Top Five Tips for Using the Cloud for eDiscovery
The revolution is underway as a broad spectrum of organizations, including nearly 25 percent of U.S. law firms and the U.S. government, are now using cloud computing.1 Cloud revenue is up 20 percent this year, and is on pace to continue growing at this rate for several years to come.2
Regulators and courts have not yet had the opportunity to address e-Discovery in the cloud. However, we can apply recent principles to craft a new approach to e-Discovery that takes advantage of the cloud's unique qualities to deliver a more efficient, secure, and cost-effective data management strategy.3 Here are five important points for law firms and businesses to consider when preparing to take advantage of cloud computing:
Tip 1. Have an escape plan. Know how to get your data out, whether for discovery, compliance, or change in provider:
Having a plan is necessary to ensure that collection and production activities are consistent, efficient, and simple to explain to opposing counsel and regulators. The same advantages apply when describing data privacy and security to clients.
A plan also will help skirt major delays, data misappropriation or loss in the -- potentially unforeseen -- event of a change in cloud providers.
Tip 2. Don't just toss your dirty laundry in a drawer and forget about it. Use your migration to the cloud as an opportunity to clean house:
Most firms and companies have been doing e-Discovery on the fly for the last eight to 10 years, updating and improving their e-Discovery capabilities in a piecemeal fashion. During this time the standards for preservation and collection have grown in clarity and significance.
Moving to the cloud is a great opportunity to rebuild a highly efficient data management architecture that complies with current legal standards. Data should be organized into a comprehensive and easily navigable map to bring it into a new management regime. Obsolete data should be removed to reduce hosting costs, eliminate the risk of loss, and narrow the field for potential collections.
Tip 3. Set standards. Clearly define who can use cloud data and when:
Migration also provides an opportunity to draft a new access policy that will govern the data heading for the cloud - one that is easy to understand and implement.
Cloud data can be largely protected from employee mismanagement if employees are given access to the files they need and denied access to data unrelated to their job. Additionally, there must be clear controls in place for quickly revoking access when employees leave the organization.
Tip 4. Have an e-Discovery "Shampoo Plan." Create and test a response plan before moving to the cloud:
Your e-Discovery obligations in the cloud are the same as those for data hosted within the enterprise. You need to confirm the ability to manage, locate, and collect potentially relevant data in a defensible method. This holds true for unstructured and structured (database) electronically stored information.
Additionally, timed e-Discovery exercises should be conducted to evaluate the data transfer rate and a provider's ability to physically ship data. With enterprise data volumes continuing to increase in size, the bandwidth required to service large collections must be known and available.
Call this your e-Discovery "shampoo plan": lather, rinse, repeat . . . or design, test, repeat.
Tip 5. Know where everything is. Maintain an accurate data and system map:
It is imperative for cloud data to be accurately mapped, as cloud storage is organized logically and not physically - a powerful advantage if handled properly.4 A logical data map will allow organizations to avoid accidentally turning over unrelated or private data, but only if the map is designed properly and actively maintained.
Oh yeah, having an accurate data map makes tips 1 -- 4 possible.
1. Dan Regard offers a helpful definition of cloud computing in an E-discovery context available at: http://datariskgovernance.com/conferences/2010-georgetown-advanced-e-discovery-institute/; See also Kim, G., "25 Percent of U.S. and U.K.Legal Firms Use Cloud Computing,"TMCNet.com, available at: http://legal.tmcnet.com/topics/legal/articles/231320-25-percent-us-uklegal-firms-use-cloud-computing.htm (October 19, 2011).
2. See Pettey, C., and Stevens, H., "Gartner Says North America to Account for 64 Percent of SaaS Revenue in 2011," Gartner, available at: http://www.gartner.com/it/page.jsp?id=1791514 (September 14, 2011).
3. For a guide to conducting E-discovery of social media data similarly stored in cloud configuration, see "A Tale of Two Companies: A Social Media & eDiscovery War (2011)" by Neal Lawson and Antigone Peyton at: http://www.slideshare.net/AntigonePeyton/a-tale-of-two-companies-a-social-media-ediscovery-war-2011
4. For a more in-depth discussion of how to handle preservation and collection in a centralized, cloud environment, see Julian Ackert's blog posts "Preservation and Collection in the Cloud" and "E-Discovery and Information Management" at: http://www.law.georgetown.edu/cleblog/post.cfm/preservation-and-collection-in-the-cloud and http://www.law.georgetown.edu/cleblog/post.cfm/e-discovery-and-information-management
Neal Lawson is the president and co-founder of Washington, D.C.-based Intelligent Discovery Solutions, Inc. He is an expert in e-Discovery strategic consulting services focusing on structured data, social networking, and cloud computing. Follow him on Twitter at @IDSNeal or reach him via email at firstname.lastname@example.org.