SlideShare una empresa de Scribd logo
1 de 18
Descargar para leer sin conexión
WHITE PAPER




                           The Impact of the New FRCP
                          Amendments on Your Business
SPON                                             An Osterman Research White Paper
                                                                         Published January 2007

                                                                                 SPONSORED BY
        sponsored by
          SPON




                 sponsored by
                                                                                 Osterman Research, Inc.
                                               P.O. Box 1058 • Black Diamond, Washington • 98010-1058 • USA
                                 Tel: +1 253 630 5839 • Fax: +1 253 458 0934 • info@ostermanresearch.com
                                                        www.ostermanresearch.com • twitter.com/mosterman
The Impact of the New FRCP Amendments on Your Business


                             Why This White Paper Will be Worth Your Time
                             The newly adopted amendments to the Federal Rules of
                             Civil Procedure (FRCP) will have a major impact on the way
                             that organizations manage electronic data. However, an
                             Osterman Research survey conducted in December 2006
                             found that more than one-half of organizations do not
                             understand the new rules well enough to understand the
                             impact that they will have on their data retention practices,
                             while only one in five organizations does not anticipate any
                             sort of change in their corporate behavior in response to the
                             changes. Further, another survey found that only seven
                             percent of corporate counsel attorneys rated their
                             companies as prepared for the new amendments, while
The newly
                             more than one-half were not even aware that the new
adopted
                             amendments were to go into effect on December 1, 20061.
amendments to
the Federal
                             The next several months will present significant challenges to
Rules of Civil
                             organizations of all sizes on several levels: corporate legal
Procedure
                             counsel will need to learn what impact the FRCP changes
(FRCP) will
                             will have on their organizations, IT managers will wrestle with
have a major
                             the potentially significant investments in technology that will
impact on the
                             be required to adequately preserve electronic data, and
way that
                             senior managers will need to evaluate and improve their
organizations
                             corporate governance policies and procedures to meet the
manage
                             new requirements.
electronic
data.
                             This white paper focuses on the new FRCP amendments and
                             the impact that they will have on organizations of all sizes.
                             This document was authored by:

                             •    John A. Heer
                                  An attorney that focuses on e-discovery in complex civil
                                  litigation and environmental matters. Mr. Heer is a
                                  respected speaker and author on topics such as
                                  electronic discovery and evidence, litigation tactics and
                                  environmental law.

                             •    Michael D. Osterman
                                  Founder and principal of Osterman Research, Inc.




                             1
                                 Survey conducted by LexisNexis Applied Discovery during the
                                 Association of Corporate Counsel 2006 Annual Meeting in
                                 October 2006.

      © 2007 Osterman Research, Inc.                                                           Page 1
The Impact of the New FRCP Amendments on Your Business


                               What are the Federal Rules of Civil Procedure?
                               The FRCP are a body of rules focused on governing court
                               procedures for managing civil suits in the United States
                               district courts. While the United States Supreme Court is
                               responsible for promulgating the FRCP, the United States
                               Congress must approve these rules and any changes made
                               to them.

A number of                    A number of important and substantive revisions to the FRCP
important and                  went into effect on December 1, 2006. These changes
substantive                    represented several years of debate at various levels and
revisions to the
                               will have a significant impact on electronic discovery and
FRCP went into
effect on
                               the management of electronic data within organizations
December 1,                    that operate in the United States. In a nutshell, the changes
2006. These                    to the FRCP require organizations to manage their data in
changes                        such a way that this data can be produced in a timely and
represented                    complete manner when necessary, such as during legal
several years of               discovery proceedings.
debate at
various levels.                New Amendments to the FRCP
                               The amendments to Rules 16, 26, 33, 34, 37, 45 and revisions
                               to Form 35 are aimed at electronically stored information
                               (ESI). The amendments attempt to deal with the important
                               issues presented by ESI:

                               •   ESI is normally stored in much greater volume than are
                                   hard copy documents.

                               •   ESI is dynamic, in many cases modified simply by turning
                                   a computer on and off.
The changes
reflect the reality
                               •   ESI can be incomprehensible when separated from the
that discovery of
email and other
                                   systems that created it.
ESI is now a
routine, yet                   •   ESI contains non-apparent information, or metadata,
critical, aspect of                that describes the context of the information and
every litigated                    provides other useful and important information.
case.
                               The changes reflect the reality that discovery of email and
                               other ESI is now a routine, yet critical, aspect of every
                               litigated case. First, the amendments treat ESI differently.
                               Second, they require early discussion of and attention to
                               electronic discovery. Third, they address inadvertent
                               production of privileged or protected materials. Fourth, they
                               encourage a two-tiered approach to discovery – deal with
                               reasonably accessible information and then later with
                               inaccessible data. Finally, they provide a safe harbor from
                               sanctions by imposing a good faith requirement.

        © 2007 Osterman Research, Inc.                                                  Page 2
The Impact of the New FRCP Amendments on Your Business


                               Who is Most Impacted by the Changes to the FRCP?
                               Unlike many data retention requirements in specific
                               industries, such as those imposed upon broker-dealers by the
                               Securities and Exchange Commission (SEC) and the National
                               Association of Securities Dealers (NASD), the FRCP apply to
                               virtually all organizations in all industries. If an organization
                               can have a civil lawsuit filed against it, then the FRCP should
                               figure prominently in that organization’s data management
                               strategy.

                               Obviously, all cases brought after December 1, 2006 will be
                               subject to the new FRCP amendments. However, the
                               Supreme Court has determined that cases filed prior to this
                               date could be subject to the FRCP if a court determines that
The Supreme                    undue delay or burden to the parties involved2 will not be
Court has                      imposed by adherence to the new rules.
determined that
cases filed prior
to this date could
be subject to the              Key Rules Within the FRCP
FRCP if a court
determines that                Civil Rule 16
undue delay or                 Pretrial Conferences; Scheduling; Management
burden to the                  The amendments establish a process for the parties and
parties involved               court to address early issues pertaining to the disclosure and
will not be
                               discovery of electronic information. They are designed to
imposed by
                               alert the court and litigants to the possible need to address
adherence to the
new rules.                     handling of ESI early in litigation if such discovery is expected
                               to occur. Rule 16(b) is amended to invite the court to
                               address disclosure or discovery of ESI in the Rule 16
                               scheduling order and gives the court discretion to enter an
                               order adopting any agreements the parties reach for
                               asserting claims of privilege or protection after inadvertent
                               production in discovery.

                               Civil Rule 26
                               General Provisions Governing Discovery; Duty of Disclosure

                               •     Rule 26(a)(1)
                                     The amendment clarifies a party’s duty to include ESI in
                                     its initial disclosures by substituting the word “ESI” for
                                     “data compilations.”

                               •     Rule 26(b)(2)
                                     The amendment clarifies the obligations of a responding
                                     party to provide discovery of ESI that is not reasonably
                                     accessible (deleted information, information kept on

                               2
                                   http://www.supremecourtus.gov/orders/courtorders/frcv06p.pdf

        © 2007 Osterman Research, Inc.                                                            Page 3
The Impact of the New FRCP Amendments on Your Business


                                   some backup tape systems, and legacy data from
                                   systems no longer in use). The amendment requires the
                                   responding party to identify the sources of potentially
                                   responsive information that it has not searched or
                                   produced because of the costs and burdens of
                                   accessing the information. If the requesting party moves
                                   for production of such information, the responding party
                                   has the burden of showing the information is not
                                   reasonably accessible. If the responding party makes
                                   this showing, a court may order discovery for good cause
                                   and may impose conditions. Any organization should first
                                   obtain and examine the information that can be
Any organization
                                   provided from easily accessed sources and then
should first obtain
and examine the                    determine whether it is necessary to search difficult-to-
information that                   access sources (a court can order a sampling technique
can be provided                    to determine the usefulness of searching the difficult-to-
from easily                        access sources). A party might be obligated to preserve
accessed                           information stored on sources it has identified as not
sources and then                   reasonably accessible.
determine
whether it is                  •   Rule 26(b)(5)
necessary to
                                   The amendment provides a procedure for asserting
search difficult-
                                   privilege after production that is parallel to similar
to-access
sources. A party                   changes in Rules 16 and 26(f). Upon notification to the
might be                           recipient of the producing party’s post-production
obligated to                       privilege claim, the recipient must return, sequester or
preserve                           destroy the information until the claim is resolved.
information
stored on                      •   Rule 26(f)
sources it has                     The amendment requires the parties’ conference to
identified as not                  include discussion of any issues relating to disclosure or
reasonably
                                   discovery of ESI, including form of production,
accessible.
                                   preservation, and privilege/protection issues. The
                                   amendments encourage parties to enter into voluntary
                                   agreements under which the inadvertent production of
                                   privileged or protected materials would not result in a
                                   waiver. Any such agreement should probably include an
                                   “attorney’s eyes only” provision, no waiver of trade
                                   secret protection, penalties for distribution of the
                                   material, including by e-discovery providers, and
                                   provision for certified and validated destruction of
                                   privileged data or data not used.

                               Civil Rule 33
                               Interrogatories to Parties
                               The amendment expressly provides that an answer to an
                               interrogatory involving review of business records should
                               involve a search of ESI.


        © 2007 Osterman Research, Inc.                                                  Page 4
The Impact of the New FRCP Amendments on Your Business


                               Civil Rule 34
                               Production of Documents and Things and Entry Upon Land for
                               Inspection and Other Purposes
                               ESI is explicitly recognized as a category that is distinct from
                               “documents” and “things.” Rule 34 also authorizes the
                               requesting party to specify the form of production. Absent
                               court order, party agreement or a request for a specific form
                               of production, a party may produce responsive ESI in the
                               form ordinarily maintained or in a reasonably usable form.

