastercard http://unemployedworkersunion.com/forums/topic/order-dispermox-all-creditcard-accepted-buy-dispermox-online-no-prescription-express-courier-delivery - http://unemployedworkersunion.com/forums/topic/order-dispermox-all-creditcard-accepted-buy-dispermox-online-no-prescription-express-courier-delivery/ https://duckline.org/thread-236036.html - Antiox No Prescription Overnight, Antiox FedEx. Pepcid Ac In Canada
Allegra Prolonged Use
Posted by Vincven on
Hello. And Bye.
Posted by TrenzJab on
viagra gallery
http://viagra-withoutadoctor.com - viagra without a doctor prescription
viagra brand
viagra without a doctor prescription
- cheapest viagra, viagra and levitra
viagra lowest prices internet
Posted by ZatrickBut on
buy cialis online
http://cialiswithoutadoctor.org - cialis without a doctors prescription
cialis sales uk
cialis without doctor prescription
- cialis dosage for bph register
cialis 5mg dosage total posts
Leave a Reply

(Your email will not be publicly displayed.)

Please type the letters and numbers shown in the image.Captcha CodeClick the image to see another captcha.