July 5, 2010
Jim
McGann
The Remedy for eDiscovery Angst – Backup Tapes
by Jim McGann
July 5, 2010
The major concerns surrounding eDiscovery are typically cost, time and reliability. How to get a accurate collection of relevant data within the court appointed time window without breaking the bank. The solution is actually what some mistakenly think is the thorn of all eDiscovery projects. Backups tapes have traditionally been synonymous with the undue burden argument; time consuming, painful and expense to discover. However direct indexing technology make this argument mute. Not only is tape discovery quick and affordable, tapes also contain an unspoiled, point in time copy of all the data in question.
IT teams capture corporate data from the network onto backup tapes daily. In the case of a catastrophic failure, or even user error, specific files and email can be restored from the backup environment. Therefore, every file created or edited and every email written is copied to a secure, typically offsite, location for safe keeping. These backups represent “point-in-time snapshots” of the files and email on the network and servers. So the email in a custodian’s inbox on June 30 or a contract created by a specific user, including revisions of this file, has an identical copy backed up by IT every day.
The ESI that is backed up to tape is secure and unspoiled. Users do not have access to this data. It cannot be modified and is a 100% accurate representation of what existed on a specific date. In order to be confident that no spoliation has occurred, instead of requesting data from the online network, legal teams should be issuing requests for data that was backed up to tape on the dates in question. No preservation letter is needed; the data is already preserved by the IT department during routine backups. Access to this data is easy, it is all collected and exists on tapes that are typically stored in offsite vaults. Additionally the request for this data is far less invasive as it will not require access to live corporate networks for the collection.
Since secure, preserved data exists on offline backup tapes, why are legal teams still issuing preservation letters for easily corruptible online data? Because, previously, backup tape data wasn’t easy or cost effective to access. As a result, legal teams have been forced to work with the more accessible data that exists online.
New technology now makes data on offline backup tapes accessible. Data that is locked away by IT during the routine backup process previously required specialized skills and great expense to access. The tapes are generated using proprietary software that collects the data and places it into a backup container that is copied onto tape. This process has required this software to gain access to the data through restoration of the content, typically by 3rd party specialists. This is why in the past it was expensive and time consuming to gain access to files and email on old backup tapes. However, this is no longer the case.
This data is now easily available using new automated tape discovery tools. When ESI is required, simply request the appropriate backup tapes from the client. These tapes are typically dated, so it is not difficult to find the relevant tapes for a specific timeframe. The tapes are then automatically scanned and indexed, so that they are searchable. Legal teams can then specify the specific metadata and content they require. For example, if you require a specific custodian’s mailbox, or a copy of a contract from June 2000, or even a general search of specific mailboxes to look for sensitive keywords, all data is now easily accessible via simple query terms. The relevant emails and files can then be extracted from tapes quickly and economically without any spoliation. The original backup software is not required, in fact it does not require any specialized technical resources to get the job done.
As a result of this new approach, legal teams can now be confident they have the data they need to support or defend against a law suit, and be sure that it is accurate, as it is a snapshot of the content as it existed on the date required. Anyone who wants to tamper with or influence the outcome of a case no longer has access to potential evidence. The method of leveraging backup tapes for ESI preservation is far more accurate and secure than the traditional method. No longer do you need to issue a preservation letter – just ask your clients for their tapes. They are already preserving what you need. Not only does this new approach eliminate the risk of spoliation, but technology also remedies the worrisome turn around time and cost of eDiscovery as well.
The major concerns surrounding eDiscovery are typically cost, time and reliability. How to get a accurate collection of relevant data within the court appointed time window without breaking the bank. The solution is actually what some mistakenly think is the thorn of all eDiscovery projects. Backups tapes have traditionally been synonymous with the undue burden argument; time consuming, painful and expense to discover. However direct indexing technology make this argument mute. Not only is tape discovery quick and affordable, tapes also contain an unspoiled, point in time copy of all the data in question.