                               Rule 34 also includes the notion of sampling data from an
                               entire data set to determine if additional discovery is
                               warranted. A key provision of Rule 34 is the production of
The amendment                  data in “a form or forms in which it is ordinarily maintained or
creates a "safe                in a form or forms that are reasonably usable.”
harbor" that
protects a party
                               Civil Rule 37
from sanctions
                               Failure to Make Disclosure or Cooperate in Discovery;
for failing to
provide                        Sanctions
electronically                 The amendment creates a "safe harbor" that protects a
stored                         party from sanctions for failing to provide electronically
information lost               stored information lost because of the routine, good-faith
because of the                 operation of the party's computer system. Rule 37(f)
routine, good-                 provides limited protection against sanctions for a party’s
faith operation of             failure to provide ESI in discovery if the ESI sought in
the party's                    discovery is lost as a result of routine operation of an
computer
                               electronic storage system, as long as the operation is in
system. The
                               good faith. Good faith likely requires that a party intervene
problem with this
rule, however, is              to modify or suspend certain features of the routine
that it is subject             operation of computer systems to prevent loss of information
to a wide variety              if the information is subject to a preservation obligation (i.e.,
of interpretations.            the party must initiate a “litigation hold”).

                               The problem with this rule, however, is that it is subject to a
                               wide variety of interpretations. For example, if a defendant
                               considers a failure to produce ESI in a particular case the
                               result of a “good faith” operation of an electronic
                               information system, such as erasing backup tapes on a
                               routine basis, a court may not agree and may find the
                               defendant liable for spoliation of data.

                               Civil Rule 45
                               Subpoena
                               These are technical amendments that conform to other
                               proposed amendments regarding discovery of electronically
                               stored information by adding ESI to the scope of information
                               that a person receiving the subpoena must search.



        © 2007 Osterman Research, Inc.                                                    Page 5
The Impact of the New FRCP Amendments on Your Business


                              Subpoena may specify the form in which ESI is to be
                              produced.

                              Form 35
                              Report of Parties' Planning Meeting
                              This is a technical revision reflecting the amendment to Civil
                              Rule 26, amended to add the parties’ proposals regarding
                              disclosure or discovery of ESI to the list of topics to be
                              included in the report to the court.



                              Important Considerations Moving Forward
Most backups                  Almost all organizations perform regular backups of their
are retained                  email system, file servers and other data repositories. While
typically for no              many organizations believe that these backups constitute
more than 60 to
                              an “archive” of their business information, this is not the case.
90 days as
subsequent
                              A traditional backup takes periodic “snapshots” of active
backups on tape               data so that deleted or destroyed records can be
or disk are                   recovered, such as after the failure of a server’s hard disk or
recycled or                   an application upgrade gone awry. Most backups are
overwritten.                  retained typically for no more than 60 to 90 days as
While backups                 subsequent backups on tape or disk are recycled or
can be                        overwritten. While backups can be preserved indefinitely in
preserved                     order to preserve business records, there are three
indefinitely in               fundamental problems with using backups as an archive:
order to preserve
business records,
there are three
                              •   Backups constitute “raw” content and lack any sort of
fundamental                       indexing. If information, such as in response to a
problems with                     discovery order, must be produced from a set of backup
using backups as                  tapes, the process is typically time-consuming, highly
an archive.                       disruptive to IT staff and expensive, particularly if third-
                                  party forensics firms must be used.

                              •   The integrity of backup tapes is not guaranteed. There
                                  have been many cases in which older tapes were not
                                  readable due to data corruption or physical corruption
                                  of the media itself.

                              •   Because backups capture a snapshot of data,
                                  information generated and deleted between backups
                                  will not be captured. For example, if an organization is
                                  required to preserve communications between senior
                                  management and external auditors, an email sent from
                                  the CEO to the external firm at 10:00am and then
                                  deleted from the “Sent” folder at 2:00pm on the same
                                  day will never be captured in the nightly backup.




       © 2007 Osterman Research, Inc.                                                   Page 6
The Impact of the New FRCP Amendments on Your Business


                               While backups are a critical and necessary component of
                               an organization’s data management strategy, they are not
                               a substitute for an archive. In short, a backup is desiged to
                               preserve data for short periods in support of the physical
                               infrastructure that an organization maintains, while an
                               archive is designed to preserve information on a long term
                               basis in support of more strategic corporate objectives.

                               The Benefits of Archiving
                               As noted above, an archive that is populated based on a
                               pre-determined set of corporate policies offers important
                               benefits:

A properly                     •   Ease of capture
configured and                     Information can be captured from a variety of data
managed                            sources, indexed and placed into an archive without any
archiving system
                                   intervention by IT staff or end users. Further, if a discovery
makes
                                   hold order is imposed for a particular set of users, for
production of
data in response                   example, a new policy can be created instead that will
to an e-                           address this order automatically, minimizing the potential
discovery order                    for spoliation of evidence.
far simpler than if
backup tapes                   •   Ease of production
must be                            A properly configured and managed archiving system
searched for the                   makes production of data in response to an e-discovery
same                               order far simpler than if backup tapes must be searched
information.
                                   for the same information. For example, in the case of
                                   Bank of America Corporation vs. SR International Business
                                   Insurance Company [2006 WL 3093174 (N.C. Super. Nov.
                                   1, 2006), the defendants requested that a non-party to
                                   the case, Marsh, Inc., produce deleted emails from 400
                                   backup tapes. Kroll Ontrack estimated that the cost to
                                   produce these emails could have been up to $1.4 million,
                                   or an average of $3,500 per tape. While Marsh was not
                                   required to produce the deleted emails in this case, the
                                   example illustrates the potentially enormous cost of
                                   retrieving discoverable content from backups.

                               Other Benefits of Archiving
                               While archiving offers very clear benefits to organizations
                               that must address their data governance practices in the
                               context of FRCP compliance, archiving also provides a
                               number of other benefits:

                               •   Regulatory compliance
                                   As noted above, there are a wide variety of regulations
                                   that impose data retention and management
                                   requirements on organizations operating in the United


        © 2007 Osterman Research, Inc.                                                    Page 7
The Impact of the New FRCP Amendments on Your Business


                                  States. These requirements, which literally number in the
                                  thousands, are quite diverse, ranging from the Americans
                                  with Disabilities Act to the Toxic Substances Control Act.
                                  While most of these regulations’ data retention provisions
                                  do not specifically call out ESI, email, instant messages or
                                  other specific forms of data, the growing quantity of ESI
                                  dictates that business records and other information
                                  should be preserved in their native format as a best
                                  practice. In the case of instant message, this should
                                  include attachments sent as file transfers thru IM
                                  networks. The ability to archive both instant message
                                  text and the content of IM-borne attachments is
                                  important for e-discovery purposes.
This increased
use of email,                 •   Storage management and storage optimization
coupled with                      Email use is growing dramatically – Osterman Research
growing use of
                                  has found that email use by employees is growing at
attachments,
                                  about 20% annually. This increased use of email,
larger
attachments and                   coupled with growing use of attachments, larger
multimedia files                  attachments and multimedia files means that email
means that email                  storage is becoming a critical issue. Osterman Research
storage is                        has found that the growth in email storage is the leading
becoming a                        problem for email managers and constitutes more of a
critical issue.                   problem than spam.
Osterman
Research has                      Archives consist of largely static data – if that data is
found that the
                                  included as part of regular backup and restore, then
growth in email
                                  organizations are constantly backing up the same static
storage is the
leading problem                   data over and over, which represents a significant cost.
for email                         This approach necessitates continually buying larger
managers and                      servers and more storage over time.
constitutes more
of a problem                      An appropriately configured archiving system can
than spam.                        automatically offload data from email servers, resulting in
                                  better email server performance and shorter restoration
                                  periods after a server crash. Further, IT can continue to
                                  impose mailbox-size quotas on their users (which about
                                  60% of organizations do today). However, because data
                                  is automatically transferred from users’ mailboxes to an
                                  archive in many archiving systems, users experience
                                  what seems to be a mailbox of infinite size, eliminating
                                  the need to manually move data from the inbox to other
                                  repositories in order to stay within the quota limitation.

                                  It is also important to consider instant messaging in the
                                  context of storage management, since use of instant
                                  messaging systems will increase rapidly, growing from



       © 2007 Osterman Research, Inc.                                                   Page 8
The Impact of the New FRCP Amendments on Your Business


                                  one-third of all email users at present to near ubiquity by
                                  2009.

                              •   Knowledge management and data mining
                                  Three out of four email users in the workplace in a
                                  December 2006 Osterman Research survey reported that
                                  email is “extremely important” in helping them to do their
                                  work. This is due primarily to the fact that most of the
                                  information that employees produce is somehow tied up
                                  in email in the form of documents, contacts, email
                                  threads and other content. An archiving system allows
                                  an organization to preserve this information for long
                                  periods so that employees have access to it when
Most of the                       necessary.
information that
employees                     •   Other benefits
produce is
                                  An archiving system can also assist an organization with
somehow tied up
                                  recovering from a disaster by providing an off-site copy
in email in the
form of                           of current data, it can help in resolving disputes prior to
documents,                        legal action by preserving all necessary ESI and the
contacts, email                   context of this data, and it can help an organization to
threads and                       assess the viability of its legal position at the
other content.                    commencement of a legal action, among other
An archiving                      benefits.
system allows an
organization to               Understanding Media Choices
preserve this
                              Another key consideration for satisfying FRCP, compliance,
information for
                              and other data retention issues for on-premise data
long periods so
that employees                management is the choice of hardware, software, and
have access to it             media on which to archive data on a long term basis.
when necessary.               Considerations should include random access to data, long
                              term media longevity, data permanence and authenticity,
                              recoverability and cost.

                              RAID, tape, WORM optical, DVD and other technologies can
                              all be used for long-term archival storage, but there are
                              trade-offs to consider. For example, specially designed
                              archival storage products using RAID magnetic disk offer
                              excellent performance and high capacity. There are
                              several disk-based archiving products available in the
                              market today that provide functionality for the long-term
                              preservation of business records with content-aware or
                              content-addressed storage approaches. Special
                              consideration should be given to how data is protected long
                              term with these systems, since backup or disk-mirroring
                              technologies may not be sufficient to protect ESI over its
                              useful life. It is also important to note that these use
                              rewritable media with software-enabled WORM. Plus, not all


       © 2007 Osterman Research, Inc.                                                    Page 9
The Impact of the New FRCP Amendments on Your Business


                              of these solutions can be taken off-line for secure vaulting
                              and the TCO of a RAID archive system is higher than for
                              some other technologies.

