November 17, 2006

Ripple effect of court cases means new rules for IT

Unless your company’s legal division and IT play as a team, everyone stands to lose

If you work for a large corporation -- in any department, not just IT -- you’re probably aware of the new FRCP (Federal Rules of Civil Procedure) that go into effect on Dec. 1. The new FRCP outlines the “how, what, and wherefore” of electronic document retention and disposal. But you may not be familiar with the two cases that made the changes necessary.

The first big bang was Zubulake v. UBS Warburg. In that 2003 case, when an employee sued UBS Warburg, the company claimed it could not find relevant e-mails due to lost backup tapes. At the end of the trial, the judge instructed the jury that it could assume that the missing information was probably damaging to Warburg’s defense. Zubulake was awarded $20 million.

As part of his decision, the judge declared that companies were obliged to preserve data that might be relevant to future litigation. He directed businesses to identify the staffers who were “guardians” of the relevant information and notify them affirmatively and repeatedly of their duty not to destroy that data. Finally, he outlined steps to monitor guardians’ compliance.

The process articulated by the judge in Zubulake v. UBS Warburg describes a procedure now called “legal hold” or “litigation hold,” and it is already followed by many companies today.

The second big bang, Perleman v. Morgan Stanley, also turned on technology. This time the defendant paid even more dearly for its sloppiness. Morgan Stanley was asked to produce e-mails from certain executives sent during a certain period of time. The company used backup tapes to comply. After it turned over the relevant tapes, and the opposing lawyers signed off, the IT department suddenly discovered another 120 tapes with additional backed-up messages in a closet.

Morgan Stanley’s attorneys sent a letter to the judge advising him of the additional material. Then IT found still more tapes, and when the lawyers told the judge about the additional e-mails, he was miffed. Morgan Stanley was fined $604.3 million in compensatory damages, and $850 million in punitive damages.

Legal thought it had everything under control. IT thought it had done its job. The clear lesson is that if legal and IT aren’t playing as a team, everybody loses.

The third big bang was the release of the new federal rules, largely based on these two catalytic cases. The new rules are another reminder that when companies don’t police themselves, they will be policed by external enforcers.

Ephraim Schwartz is an editor at large at InfoWorld. He also writes the Reality Check blog.
Close

On Twitter now

Application development

Powered by Twitter

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive InfoWorld Resource Alerts

Subscribe to the Developer World Newsletter

Receive a weekly roundup about the art and science of software development.

©1994-2009 Infoworld, Inc.