IT teams capture corporate data from the network onto backup tapes daily. In the case of a catastrophic failure, or even user error, specific files and email can be restored from the backup environment. Therefore, every file created or edited and every email written is copied to a secure, typically offsite, location for safe keeping. These backups represent “point-in-time snapshots” of the files and email on the network and servers. So the email in a custodian’s inbox on June 30 or a contract created by a specific user, including revisions of this file, has an identical copy backed up by IT every day.
The ESI that is backed up to tape is secure and unspoiled. Users do not have access to this data. It cannot be modified and is a 100% accurate representation of what existed on a specific date. In order to be confident that no spoliation has occurred, instead of requesting data from the online network, legal teams should be issuing requests for data that was backed up to tape on the dates in question. No preservation letter is needed; the data is already preserved by the IT department during routine backups. Access to this data is easy, it is all collected and exists on tapes that are typically stored in offsite vaults. Additionally the request for this data is far less invasive as it will not require access to live corporate networks for the collection.
Since secure, preserved data exists on offline backup tapes, why are legal teams still issuing preservation letters for easily corruptible online data? Because, previously, backup tape data wasn’t easy or cost effective to access. As a result, legal teams have been forced to work with the more accessible data that exists online.
New technology now makes data on offline backup tapes accessible. Data that is locked away by IT during the routine backup process previously required specialized skills and great expense to access. The tapes are generated using proprietary software that collects the data and places it into a backup container that is copied onto tape. This process has required this software to gain access to the data through restoration of the content, typically by 3rd party specialists. This is why in the past it was expensive and time consuming to gain access to files and email on old backup tapes. However, this is no longer the case.
This data is now easily available using new automated tape discovery tools. When ESI is required, simply request the appropriate backup tapes from the client. These tapes are typically dated, so it is not difficult to find the relevant tapes for a specific timeframe. The tapes are then automatically scanned and indexed, so that they are searchable. Legal teams can then specify the specific metadata and content they require. For example, if you require a specific custodian’s mailbox, or a copy of a contract from June 2000, or even a general search of specific mailboxes to look for sensitive keywords, all data is now easily accessible via simple query terms. The relevant emails and files can then be extracted from tapes quickly and economically without any spoliation. The original backup software is not required, in fact it does not require any specialized technical resources to get the job done.
As a result of this new approach, legal teams can now be confident they have the data they need to support or defend against a law suit, and be sure that it is accurate, as it is a snapshot of the content as it existed on the date required. Anyone who wants to tamper with or influence the outcome of a case no longer has access to potential evidence. The method of leveraging backup tapes for ESI preservation is far more accurate and secure than the traditional method. No longer do you need to issue a preservation letter – just ask your clients for their tapes. They are already preserving what you need. Not only does this new approach eliminate the risk of spoliation, but technology also remedies the worrisome turn around time and cost of eDiscovery as well.
Respond: make a comment | read the 2 comments
Share: Email | Save as PDF | Print
| Bookmark & Share |
| 
More columns on Columns: e-Discovery | from Jim McGann
|
the count:
8216 posts | 11393 comments
recent comments  
You should assess whether you can accept the financial risks associated with taking the matter, just as clients will assess whether they can (and will) pay your fee. Spend time at the beginning of the. […] »»Practice Today’s Tip is a simple reminder to view by “latest activity date”. The Parliament is back in session and those Slaw Tips readers for whom monitoring legislation is a regular … »»Research When everyone in the firm is required to report monthly to all other partners, you instill a culture in the firm that is self-correcting. If someone fails to regularly meet their financial goals, you. […] »»Practice
-
Available online today are four new chapters of the publication Women in Canada: A Gender-based Statistical Report, which explores the socio-demographic and economic circumstances of Canadian women in general.
-
The bill amends the Constitution Act, 1867 by readjusting the number of members and the representation of the provinces in the House of Commons.
-
-
Blueseed plans to buy a ship and turn it into a floating incubator anchored in international waters off the coast of California.
-
Under Prime Minister Stephen Harper, the flow of information out of Ottawa has slowed to a trickle.