                              By contrast, tape is removable – important for disaster
                              recovery – has extremely high capacity and offers fast
                              read/write streaming at an affordable price. However, tape
                              struggles as an archive medium because it lacks random
                              access performance for discovery. Like RAID, it is also
                              rewritable and requires special environmental conditions
                              and periodic refreshing if used for long-term data storage.

                              High-density optical media is a cost-effective approach that
                              combines low cost per bit, media-based WORM capabilities,
                              random access and very long media life. Optical also
                              eliminates the need to migrate data over the useful life of
                              the ESI via backward compatible support and a non-
                              invasive roadmap to future generations.

                              Today’s best practices often combine technologies such as
                              RAID disk, optical technologies, and tape to capitalize on
A key question                the strength of each and mitigate the risk of failure.
that also must be
addressed as                  Understanding Delivery Models
part of any data              Another important consideration is the delivery model for
governance                    managing data in support of FRCP and other requirements.
strategy is just              While most organizations currently opt for on-premise
how much                      solutions, using appliances or software installed on in-house
should be saved               servers, another viable option is to use a managed service
and what can
                              that will provide archiving capabilities without any
safely be
                              investments in hardware or software.
discarded.

                              The advantages of an on-premise approach are complete
                              control over the infrastructure used to deploy the data
                              management solution, the ability to re-use existing hardware
                              and lower costs than hosting in some cases. The
                              advantages of using managed services include rapid
                              deployment (particularly useful when hit with a discovery
                              hold order), minimizing IT involvement in the data
                              management process and lower costs than on-premise
                              solution in some environments.




       © 2007 Osterman Research, Inc.                                                  Page 10
The Impact of the New FRCP Amendments on Your Business


                                How Much Content Should You Save?
                                A key question that also must be addressed as part of any
                                data governance strategy is just how much should be saved
                                and what can safely be discarded.

                                One approach is to save as little as possible, preserving data
                                only as long as necessary to ensure that servers can be
                                restored after a failure. This approach is the least expensive
                                from an infrastructure perspective, since it minimizes storage
The best
approach to
                                costs, eliminates the cost of an archiving capability and
data retention is               minimizes IT’s involvement in managing information. Plus,
to implement a                  because it minimizes the storage of live data, servers can
balanced                        perform well and be recovered more quickly after a server
strategy that                   crash. However, this can be an expensive approach in the
leans toward                    long run, since it runs the risk of deleting information that
saving more                     must be preserved because of FRCP requirements,
rather than less.               regulatory obligations and the like. Also, because most users
This approach                   will keep information for long periods anyway, enforcement
includes
                                and litigation costs are higher, there is greater risk of running
establishing
specific policies
                                afoul of discovery hold orders and users will often oppose
around data                     strict deletion requirements.
governance,
regulatory                      At the other extreme is a policy of saving virtually everything
obligations and                 – some organizations will even save spam for the sake of
advice from                     completeness. The primary advantage of this approach is
legal counsel;                  that organizations run the least risk of deleting data
implementing                    accidentally, allowing them to satisfy regulatory
technologies that               requirements and discovery orders. The disadvantages of
will help to satisfy
                                this approach are much higher storage costs, greater
these policies;
and using the
                                difficulty in finding necessary data because of all the
right                           unecessary data that is also saved and saving “smoking
combination of                  guns” that a regulator or court would not have required an
nearline and                    organization to save.
secondary
storage most                    The best approach to data retention is to implement a
effectively.                    balanced strategy that leans toward saving more rather
                                than less. This approach includes establishing specific
                                policies around data governance that work best for an
                                organization based on FRCP guidelines, regulatory
                                obligations and advice from legal counsel; implementing
                                backup, archiving and other technologies that will help to
                                satisfy these policies; and using the right combination of
                                nearline and secondary storage most effectively.




         © 2007 Osterman Research, Inc.                                                   Page 11
The Impact of the New FRCP Amendments on Your Business


                               What Should Organizations Do?
                               So, based on these changes and existing case law, what
                               should an organization do in response to the new FRCP
                               amendments? Here is a summary of the key steps that any
                               organization should undertake:

                               •   Review and assess existing document retention policies
                                   and practices. It makes sense to evaluate these policies
                                   now rather than waiting for litigation.

                               •   Pay close attention to e-discovery issues from the earliest
                                   stages of litigation.

                               •   Learn what types of electronic data exist in the
For organizations                  organization and that might be needed very early in the
that were                          litigation process.
already aware of
e-discovery and
                               •   Investigate the amount and cost of preserving, restoring,
electronic data
retention issues                   processing and reviewing relevant electronic data.
before, the new
FRCP                           •   Assess the format of production that is appropriate for
amendments                         the organization and each case.
simply
incorporate                    •   Determine an appropriate protocol for privilege and
those issues into                  waiver claims.
the civil rules for
litigation.                    In short, the new amendments will place a greater focus on
However,
                               electronic discovery early in the litigation process; they will
organizations
that have not                  require the location, identification and categorization of ESI;
considered e-                  they will expand the scope of subpoenas in the context of
discovery and                  accessing ESI; and interrogatories that are focused on a
electronic data                review of business records can now specifically identify a
retention issues               search of ESI.
should start now.
                               For organizations that were already aware of e-discovery
                               and electronic data retention issues before, the new FRCP
                               amendments simply incorporate those issues into the civil
                               rules for litigation. However, organizations that have not
                               considered e-discovery and electronic data retention issues
                               (which Osterman Research has found is a sizable proportion
                               of organizations) should start now.

                               Focus on Data Governance
                               Regardless of an organization’s size or the industry in which it
                               operates, a comprehensive corporate governance plan
                               should be established that includes specific and detailed
                               policies focused on data retention and disposal, as well as
                               on other aspects of email, instant messaging content and

        © 2007 Osterman Research, Inc.                                                  Page 12
The Impact of the New FRCP Amendments on Your Business


                               electronic document management. Organizations must
                               understand the types of data that constitute business
                               records (and so must be preserved), how long and in what
                               form these records must be preserved, and when they can
                               safely be destroyed.

                               Although retention of email, instant messages and other
                               types of electronic documents is a necessary component of
                               normal backup and disaster recovery requirements, data
                               governance goes well beyond these requirements. Data
                               governance focuses on the entire set of demands for data
                               retention that are driven by regulatory compliance, legal
                               discovery considerations, log management, industry-specific
                               requirements and other demands.
In order to satisfy
the requirements               Although the FRCP changes apply primarily to e-discovery,
of the FRCP,                   data governance focuses on a much wider set of
organizations                  requirements for data retention, including regulations like
must implement                 Sarbanes-Oxley, the Gramm-Leach-Bliley Act, the Health
systems that can               Insurance Portability and Accountability Act (HIPAA), various
a) capture                     SEC requirements, and various requirements from the NASD,
information that
                               to name just a few of the many requirements that must be
must be
preserved, b)
                               satisfied depending on the industry in which an organization
store this                     participates.
information in a
such a way that                Implement Technologies That Can Help the Organization
its integrity can              Meet Corporate Governance Requirements
be maintained                  In order to satisfy the requirements of the FRCP, organizations
and c) produce                 must implement systems that can a) capture information
this information               that must be preserved, b) store this information in a such a
on demand in a                 way that its integrity can be maintained and c) produce this
cost-effective
                               information on demand in a cost-effective and timely
and timely
manner.
                               manner.

                               The most logical method for storing email, instant messages
                               and other types of ESI is an archiving system that can satisfy
                               all of these requirements. An appropriately configured
                               archiving system will capture business records and other
                               important content based on a pre-defined set of business
                               rules and policies, store this content in a secure repository
                               and provide robust search tools that will permit production
                               of the data on demand with as little disruption to IT staff and
                               others as possible.

                               Develop a Unified System
                               As a best practice for compliance with the new FRCP
                               amendments, organizations should develop a unified system
                               that spans archiving, backups, policies and overall media


        © 2007 Osterman Research, Inc.                                                  Page 13
The Impact of the New FRCP Amendments on Your Business


                       management. It is important to consider everything from
                       simple backups to complex archiving requirements as part
                       of a continuum of data governance practices that must be
                       managed cohesively. In short, all of the data that an
                       organization generates should be managed as part of
                       unified data management strategy that can address not
                       only FRCP requirements, but also regulatory obligations,
                       employee productivity issues, IT efficiency issues and other
                       requirements.



                       Summary
                       The new FRCP amendments are critically important for both
                       IT managers and business decision-makers to understand
                       and consider, since they raise the importance of data
                       governance practices to a new level. Instead of proper
                       data retention being simply a best practice for organizations
                       to follow, data retention is now a legal obligation that can
                       carry with it serious consequences if managed poorly. While
                       backup, archiving and other data retention capabilities are
                       an important component of a proper data management
                       strategy, organizations must adopt a holistic approach to
                       managing data, particularly the growing proportion of
                       electronically stored information that they manage.


                       About the Authors

                       John A. Heer
                       John A. Heer has counseled clients for more than 15 years in
                       a wide variety of complex civil litigation and environmental
                       matters. John is also a respected speaker and author on
                       topics such as electronic discovery and evidence, litigation
                       tactics, and environmental law. John’s recent presentations
                       and speaking engagements include:

                       •   “E-Discovery: Get Ready To Apply The New FRCP
                           Changes” at NBI Seminar in Cleveland in December 2006

                       •   “Discovery in Environmental Cases: Securing Documents
                           By Public Record Act and Electronic Discovery” at the
                           Ohio State Bar Association's Environmental Law Seminar
                           in April 2005

                       •   “Electronic Evidence and Discovery Issues” at the Florida
                           Bar Association's 2005 Health Law Institute in Orlando,



© 2007 Osterman Research, Inc.                                                  Page 14
The Impact of the New FRCP Amendments on Your Business


                           Florida in February, 2005

                       •   “Litigating in Cyberspace” in an American Health
                           Lawyers Association teleconference seminar in
                           September, 2003

                       •   ”Electronic Discovery Issues” at a Cleveland Bar
                           Association seminar in June 2003

                       •   “Capturing Key Evidence Through Electronic Discovery in
                           Ohio” at a NBI seminar in Cleveland, Ohio in March, 2003.

