An extraordinary amount of time is incurred in discovery asking for records that may not even exist, or asking for records that do exist, but the other side declines to produce records that were not requested using just the right terms. Once the records are identified, wasteful paper-based productions occur because the requesting party did not insist on an electronic production, usually because of concerns that an electronic production may not be usable or understood. All of this wasted effort can be avoided easily.
Today, practically all business records exist electronically. Many records exist only in an electronic form. All of these electronic records can be produced much more quickly, cheaply, and easily than ever occurred with paper. For all these reasons, your discovery requests should initially focus on digital records.
A corporate-representative deposition on electronic-discovery issues should be the very first discovery action you take. This quickly obtains an overview of your opponent’s data systems. When done at the beginning of a case, senseless argument over what information exists and does not exist is avoided, because you then have the benefit of a party admission. Under FRCP 30(b)(6) and analogous “person most knowledgeable” state-court rules, you can send a notice that lists topics of inquiry, and this obligates your opponent to provide a witness(es) who has knowledge of the topics you list.
The subpoena should include a demand to produce records that identify the location, format, and character of your opponent’s data. Specific requests include all records that describe or memorialize:
1. Written data retention policies, and a description of the data retention policies actually in place
2. All technical manuals, network architecture diagrams, booklets, guidelines, memoranda
3. Policies and procedures for managing electronic information, including:
a. Individuals with administrative level access to the network4. Servers or computers serving as a central repository of any information for the organization - Information should include:
b. User permissions for accessing, modifying, and deleting data;
c. Utilization of data deletion programs;
d. Schedule for formatting hard drives or reinstalling software applications;
a. Server name of each system5. Current and former users on the network
b. Physical location of each system
c. Operating systems and versions of each system
d. Business purpose of each system (e.g., webserver, accounting system, fileserver, etc.)
e. Critical applications running on each system, and the versions of each
f. Critical databases or information stores found on each system
a. Lists of backup media11. System(s) used for the electronic mail system, including but not limited to:
b. Locations of backup media
c. Hardware and software used to backup and archive information
d. What data is backed up
e. Backup schedules
f. Individuals responsible for the backup/recovery procedures
g. Circumstances where backup data was used for non-disaster data retrieval (This is important when addressing contentions that backup data is “not reasonably accessible” and hence need not be produced)
h. Under what circumstances are the storage schedules modified?
a. Outside services used, if any12. Current litigation holds in place
b. Server and workstation software, including versions details
c. Server and workstation storage
d. Lists of users
e. Location of email files
a. If upgrades exist, are the old software versions still supported?16. Reports generated as part of the normal operation of the business, including the individuals to whom the reports are distributed
b. Do any systems on the network still have access to the legacy system and data?
c. List archived media that contains data accessible with the legacy systems