-
-
"…the IPC has exclusive jurisdiction to decide whether a record is in the custody or control of a university in the context of an access request…"
-
-
John J.L. Hunter, Q.C. of Vancouver has been elected President for 2011-2012
-
Detailed results from 321 members.
These summaries of selected recent cases are provided each week to Slaw by Maritime Law Book.
More information.
-
Administrative Law - Judicial review - General - Scope or standard of review
Ten individuals complained to the Information and Privacy Commissioner that the Alberta Teachers’ Association (ATA) disclosed, in contravention of the Personal Information Protection Act, their personal information between October 13 and December 2, ...
-
Civil Rights - Property - Search and seizure - Search - What constitutes
The accused was charged with possession of child pornography and making available child pornography. The accused brought an application, alleging several violations of his rights under the Charter.
The Saskatchewan Court of Queen’s ...
-
Constitutional Law - Extent of powers conferred - Double aspect doctrine - General
In provincial references, both the Alberta Court of Appeal (510 A.R. 200; 527 W.A.C. 200) and the Quebec Court of Appeal (2011 QCCA 591), concluded that the proposed Canadian Securities Act (CSA) was unconstitutional. A ...
-
Criminal Law - Procedure - Charge or directions - Jury or judge alone - Directions regarding evidence generally
The accused was charged with breach of trust by a public official contrary to s. 122 of the Criminal Code. The trial judge acquitted the accused. ...
-
Civil Rights - Trials - Due process, fundamental justice and fair hearings - Criminal and quasi-criminal proceedings - Delay (Charter, s. 7)
MacIntosh was charged on three informations with a total of 43 counts of sexual offences against nine complainants in the 1970s. The first information ...
-
Real Property Tax - Valuation - Business property - Considerations
Two breweries’ respective properties were assessed as special properties under the Assessment Act, 2006. They appealed their respective municipal tax assessments to the Review Commissioner. The Commissioner dismissed the appeals. The breweries each appealed. The appeals ...
-
Barristers and Solicitors -Duty to court - General principles - Duty of integrity
The applicant (Girao) and Allstate Insurance Co. disputed entitlements to accident benefits. The respondent law firm represented Allstate. Girao complained to the Privacy Commissioner of Canada (PCC) against Allstate for disclosing her ...
-
Criminal Law - Sentencing - Sentencing procedure and rights of the accused - Plea bargain or joint submission - Effect of
The accused was sentenced to two years’ imprisonment for three breaches of a recognizance under s. 810.2 of the Criminal Code. He appealed and applied ...
-
Practice - Persons who can sue and be sued - Individuals and corporations - Status or standing - Class actions - Members of class - General
The plaintiffs were Inuit or Métis persons who were forced to attend certain residential schools in Labrador and Newfoundland. They ...
This is a listing of a few upcoming events in Canada of interest to lawyers, law students, legal librarians, and others involved in the practice of law.
Clicking on any event in the list below will give you access to more information and to links allowing you to see the full entry and to add the event to your own calendar.
Click this link for a fuller version of the TalkLaw/ParLoi calendar of events and for instructions as to how to add events and calendars to your own calendar.
|
Jim, your approach makes sense to me (someone who hasn't taken part in eDiscovery). How far back in time can one expect to find usable back ups? There was a time when IT departments had a finite number of daily tapes and just recorded over the oldest tapes so that only a certain number of days' worth were available. I am assuming from your discussion that this practice has largely changed, but I'm wondering how long ago.
The number of tapes a company would have in offsite storage really depends on how they manage their data. With a strict data retention policy then IT departments should have an environment in place to keep what needs to be kept and destroy what does not. However when dealing with backup tapes, most IT organizations do not know what is on the tapes so they can not enforce this policy on tape content. Therefore they end up saving them all. We have clients with tens and hundreds of thousands of tapes in offsite storage. The only way to make any decisions about the data on these tapes is to index them, discovery the content and extract what is required. Once this is done a decision can be made that follows corporate policy. Otherwise they will continue to sit in storage and will remain a liability.