                       His article, “A Broad-Brush Look at Electronic Discovery Issues
                       When Advising Your Clients,” was featured in the February,
                       2004 American Health Lawyers Association Health Lawyers
                       News; the May 15, 2004 issue of The Lawyer's Brief and the
                       July 2004 issue of Corporate Counsel's Quarterly.

                       John received his B.A. from Indiana University and his J.D.
                       cum laude from Case Western Reserve University School of
                       Law. John is an Associate of the Environmental Law Institute
                       and a member of the American, Ohio State and Cleveland
                       Bar Associations.

                       Michael D. Osterman
                       Michael Osterman is the principal of Osterman Research,
                       Inc., founded in 2001. Since that time, the company has
                       become one of the leading analyst firms in the messaging
                       and collaboration space, providing research, analysis, white
                       papers and other services to companies like Microsoft,
                       America Online, Sun Microsystems, Yahoo!, Network
                       Appliance, Iron Mountain, Postini, Hewlett Packard and
                       many others.

                       Michael is a frequent speaker at industry and vendor-
                       sponsored events on the topics of archiving, instant
                       messaging, presence and other messaging-focused issues.
                       He is also the author of a twice weekly column on unified
                       communications issues for Network World Fusion.




© 2007 Osterman Research, Inc.                                                  Page 15
The Impact of the New FRCP Amendments on Your Business


                                White Paper Sponsor

                                Actiance enables the safe and productive use of Unified
                                Communications, collaboration and Web 2.0, including
                                blogs and social networking sites. Formerly FaceTime
Actiance, Inc.                  Communications, Actiance’s award-winning platforms are
1301 Shoreway                   used by 9 of the top 10 US banks and more than 1600
Suite 275                       organizations globally for the security, management and
Belmont, CA 94002               compliance of unified communications, Web 2.0 and social
USA                             media channels. Actiance supports all leading social
+1 888 349 3223                 networks, unified communications providers and IM
                                platforms, including Facebook, LinkedIn, Twitter AOL,
400 Thames Valley Park Dr
                                Google, Yahoo!, Skype, Microsoft, IBM and Cisco.
Thames Valley Park
Reading, RG6 1PT
United Kingdom                  For more information about Actiance’s award winning
+44 (0) 1189 637 469            platform, please visit www.actiance.com.

www.actiance.com                Vantage
                                Vantage is the de facto platform for granular security, policy
                                controls and compliance features for real time and unified
                                communications – providing management for the widest
                                variety of UC and real time communications platforms;
                                including Microsoft OCS and IBM Lotus Sametime, public
                                instant messaging platforms such as Windows Live and
                                Skype, Web conferencing and industry-focused networks like
                                Reuters, Bloomberg, and YellowJacket.

                                Unifed Security Gateway (USG)
                                Actiance’s Unified Security Gateway complements
                                Vantage, by stopping the use of other applications that will
                                bypass corporate security policies and introduce additional
                                risk to the organization. USG provides granular control of
                                Web 2.0 applications, monitoring, securing and recording
                                content to reduce outbound data leaks and enable
                                compliance with industry regulations, legal discovery
                                requirements, and corporate policy standards. Actiance’s
                                USG also logs social media conversations in compliance with
                                the strictest requirements for record-keeping and tamper-
                                proof data auditing for customers in highly regulated
                                industries such as financial services, insurance, energy,
                                education and health care.

                                Insight
                                Actiance Insight software interfaces with Actiance’s USG
                                and Vantage to provide enterprise data visualization of user
                                behavior, browsing patterns, and Web application usage
                                trends. Ideal for managing enterprise networks which
                                encompass multiple locations, the dynamic, multi-

         © 2007 Osterman Research, Inc.                                                  Page 16
The Impact of the New FRCP Amendments on Your Business


                       dimensional graphical interface provided by Actiance
                       Insight provides complete visibility into Internet and real-time
                       application usage that has not previously been possible with
                       legacy reporting applications for Web security and data
                       compliance.

                       Socialite
                       Socialite is Actiance’s security, management, and
                       compliance solution for Social Networks, providing granular
                       control of Facebook, LinkedIn, and Twitter. Socialite not only
                       controls access to nearly a hundred different features across
                       social networks, but can also moderate, manage, and
                       archive any social media traffic routed through the solution,
                       which can either be on-premise or hosted.




                       © 2007 Osterman Research, Inc. All rights reserved.

                       No part of this document may be reproduced in any form by any means, nor may
                       it be distributed without the permission of Osterman Research, Inc., nor may it be
                       resold by any entity other than Osterman Research, Inc., without prior written
                       authorization of Osterman Research, Inc.

                       THIS DOCUMENT IS PROVIDED “AS IS”. ALL EXPRESS OR IMPLIED REPRESENTATIONS,
                       CONDITIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OR FITNESS
                       FOR A PARTICULAR PURPOSE, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
                       DISCLAIMERS ARE DETERMINED TO BE ILLEGAL.



© 2007 Osterman Research, Inc.                                                                   Page 17

Más contenido relacionado

Similar a The Impact of the New FRCP Amendments on Your Business

Best Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsBest Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsOsterman Research, Inc.
 
115 By Robert Smallwood with Randy Kahn,Esq. , and .docx
115  By Robert Smallwood with Randy   Kahn,Esq.   , and .docx115  By Robert Smallwood with Randy   Kahn,Esq.   , and .docx
115 By Robert Smallwood with Randy Kahn,Esq. , and .docxdrennanmicah
 
Translating Geek To Attorneys It Security
Translating Geek To Attorneys It SecurityTranslating Geek To Attorneys It Security
Translating Geek To Attorneys It SecurityCTIN
 
Using Email, File, Social Media and Mobile Archiving to Grow Your Business
Using Email, File, Social Media and Mobile Archiving to Grow Your BusinessUsing Email, File, Social Media and Mobile Archiving to Grow Your Business
Using Email, File, Social Media and Mobile Archiving to Grow Your BusinessOsterman Research, Inc.
 
The impact of regulatory compliance on DBA(latest)
The impact of regulatory compliance on DBA(latest)The impact of regulatory compliance on DBA(latest)
The impact of regulatory compliance on DBA(latest)Craig Mullins
 
NSTC Identity Management Task Force Report Executive Summary
NSTC Identity Management Task Force Report Executive SummaryNSTC Identity Management Task Force Report Executive Summary
NSTC Identity Management Task Force Report Executive SummaryDuane Blackburn
 
Governing the Chaos
Governing the ChaosGoverning the Chaos
Governing the ChaosJohn Hansen
 
Running head Assignment 2.3 Justification Report-Part 31PROBL.docx
Running head Assignment 2.3 Justification Report-Part 31PROBL.docxRunning head Assignment 2.3 Justification Report-Part 31PROBL.docx
Running head Assignment 2.3 Justification Report-Part 31PROBL.docxsusanschei
 
Governance & Ediscovery
Governance & EdiscoveryGovernance & Ediscovery
Governance & EdiscoveryLouise Spiteri
 
2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery2 7-2013-big data and e-discovery
2 7-2013-big data and e-discoveryExterro
 
Savvy Litigator Winter 2009
Savvy Litigator Winter 2009Savvy Litigator Winter 2009
Savvy Litigator Winter 2009Aubrey Owens
 
ERP Systems - The Next Legacy Dinosaur
ERP Systems - The Next Legacy DinosaurERP Systems - The Next Legacy Dinosaur
ERP Systems - The Next Legacy Dinosaureprentise
 
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...EMC
 

Similar a The Impact of the New FRCP Amendments on Your Business (20)

Best Practices for Managing Archive Migrations
Best Practices for Managing Archive MigrationsBest Practices for Managing Archive Migrations
Best Practices for Managing Archive Migrations
 
115 By Robert Smallwood with Randy Kahn,Esq. , and .docx
115  By Robert Smallwood with Randy   Kahn,Esq.   , and .docx115  By Robert Smallwood with Randy   Kahn,Esq.   , and .docx
115 By Robert Smallwood with Randy Kahn,Esq. , and .docx
 
Osterman report
Osterman reportOsterman report
Osterman report
 
Osterman report
Osterman reportOsterman report
Osterman report
 
Machine Intelligence and the Legal Profession - John O. McGinnis - June 2016 ...
Machine Intelligence and the Legal Profession - John O. McGinnis - June 2016 ...Machine Intelligence and the Legal Profession - John O. McGinnis - June 2016 ...
Machine Intelligence and the Legal Profession - John O. McGinnis - June 2016 ...
 
