Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« Privacy, The 5th Amendment And PGP Passwords | Main | Egregious Privacy Infringment: Fire Chief Emails Photo Of Topless Crash Victim »

E-Discovery Decision Demonstrates Need For Effective Retention Practices: A Great Case Study For E-Discovery Training

I'm still catching up on December news...and I ran across a significant e-discovery ruling. The U.S. District Court for the Central District of California ruled December 13, 2007, that Justin Bunnell/www.TorrentSpy.com was guilty of "willful spoliation of evidence" violating the E-Discovery Rule in the suit Columbia Pictures, Inc. brought against them for copyright infringement.

Reading through the court records, it is really amazing how blatantly the defendent violated what seemed to be almost every e-discovery rule possible in this situation. They...

* Actively pursued deleting and modifying "'hundreds or thousands' of postings on the Terrentspy forums that included references to copyright infringement." One of Torrentspy's senior managers even posted the following to forum moderators, "We need to make sure that these forums stay clear of anything related to piracy. If people talk about piracy or ask for pirated works, then it can be used against us in court. Please make sure to be on the watch for these kinds of things and remove them promptly. I'd even recommend using the search engine to find past threads that may hurt us."

What was he thinking!? He obviously did not understand his legal obligations for e-discovery.

Besides deleting postings, the moderators also modified original postings in an attempt to remove evidence of actual piracy activity.

* Deleted directory headings for copyrighted works, while still making the copyrighted works available.

* Deleted/modified user IP addresses. According to records they actually did this AFTER they claimed they never recorded full IP addresses! However, some discovered forum postings from the moderators revealed that full IP addresses were indeed collected regularly.

* Stated, under oath, that the actual names and addresses of all the Torrentspy's moderators were unknown, but then interviews with some of the volunteer moderators revealed that they did, indeed, provide their real names and addresses...and in fact Torrentspy mailed Torrentspy t-shirts to the volunteer moderators.

What were these guys thinking!?

The incredible mountain of evidence and willful destruction of evidence led to the court's ruling against Torrentspy.

In a ruling earlier in the year, a magistrate judge imposed lesser sanctions and a $30,000 fine for withheld evidence in an earlier proceeding. The magistrate warned the defendant then that more serious sanctions would be imposed for continued non-compliance.

But they continued to try and modify and delete the electronic evidence.

What were these guys thinking!?

I found the judge's summary interesting:

"Defendants' conduct during discovery in this case has been obstreperous. They have engaged in widespread and systematic efforts to destroy evidence and have provided false testimony under oath in an effort to hide evidence of such destruction. Indeed, Defendants' lateness and incomplete responses to discovery requests have led the Magistrate Judge to warn or sanction them on more than one occasion. Although termination of a case is a harsh sanction appropriate only in "extraordinary circumstances," Halaco Eng'g Co. v. Costle, 843 F.2d at 380, the circumstances in this case are sufficiently extraordinary to merit such a sanction. Lesser sanction would not be adequate to punish the defendants for the wrongful conduct and ameliorate the prejudice and harm to the plaintiffs."

I learned a new word...but it's a great one: obstreperous. "1 : marked by unruly or aggressive noisiness : clamorous 2 : stubbornly resistant to control : unruly"

What kind of lawyer(s) did Torrentspy have? It seems like they must not have had any knowledge of computer technology or electronic data, logging, etc.

What procedures do you have in place for e-discovery at your organization?

Last year I wrote a white paper following the release (in December 2006) of the updated E-Discovery Rule; "E-Discovery Quagmires."I also have posted several times about the e-discovery issues, such as here and here.

Take the information and talk to your company's legal counsel about e-discovery issues, and make sure your e-discovery policies and procedures are up-to-date and effective.

You don't want to make the news headlines and have all the readers wonder about your company, "What were they thinking!?"

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/620

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.