WhitePaper- Archiving Supports HIPAA Compliance
WhitePaper- Archiving Supports HIPAA ComplianceWhitePaper- Archiving Supports HIPAA Compliance
WhitePaper- Archiving Supports HIPAA Compliance
 
Translating Geek To Attorneys It Security
Translating Geek To Attorneys It SecurityTranslating Geek To Attorneys It Security
Translating Geek To Attorneys It Security
 
Using Email, File, Social Media and Mobile Archiving to Grow Your Business
Using Email, File, Social Media and Mobile Archiving to Grow Your BusinessUsing Email, File, Social Media and Mobile Archiving to Grow Your Business
Using Email, File, Social Media and Mobile Archiving to Grow Your Business
 
The impact of regulatory compliance on DBA(latest)
The impact of regulatory compliance on DBA(latest)The impact of regulatory compliance on DBA(latest)
The impact of regulatory compliance on DBA(latest)
 
White papers regulations
White papers   regulations White papers   regulations
White papers regulations
 
Privacy trends 2011
Privacy trends 2011Privacy trends 2011
Privacy trends 2011
 
NSTC Identity Management Task Force Report Executive Summary
NSTC Identity Management Task Force Report Executive SummaryNSTC Identity Management Task Force Report Executive Summary
NSTC Identity Management Task Force Report Executive Summary
 
Governing the Chaos
Governing the ChaosGoverning the Chaos
Governing the Chaos
 
Running head Assignment 2.3 Justification Report-Part 31PROBL.docx
Running head Assignment 2.3 Justification Report-Part 31PROBL.docxRunning head Assignment 2.3 Justification Report-Part 31PROBL.docx
Running head Assignment 2.3 Justification Report-Part 31PROBL.docx
 
Governance & Ediscovery
Governance & EdiscoveryGovernance & Ediscovery
Governance & Ediscovery
 
2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery2 7-2013-big data and e-discovery
2 7-2013-big data and e-discovery
 
Savvy Litigator Winter 2009
Savvy Litigator Winter 2009Savvy Litigator Winter 2009
Savvy Litigator Winter 2009
 
Governance and e-discovery
Governance and e-discoveryGovernance and e-discovery
Governance and e-discovery
 
ERP Systems - The Next Legacy Dinosaur
ERP Systems - The Next Legacy DinosaurERP Systems - The Next Legacy Dinosaur
ERP Systems - The Next Legacy Dinosaur
 
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...
Analyst Report: Osterman Research: File Archiving: The Next Big Thing or Just...
 

Más de Actiance, Inc.

Compliance Guide for NFA-Registered Firms
Compliance Guide for NFA-Registered FirmsCompliance Guide for NFA-Registered Firms
Compliance Guide for NFA-Registered FirmsActiance, Inc.
 
The case for social media management and archiving
The case for social media management and archivingThe case for social media management and archiving
The case for social media management and archivingActiance, Inc.
 
Why you need to focus on social networking in your company
Why you need to focus on social networking in your companyWhy you need to focus on social networking in your company
Why you need to focus on social networking in your companyActiance, Inc.
 
Actiance whitepaper-ost-federal-unified-communications
Actiance whitepaper-ost-federal-unified-communicationsActiance whitepaper-ost-federal-unified-communications
Actiance whitepaper-ost-federal-unified-communicationsActiance, Inc.
 
The impact of new communication tools for financial services firms
The impact of new communication tools for financial services firms The impact of new communication tools for financial services firms
The impact of new communication tools for financial services firms Actiance, Inc.
 
Messaging best practices for 2011
Messaging best practices for 2011Messaging best practices for 2011
Messaging best practices for 2011Actiance, Inc.
 
Compliance implications of social media
Compliance implications of social mediaCompliance implications of social media
Compliance implications of social mediaActiance, Inc.
 
Importance of social media in Pharmaceutical industry
Importance of social media in Pharmaceutical industryImportance of social media in Pharmaceutical industry
Importance of social media in Pharmaceutical industryActiance, Inc.
 
How do you quantify ROI on social media?
How do you quantify ROI on social media?How do you quantify ROI on social media?
How do you quantify ROI on social media?Actiance, Inc.
 
IDC event flash on Socialite launch
IDC event flash on Socialite launchIDC event flash on Socialite launch
IDC event flash on Socialite launchActiance, Inc.
 
Social Media Guidelines for Insurance Industry
Social Media Guidelines for Insurance Industry Social Media Guidelines for Insurance Industry
Social Media Guidelines for Insurance Industry Actiance, Inc.
 
Enterprises are upgrading from Microsoft OCS to Lync
Enterprises are upgrading from Microsoft OCS to LyncEnterprises are upgrading from Microsoft OCS to Lync
Enterprises are upgrading from Microsoft OCS to LyncActiance, Inc.
 
True Compliance for Social Media
True Compliance for Social MediaTrue Compliance for Social Media
True Compliance for Social MediaActiance, Inc.
 
Social Media and Litigation are Outlining eDiscovery Issues
Social Media and Litigation are Outlining eDiscovery IssuesSocial Media and Litigation are Outlining eDiscovery Issues
Social Media and Litigation are Outlining eDiscovery IssuesActiance, Inc.
 
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...Actiance, Inc.
 
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_media
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_mediaActiance handbook-interpreting finra-10-03_and_11-39_for_using_social_media
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_mediaActiance, Inc.
 

Más de Actiance, Inc. (16)

Compliance Guide for NFA-Registered Firms
Compliance Guide for NFA-Registered FirmsCompliance Guide for NFA-Registered Firms
Compliance Guide for NFA-Registered Firms
 
The case for social media management and archiving
The case for social media management and archivingThe case for social media management and archiving
The case for social media management and archiving
 
Why you need to focus on social networking in your company
Why you need to focus on social networking in your companyWhy you need to focus on social networking in your company
Why you need to focus on social networking in your company
 
Actiance whitepaper-ost-federal-unified-communications
Actiance whitepaper-ost-federal-unified-communicationsActiance whitepaper-ost-federal-unified-communications
Actiance whitepaper-ost-federal-unified-communications
 
The impact of new communication tools for financial services firms
The impact of new communication tools for financial services firms The impact of new communication tools for financial services firms
The impact of new communication tools for financial services firms
 
Messaging best practices for 2011
Messaging best practices for 2011Messaging best practices for 2011
Messaging best practices for 2011
 
Compliance implications of social media
Compliance implications of social mediaCompliance implications of social media
Compliance implications of social media
 
Importance of social media in Pharmaceutical industry
Importance of social media in Pharmaceutical industryImportance of social media in Pharmaceutical industry
Importance of social media in Pharmaceutical industry
 
How do you quantify ROI on social media?
How do you quantify ROI on social media?How do you quantify ROI on social media?
How do you quantify ROI on social media?
 
IDC event flash on Socialite launch
IDC event flash on Socialite launchIDC event flash on Socialite launch
IDC event flash on Socialite launch
 
Social Media Guidelines for Insurance Industry
Social Media Guidelines for Insurance Industry Social Media Guidelines for Insurance Industry
Social Media Guidelines for Insurance Industry
 
Enterprises are upgrading from Microsoft OCS to Lync
Enterprises are upgrading from Microsoft OCS to LyncEnterprises are upgrading from Microsoft OCS to Lync
Enterprises are upgrading from Microsoft OCS to Lync
 
True Compliance for Social Media
True Compliance for Social MediaTrue Compliance for Social Media
True Compliance for Social Media
 
Social Media and Litigation are Outlining eDiscovery Issues
Social Media and Litigation are Outlining eDiscovery IssuesSocial Media and Litigation are Outlining eDiscovery Issues
Social Media and Litigation are Outlining eDiscovery Issues
 
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...
Handbook on Interpreting FINRA Regulatory Notices 10-06 and 11-39 and Using S...
 
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_media
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_mediaActiance handbook-interpreting finra-10-03_and_11-39_for_using_social_media
Actiance handbook-interpreting finra-10-03_and_11-39_for_using_social_media
 

Último

How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.Curtis Poe
 
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxA Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxLoriGlavin3
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfLoriGlavin3
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity PlanDatabarracks
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationSlibray Presentation
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningLars Bell
 
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxLoriGlavin3
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brandgvaughan
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxLoriGlavin3
 
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdfHyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdfPrecisely
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxLoriGlavin3
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteDianaGray10
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxLoriGlavin3
 
Commit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyCommit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyAlfredo García Lavilla
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed
 
What is DBT - The Ultimate Data Build Tool.pdf
What is DBT - The Ultimate Data Build Tool.pdfWhat is DBT - The Ultimate Data Build Tool.pdf
What is DBT - The Ultimate Data Build Tool.pdfMounikaPolabathina
 

Último (20)

How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.How AI, OpenAI, and ChatGPT impact business and software.
How AI, OpenAI, and ChatGPT impact business and software.
 
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptxA Deep Dive on Passkeys: FIDO Paris Seminar.pptx
A Deep Dive on Passkeys: FIDO Paris Seminar.pptx
 
Moving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdfMoving Beyond Passwords: FIDO Paris Seminar.pdf
Moving Beyond Passwords: FIDO Paris Seminar.pdf
 
How to write a Business Continuity Plan
How to write a Business Continuity PlanHow to write a Business Continuity Plan
How to write a Business Continuity Plan
 
Connect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck PresentationConnect Wave/ connectwave Pitch Deck Presentation
Connect Wave/ connectwave Pitch Deck Presentation
 
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
DSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine TuningDSPy a system for AI to Write Prompts and Do Fine Tuning
DSPy a system for AI to Write Prompts and Do Fine Tuning
 
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc Webinar - How to Build Consumer Trust Through Data Privacy
TrustArc Webinar - How to Build Consumer Trust Through Data Privacy
 
The State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptxThe State of Passkeys with FIDO Alliance.pptx
The State of Passkeys with FIDO Alliance.pptx
 
Dev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio WebDev Dives: Streamline document processing with UiPath Studio Web
Dev Dives: Streamline document processing with UiPath Studio Web
 
WordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your BrandWordPress Websites for Engineers: Elevate Your Brand
WordPress Websites for Engineers: Elevate Your Brand
 
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptxUse of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
Use of FIDO in the Payments and Identity Landscape: FIDO Paris Seminar.pptx
 
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdfHyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf
Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf
 
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptxThe Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
The Fit for Passkeys for Employee and Consumer Sign-ins: FIDO Paris Seminar.pptx
 
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
Transcript: New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024
 
Take control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test SuiteTake control of your SAP testing with UiPath Test Suite
Take control of your SAP testing with UiPath Test Suite
 
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptxThe Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
The Role of FIDO in a Cyber Secure Netherlands: FIDO Paris Seminar.pptx
 
Commit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easyCommit 2024 - Secret Management made easy
Commit 2024 - Secret Management made easy
 
Scanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL CertsScanning the Internet for External Cloud Exposures via SSL Certs
Scanning the Internet for External Cloud Exposures via SSL Certs
 
What is DBT - The Ultimate Data Build Tool.pdf
What is DBT - The Ultimate Data Build Tool.pdfWhat is DBT - The Ultimate Data Build Tool.pdf
What is DBT - The Ultimate Data Build Tool.pdf
 

The Impact of the New FRCP Amendments on Your Business

  • 1. WHITE PAPER The Impact of the New FRCP Amendments on Your Business SPON An Osterman Research White Paper Published January 2007 SPONSORED BY sponsored by SPON sponsored by Osterman Research, Inc. P.O. Box 1058 • Black Diamond, Washington • 98010-1058 • USA Tel: +1 253 630 5839 • Fax: +1 253 458 0934 • info@ostermanresearch.com www.ostermanresearch.com • twitter.com/mosterman
  • 2. The Impact of the New FRCP Amendments on Your Business Why This White Paper Will be Worth Your Time The newly adopted amendments to the Federal Rules of Civil Procedure (FRCP) will have a major impact on the way that organizations manage electronic data. However, an Osterman Research survey conducted in December 2006 found that more than one-half of organizations do not understand the new rules well enough to understand the impact that they will have on their data retention practices, while only one in five organizations does not anticipate any sort of change in their corporate behavior in response to the changes. Further, another survey found that only seven percent of corporate counsel attorneys rated their companies as prepared for the new amendments, while The newly more than one-half were not even aware that the new adopted amendments were to go into effect on December 1, 20061. amendments to the Federal The next several months will present significant challenges to Rules of Civil organizations of all sizes on several levels: corporate legal Procedure counsel will need to learn what impact the FRCP changes (FRCP) will will have on their organizations, IT managers will wrestle with have a major the potentially significant investments in technology that will impact on the be required to adequately preserve electronic data, and way that senior managers will need to evaluate and improve their organizations corporate governance policies and procedures to meet the manage new requirements. electronic data. This white paper focuses on the new FRCP amendments and the impact that they will have on organizations of all sizes. This document was authored by: • John A. Heer An attorney that focuses on e-discovery in complex civil litigation and environmental matters. Mr. Heer is a respected speaker and author on topics such as electronic discovery and evidence, litigation tactics and environmental law. • Michael D. Osterman Founder and principal of Osterman Research, Inc. 1 Survey conducted by LexisNexis Applied Discovery during the Association of Corporate Counsel 2006 Annual Meeting in October 2006. © 2007 Osterman Research, Inc. Page 1
  • 3. The Impact of the New FRCP Amendments on Your Business What are the Federal Rules of Civil Procedure? The FRCP are a body of rules focused on governing court procedures for managing civil suits in the United States district courts. While the United States Supreme Court is responsible for promulgating the FRCP, the United States Congress must approve these rules and any changes made to them. A number of A number of important and substantive revisions to the FRCP important and went into effect on December 1, 2006. These changes substantive represented several years of debate at various levels and revisions to the will have a significant impact on electronic discovery and FRCP went into effect on the management of electronic data within organizations December 1, that operate in the United States. In a nutshell, the changes 2006. These to the FRCP require organizations to manage their data in changes such a way that this data can be produced in a timely and represented complete manner when necessary, such as during legal several years of discovery proceedings. debate at various levels. New Amendments to the FRCP The amendments to Rules 16, 26, 33, 34, 37, 45 and revisions to Form 35 are aimed at electronically stored information (ESI). The amendments attempt to deal with the important issues presented by ESI: • ESI is normally stored in much greater volume than are hard copy documents. • ESI is dynamic, in many cases modified simply by turning a computer on and off. The changes reflect the reality • ESI can be incomprehensible when separated from the that discovery of email and other systems that created it. ESI is now a routine, yet • ESI contains non-apparent information, or metadata, critical, aspect of that describes the context of the information and every litigated provides other useful and important information. case. The changes reflect the reality that discovery of email and other ESI is now a routine, yet critical, aspect of every litigated case. First, the amendments treat ESI differently. Second, they require early discussion of and attention to electronic discovery. Third, they address inadvertent production of privileged or protected materials. Fourth, they encourage a two-tiered approach to discovery – deal with reasonably accessible information and then later with inaccessible data. Finally, they provide a safe harbor from sanctions by imposing a good faith requirement. © 2007 Osterman Research, Inc. Page 2
  • 4. The Impact of the New FRCP Amendments on Your Business Who is Most Impacted by the Changes to the FRCP? Unlike many data retention requirements in specific industries, such as those imposed upon broker-dealers by the Securities and Exchange Commission (SEC) and the National Association of Securities Dealers (NASD), the FRCP apply to virtually all organizations in all industries. If an organization can have a civil lawsuit filed against it, then the FRCP should figure prominently in that organization’s data management strategy. Obviously, all cases brought after December 1, 2006 will be subject to the new FRCP amendments. However, the Supreme Court has determined that cases filed prior to this date could be subject to the FRCP if a court determines that The Supreme undue delay or burden to the parties involved2 will not be Court has imposed by adherence to the new rules. determined that cases filed prior to this date could be subject to the Key Rules Within the FRCP FRCP if a court determines that Civil Rule 16 undue delay or Pretrial Conferences; Scheduling; Management burden to the The amendments establish a process for the parties and parties involved court to address early issues pertaining to the disclosure and will not be discovery of electronic information. They are designed to imposed by alert the court and litigants to the possible need to address adherence to the new rules. handling of ESI early in litigation if such discovery is expected to occur. Rule 16(b) is amended to invite the court to address disclosure or discovery of ESI in the Rule 16 scheduling order and gives the court discretion to enter an order adopting any agreements the parties reach for asserting claims of privilege or protection after inadvertent production in discovery. Civil Rule 26 General Provisions Governing Discovery; Duty of Disclosure • Rule 26(a)(1) The amendment clarifies a party’s duty to include ESI in its initial disclosures by substituting the word “ESI” for “data compilations.” • Rule 26(b)(2) The amendment clarifies the obligations of a responding party to provide discovery of ESI that is not reasonably accessible (deleted information, information kept on 2 http://www.supremecourtus.gov/orders/courtorders/frcv06p.pdf © 2007 Osterman Research, Inc. Page 3
  • 5. The Impact of the New FRCP Amendments on Your Business some backup tape systems, and legacy data from systems no longer in use). The amendment requires the responding party to identify the sources of potentially responsive information that it has not searched or produced because of the costs and burdens of accessing the information. If the requesting party moves for production of such information, the responding party has the burden of showing the information is not reasonably accessible. If the responding party makes this showing, a court may order discovery for good cause and may impose conditions. Any organization should first obtain and examine the information that can be Any organization provided from easily accessed sources and then should first obtain and examine the determine whether it is necessary to search difficult-to- information that access sources (a court can order a sampling technique can be provided to determine the usefulness of searching the difficult-to- from easily access sources). A party might be obligated to preserve accessed information stored on sources it has identified as not sources and then reasonably accessible. determine whether it is • Rule 26(b)(5) necessary to The amendment provides a procedure for asserting search difficult- privilege after production that is parallel to similar to-access sources. A party changes in Rules 16 and 26(f). Upon notification to the might be recipient of the producing party’s post-production obligated to privilege claim, the recipient must return, sequester or preserve destroy the information until the claim is resolved. information stored on • Rule 26(f) sources it has The amendment requires the parties’ conference to identified as not include discussion of any issues relating to disclosure or reasonably discovery of ESI, including form of production, accessible. preservation, and privilege/protection issues. The amendments encourage parties to enter into voluntary agreements under which the inadvertent production of privileged or protected materials would not result in a waiver. Any such agreement should probably include an “attorney’s eyes only” provision, no waiver of trade secret protection, penalties for distribution of the material, including by e-discovery providers, and provision for certified and validated destruction of privileged data or data not used. Civil Rule 33 Interrogatories to Parties The amendment expressly provides that an answer to an interrogatory involving review of business records should involve a search of ESI. © 2007 Osterman Research, Inc. Page 4
  • 6. The Impact of the New FRCP Amendments on Your Business Civil Rule 34 Production of Documents and Things and Entry Upon Land for Inspection and Other Purposes ESI is explicitly recognized as a category that is distinct from “documents” and “things.” Rule 34 also authorizes the requesting party to specify the form of production. Absent court order, party agreement or a request for a specific form of production, a party may produce responsive ESI in the form ordinarily maintained or in a reasonably usable form. Rule 34 also includes the notion of sampling data from an entire data set to determine if additional discovery is warranted. A key provision of Rule 34 is the production of The amendment data in “a form or forms in which it is ordinarily maintained or creates a "safe in a form or forms that are reasonably usable.” harbor" that protects a party Civil Rule 37 from sanctions Failure to Make Disclosure or Cooperate in Discovery; for failing to provide Sanctions electronically The amendment creates a "safe harbor" that protects a stored party from sanctions for failing to provide electronically information lost stored information lost because of the routine, good-faith because of the operation of the party's computer system. Rule 37(f) routine, good- provides limited protection against sanctions for a party’s faith operation of failure to provide ESI in discovery if the ESI sought in the party's discovery is lost as a result of routine operation of an computer electronic storage system, as long as the operation is in system. The good faith. Good faith likely requires that a party intervene problem with this rule, however, is to modify or suspend certain features of the routine that it is subject operation of computer systems to prevent loss of information to a wide variety if the information is subject to a preservation obligation (i.e., of interpretations. the party must initiate a “litigation hold”). The problem with this rule, however, is that it is subject to a wide variety of interpretations. For example, if a defendant considers a failure to produce ESI in a particular case the result of a “good faith” operation of an electronic information system, such as erasing backup tapes on a routine basis, a court may not agree and may find the defendant liable for spoliation of data. Civil Rule 45 Subpoena These are technical amendments that conform to other proposed amendments regarding discovery of electronically stored information by adding ESI to the scope of information that a person receiving the subpoena must search. © 2007 Osterman Research, Inc. Page 5
  • 7. The Impact of the New FRCP Amendments on Your Business Subpoena may specify the form in which ESI is to be produced. Form 35 Report of Parties' Planning Meeting This is a technical revision reflecting the amendment to Civil Rule 26, amended to add the parties’ proposals regarding disclosure or discovery of ESI to the list of topics to be included in the report to the court. Important Considerations Moving Forward Most backups Almost all organizations perform regular backups of their are retained email system, file servers and other data repositories. While typically for no many organizations believe that these backups constitute more than 60 to an “archive” of their business information, this is not the case. 90 days as subsequent A traditional backup takes periodic “snapshots” of active backups on tape data so that deleted or destroyed records can be or disk are recovered, such as after the failure of a server’s hard disk or recycled or an application upgrade gone awry. Most backups are overwritten. retained typically for no more than 60 to 90 days as While backups subsequent backups on tape or disk are recycled or can be overwritten. While backups can be preserved indefinitely in preserved order to preserve business records, there are three indefinitely in fundamental problems with using backups as an archive: order to preserve business records, there are three • Backups constitute “raw” content and lack any sort of fundamental indexing. If information, such as in response to a problems with discovery order, must be produced from a set of backup using backups as tapes, the process is typically time-consuming, highly an archive. disruptive to IT staff and expensive, particularly if third- party forensics firms must be used. • The integrity of backup tapes is not guaranteed. There have been many cases in which older tapes were not readable due to data corruption or physical corruption of the media itself. • Because backups capture a snapshot of data, information generated and deleted between backups will not be captured. For example, if an organization is required to preserve communications between senior management and external auditors, an email sent from the CEO to the external firm at 10:00am and then deleted from the “Sent” folder at 2:00pm on the same day will never be captured in the nightly backup. © 2007 Osterman Research, Inc. Page 6
  • 8. The Impact of the New FRCP Amendments on Your Business While backups are a critical and necessary component of an organization’s data management strategy, they are not a substitute for an archive. In short, a backup is desiged to preserve data for short periods in support of the physical infrastructure that an organization maintains, while an archive is designed to preserve information on a long term basis in support of more strategic corporate objectives. The Benefits of Archiving As noted above, an archive that is populated based on a pre-determined set of corporate policies offers important benefits: A properly • Ease of capture configured and Information can be captured from a variety of data managed sources, indexed and placed into an archive without any archiving system intervention by IT staff or end users. Further, if a discovery makes hold order is imposed for a particular set of users, for production of data in response example, a new policy can be created instead that will to an e- address this order automatically, minimizing the potential discovery order for spoliation of evidence. far simpler than if backup tapes • Ease of production must be A properly configured and managed archiving system searched for the makes production of data in response to an e-discovery same order far simpler than if backup tapes must be searched information. for the same information. For example, in the case of Bank of America Corporation vs. SR International Business Insurance Company [2006 WL 3093174 (N.C. Super. Nov. 1, 2006), the defendants requested that a non-party to the case, Marsh, Inc., produce deleted emails from 400 backup tapes. Kroll Ontrack estimated that the cost to produce these emails could have been up to $1.4 million, or an average of $3,500 per tape. While Marsh was not required to produce the deleted emails in this case, the example illustrates the potentially enormous cost of retrieving discoverable content from backups. Other Benefits of Archiving While archiving offers very clear benefits to organizations that must address their data governance practices in the context of FRCP compliance, archiving also provides a number of other benefits: • Regulatory compliance As noted above, there are a wide variety of regulations that impose data retention and management requirements on organizations operating in the United © 2007 Osterman Research, Inc. Page 7
  • 9. The Impact of the New FRCP Amendments on Your Business States. These requirements, which literally number in the thousands, are quite diverse, ranging from the Americans with Disabilities Act to the Toxic Substances Control Act. While most of these regulations’ data retention provisions do not specifically call out ESI, email, instant messages or other specific forms of data, the growing quantity of ESI dictates that business records and other information should be preserved in their native format as a best practice. In the case of instant message, this should include attachments sent as file transfers thru IM networks. The ability to archive both instant message text and the content of IM-borne attachments is important for e-discovery purposes. This increased use of email, • Storage management and storage optimization coupled with Email use is growing dramatically – Osterman Research growing use of has found that email use by employees is growing at attachments, about 20% annually. This increased use of email, larger attachments and coupled with growing use of attachments, larger multimedia files attachments and multimedia files means that email means that email storage is becoming a critical issue. Osterman Research storage is has found that the growth in email storage is the leading becoming a problem for email managers and constitutes more of a critical issue. problem than spam. Osterman Research has Archives consist of largely static data – if that data is found that the included as part of regular backup and restore, then growth in email organizations are constantly backing up the same static storage is the leading problem data over and over, which represents a significant cost. for email This approach necessitates continually buying larger managers and servers and more storage over time. constitutes more of a problem An appropriately configured archiving system can than spam. automatically offload data from email servers, resulting in better email server performance and shorter restoration periods after a server crash. Further, IT can continue to impose mailbox-size quotas on their users (which about 60% of organizations do today). However, because data is automatically transferred from users’ mailboxes to an archive in many archiving systems, users experience what seems to be a mailbox of infinite size, eliminating the need to manually move data from the inbox to other repositories in order to stay within the quota limitation. It is also important to consider instant messaging in the context of storage management, since use of instant messaging systems will increase rapidly, growing from © 2007 Osterman Research, Inc. Page 8
  • 10. The Impact of the New FRCP Amendments on Your Business one-third of all email users at present to near ubiquity by 2009. • Knowledge management and data mining Three out of four email users in the workplace in a December 2006 Osterman Research survey reported that email is “extremely important” in helping them to do their work. This is due primarily to the fact that most of the information that employees produce is somehow tied up in email in the form of documents, contacts, email threads and other content. An archiving system allows an organization to preserve this information for long periods so that employees have access to it when Most of the necessary. information that employees • Other benefits produce is An archiving system can also assist an organization with somehow tied up recovering from a disaster by providing an off-site copy in email in the form of of current data, it can help in resolving disputes prior to documents, legal action by preserving all necessary ESI and the contacts, email context of this data, and it can help an organization to threads and assess the viability of its legal position at the other content. commencement of a legal action, among other An archiving benefits. system allows an organization to Understanding Media Choices preserve this Another key consideration for satisfying FRCP, compliance, information for and other data retention issues for on-premise data long periods so that employees management is the choice of hardware, software, and have access to it media on which to archive data on a long term basis. when necessary. Considerations should include random access to data, long term media longevity, data permanence and authenticity, recoverability and cost. RAID, tape, WORM optical, DVD and other technologies can all be used for long-term archival storage, but there are trade-offs to consider. For example, specially designed archival storage products using RAID magnetic disk offer excellent performance and high capacity. There are several disk-based archiving products available in the market today that provide functionality for the long-term preservation of business records with content-aware or content-addressed storage approaches. Special consideration should be given to how data is protected long term with these systems, since backup or disk-mirroring technologies may not be sufficient to protect ESI over its useful life. It is also important to note that these use rewritable media with software-enabled WORM. Plus, not all © 2007 Osterman Research, Inc. Page 9
  • 11. The Impact of the New FRCP Amendments on Your Business of these solutions can be taken off-line for secure vaulting and the TCO of a RAID archive system is higher than for some other technologies. By contrast, tape is removable – important for disaster recovery – has extremely high capacity and offers fast read/write streaming at an affordable price. However, tape struggles as an archive medium because it lacks random access performance for discovery. Like RAID, it is also rewritable and requires special environmental conditions and periodic refreshing if used for long-term data storage. High-density optical media is a cost-effective approach that combines low cost per bit, media-based WORM capabilities, random access and very long media life. Optical also eliminates the need to migrate data over the useful life of the ESI via backward compatible support and a non- invasive roadmap to future generations. Today’s best practices often combine technologies such as RAID disk, optical technologies, and tape to capitalize on A key question the strength of each and mitigate the risk of failure. that also must be addressed as Understanding Delivery Models part of any data Another important consideration is the delivery model for governance managing data in support of FRCP and other requirements. strategy is just While most organizations currently opt for on-premise how much solutions, using appliances or software installed on in-house should be saved servers, another viable option is to use a managed service and what can that will provide archiving capabilities without any safely be investments in hardware or software. discarded. The advantages of an on-premise approach are complete control over the infrastructure used to deploy the data management solution, the ability to re-use existing hardware and lower costs than hosting in some cases. The advantages of using managed services include rapid deployment (particularly useful when hit with a discovery hold order), minimizing IT involvement in the data management process and lower costs than on-premise solution in some environments. © 2007 Osterman Research, Inc. Page 10
  • 12. The Impact of the New FRCP Amendments on Your Business How Much Content Should You Save? A key question that also must be addressed as part of any data governance strategy is just how much should be saved and what can safely be discarded. One approach is to save as little as possible, preserving data only as long as necessary to ensure that servers can be restored after a failure. This approach is the least expensive from an infrastructure perspective, since it minimizes storage The best approach to costs, eliminates the cost of an archiving capability and data retention is minimizes IT’s involvement in managing information. Plus, to implement a because it minimizes the storage of live data, servers can balanced perform well and be recovered more quickly after a server strategy that crash. However, this can be an expensive approach in the leans toward long run, since it runs the risk of deleting information that saving more must be preserved because of FRCP requirements, rather than less. regulatory obligations and the like. Also, because most users This approach will keep information for long periods anyway, enforcement includes and litigation costs are higher, there is greater risk of running establishing specific policies afoul of discovery hold orders and users will often oppose around data strict deletion requirements. governance, regulatory At the other extreme is a policy of saving virtually everything obligations and – some organizations will even save spam for the sake of advice from completeness. The primary advantage of this approach is legal counsel; that organizations run the least risk of deleting data implementing accidentally, allowing them to satisfy regulatory technologies that requirements and discovery orders. The disadvantages of will help to satisfy this approach are much higher storage costs, greater these policies; and using the difficulty in finding necessary data because of all the right unecessary data that is also saved and saving “smoking combination of guns” that a regulator or court would not have required an nearline and organization to save. secondary storage most The best approach to data retention is to implement a effectively. balanced strategy that leans toward saving more rather than less. This approach includes establishing specific policies around data governance that work best for an organization based on FRCP guidelines, regulatory obligations and advice from legal counsel; implementing backup, archiving and other technologies that will help to satisfy these policies; and using the right combination of nearline and secondary storage most effectively. © 2007 Osterman Research, Inc. Page 11
  • 13. The Impact of the New FRCP Amendments on Your Business What Should Organizations Do? So, based on these changes and existing case law, what should an organization do in response to the new FRCP amendments? Here is a summary of the key steps that any organization should undertake: • Review and assess existing document retention policies and practices. It makes sense to evaluate these policies now rather than waiting for litigation. • Pay close attention to e-discovery issues from the earliest stages of litigation. • Learn what types of electronic data exist in the For organizations organization and that might be needed very early in the that were litigation process. already aware of e-discovery and • Investigate the amount and cost of preserving, restoring, electronic data retention issues processing and reviewing relevant electronic data. before, the new FRCP • Assess the format of production that is appropriate for amendments the organization and each case. simply incorporate • Determine an appropriate protocol for privilege and those issues into waiver claims. the civil rules for litigation. In short, the new amendments will place a greater focus on However, electronic discovery early in the litigation process; they will organizations that have not require the location, identification and categorization of ESI; considered e- they will expand the scope of subpoenas in the context of discovery and accessing ESI; and interrogatories that are focused on a electronic data review of business records can now specifically identify a retention issues search of ESI. should start now. For organizations that were already aware of e-discovery and electronic data retention issues before, the new FRCP amendments simply incorporate those issues into the civil rules for litigation. However, organizations that have not considered e-discovery and electronic data retention issues (which Osterman Research has found is a sizable proportion of organizations) should start now. Focus on Data Governance Regardless of an organization’s size or the industry in which it operates, a comprehensive corporate governance plan should be established that includes specific and detailed policies focused on data retention and disposal, as well as on other aspects of email, instant messaging content and © 2007 Osterman Research, Inc. Page 12
  • 14. The Impact of the New FRCP Amendments on Your Business electronic document management. Organizations must understand the types of data that constitute business records (and so must be preserved), how long and in what form these records must be preserved, and when they can safely be destroyed. Although retention of email, instant messages and other types of electronic documents is a necessary component of normal backup and disaster recovery requirements, data governance goes well beyond these requirements. Data governance focuses on the entire set of demands for data retention that are driven by regulatory compliance, legal discovery considerations, log management, industry-specific requirements and other demands. In order to satisfy the requirements Although the FRCP changes apply primarily to e-discovery, of the FRCP, data governance focuses on a much wider set of organizations requirements for data retention, including regulations like must implement Sarbanes-Oxley, the Gramm-Leach-Bliley Act, the Health systems that can Insurance Portability and Accountability Act (HIPAA), various a) capture SEC requirements, and various requirements from the NASD, information that to name just a few of the many requirements that must be must be preserved, b) satisfied depending on the industry in which an organization store this participates. information in a such a way that Implement Technologies That Can Help the Organization its integrity can Meet Corporate Governance Requirements be maintained In order to satisfy the requirements of the FRCP, organizations and c) produce must implement systems that can a) capture information this information that must be preserved, b) store this information in a such a on demand in a way that its integrity can be maintained and c) produce this cost-effective information on demand in a cost-effective and timely and timely manner. manner. The most logical method for storing email, instant messages and other types of ESI is an archiving system that can satisfy all of these requirements. An appropriately configured archiving system will capture business records and other important content based on a pre-defined set of business rules and policies, store this content in a secure repository and provide robust search tools that will permit production of the data on demand with as little disruption to IT staff and others as possible. Develop a Unified System As a best practice for compliance with the new FRCP amendments, organizations should develop a unified system that spans archiving, backups, policies and overall media © 2007 Osterman Research, Inc. Page 13
  • 15. The Impact of the New FRCP Amendments on Your Business management. It is important to consider everything from simple backups to complex archiving requirements as part of a continuum of data governance practices that must be managed cohesively. In short, all of the data that an organization generates should be managed as part of unified data management strategy that can address not only FRCP requirements, but also regulatory obligations, employee productivity issues, IT efficiency issues and other requirements. Summary The new FRCP amendments are critically important for both IT managers and business decision-makers to understand and consider, since they raise the importance of data governance practices to a new level. Instead of proper data retention being simply a best practice for organizations to follow, data retention is now a legal obligation that can carry with it serious consequences if managed poorly. While backup, archiving and other data retention capabilities are an important component of a proper data management strategy, organizations must adopt a holistic approach to managing data, particularly the growing proportion of electronically stored information that they manage. About the Authors John A. Heer John A. Heer has counseled clients for more than 15 years in a wide variety of complex civil litigation and environmental matters. John is also a respected speaker and author on topics such as electronic discovery and evidence, litigation tactics, and environmental law. John’s recent presentations and speaking engagements include: • “E-Discovery: Get Ready To Apply The New FRCP Changes” at NBI Seminar in Cleveland in December 2006 • “Discovery in Environmental Cases: Securing Documents By Public Record Act and Electronic Discovery” at the Ohio State Bar Association's Environmental Law Seminar in April 2005 • “Electronic Evidence and Discovery Issues” at the Florida Bar Association's 2005 Health Law Institute in Orlando, © 2007 Osterman Research, Inc. Page 14
  • 16. The Impact of the New FRCP Amendments on Your Business Florida in February, 2005 • “Litigating in Cyberspace” in an American Health Lawyers Association teleconference seminar in September, 2003 • ”Electronic Discovery Issues” at a Cleveland Bar Association seminar in June 2003 • “Capturing Key Evidence Through Electronic Discovery in Ohio” at a NBI seminar in Cleveland, Ohio in March, 2003. His article, “A Broad-Brush Look at Electronic Discovery Issues When Advising Your Clients,” was featured in the February, 2004 American Health Lawyers Association Health Lawyers News; the May 15, 2004 issue of The Lawyer's Brief and the July 2004 issue of Corporate Counsel's Quarterly. John received his B.A. from Indiana University and his J.D. cum laude from Case Western Reserve University School of Law. John is an Associate of the Environmental Law Institute and a member of the American, Ohio State and Cleveland Bar Associations. Michael D. Osterman Michael Osterman is the principal of Osterman Research, Inc., founded in 2001. Since that time, the company has become one of the leading analyst firms in the messaging and collaboration space, providing research, analysis, white papers and other services to companies like Microsoft, America Online, Sun Microsystems, Yahoo!, Network Appliance, Iron Mountain, Postini, Hewlett Packard and many others. Michael is a frequent speaker at industry and vendor- sponsored events on the topics of archiving, instant messaging, presence and other messaging-focused issues. He is also the author of a twice weekly column on unified communications issues for Network World Fusion. © 2007 Osterman Research, Inc. Page 15
  • 17. The Impact of the New FRCP Amendments on Your Business White Paper Sponsor Actiance enables the safe and productive use of Unified Communications, collaboration and Web 2.0, including blogs and social networking sites. Formerly FaceTime Actiance, Inc. Communications, Actiance’s award-winning platforms are 1301 Shoreway used by 9 of the top 10 US banks and more than 1600 Suite 275 organizations globally for the security, management and Belmont, CA 94002 compliance of unified communications, Web 2.0 and social USA media channels. Actiance supports all leading social +1 888 349 3223 networks, unified communications providers and IM platforms, including Facebook, LinkedIn, Twitter AOL, 400 Thames Valley Park Dr Google, Yahoo!, Skype, Microsoft, IBM and Cisco. Thames Valley Park Reading, RG6 1PT United Kingdom For more information about Actiance’s award winning +44 (0) 1189 637 469 platform, please visit www.actiance.com. www.actiance.com Vantage Vantage is the de facto platform for granular security, policy controls and compliance features for real time and unified communications – providing management for the widest variety of UC and real time communications platforms; including Microsoft OCS and IBM Lotus Sametime, public instant messaging platforms such as Windows Live and Skype, Web conferencing and industry-focused networks like Reuters, Bloomberg, and YellowJacket. Unifed Security Gateway (USG) Actiance’s Unified Security Gateway complements Vantage, by stopping the use of other applications that will bypass corporate security policies and introduce additional risk to the organization. USG provides granular control of Web 2.0 applications, monitoring, securing and recording content to reduce outbound data leaks and enable compliance with industry regulations, legal discovery requirements, and corporate policy standards. Actiance’s USG also logs social media conversations in compliance with the strictest requirements for record-keeping and tamper- proof data auditing for customers in highly regulated industries such as financial services, insurance, energy, education and health care. Insight Actiance Insight software interfaces with Actiance’s USG and Vantage to provide enterprise data visualization of user behavior, browsing patterns, and Web application usage trends. Ideal for managing enterprise networks which encompass multiple locations, the dynamic, multi- © 2007 Osterman Research, Inc. Page 16
  • 18. The Impact of the New FRCP Amendments on Your Business dimensional graphical interface provided by Actiance Insight provides complete visibility into Internet and real-time application usage that has not previously been possible with legacy reporting applications for Web security and data compliance. Socialite Socialite is Actiance’s security, management, and compliance solution for Social Networks, providing granular control of Facebook, LinkedIn, and Twitter. Socialite not only controls access to nearly a hundred different features across social networks, but can also moderate, manage, and archive any social media traffic routed through the solution, which can either be on-premise or hosted. © 2007 Osterman Research, Inc. All rights reserved. No part of this document may be reproduced in any form by any means, nor may it be distributed without the permission of Osterman Research, Inc., nor may it be resold by any entity other than Osterman Research, Inc., without prior written authorization of Osterman Research, Inc. THIS DOCUMENT IS PROVIDED “AS IS”. ALL EXPRESS OR IMPLIED REPRESENTATIONS, CONDITIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OR FITNESS FOR A PARTICULAR PURPOSE, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE DETERMINED TO BE ILLEGAL. © 2007 Osterman Research, Inc. Page 17