1. “It is better to remain silent and be thought a fool than to post on Facebook and remove all doubt.” Mark Tweet 1

2. Social Media & Ediscovery Want To Be My Friend? Jake McKee, Kroll Ontrack November 20th, 2013

3. Discussion Overview  Why should Social Media be considered in discovery?  Where does discoverable Social Media reside?  What social media information is discoverable?  Learning to collections.  Social Media Best Practices 3

4. 4 Social Media: a staple in everyday communication Number of Active FB Users (millions)  In July 2012, Americans collectively spent 121 billion minutes using social media - almost a quarter of 521 billion minutes spent online »Compare to July 2011, where Americans spent 88.4 billion minutes using social media  In October 2012, Facebook surpassed 1 billion users »Twitter reported 500 million users by February 2013 –Approximately two new members joining per second »Linkedin at 150 million users in 2012 -Nielsen, State of the Media: The Social Media Report (2012)

5.  More than 80% of companies are using social media to communicate with potential clients and drive new business. 5 -Worldcom, Corporate Social Media Spent to Increase Among B2B Companies Globally According to Worldcom Survey (May 2011) Social Media: not limited to personal communications -Marketing Land, Game Over : Twitter Mentioned in 50% of Super Bowl Commercials, Facebook Only 8%, Google+ Shut Out (Feb. 2013)  During Super Bowl XLVII, more than half of the ads shown mentioned Twitter or Facebook  Many companies now leverage enterprise social networks for communications with the organization: Typical websites now offer 4+ links to share on social media.

6. 6 Why should Social Media be considered in discovery?  Social media is readily available anywhere, anytime—and with increasing efficiency—via: »Texts »Instant Messages »Chat Rooms »Blogs

7. “What a wee little part of a person’s life are his acts and his words! His real life is led in his head, and is know to none but himself and all his Face Book friends.” Mark Tweet 7

8. Where does discoverable social media reside? 8 »Comments & Messages –Tweets, wall comments, status updates, posts »Photos –Profile pictures, albums, pictures others tag you in »Videos »User Information –LinkedIn resume, things ‘liked,’ username, date of birth, location, employment & education info, groups joined »Metadata

9. 9 What social media information is discoverable? social media data is discoverable

10. 10 Court ordered production of data from Facebook and MySpace account: privacy is “wishful thinking” Romano v. Steelcase Inc., 907 N.Y.S.2d 650 (N.Y.Sup. Sept. 21, 2010). Plaintiff ordered to preserve existing information on MySpace and Facebook: provide user names and passwords to opposing counsel McMillen v. Hummingbird Speedway, Inc., No. 113-2010 CD (C.P. Jefferson Sept. 9, 2010). Court ordered production of user names and passwords: private portions of social media accounts are “fair game” Zimmerman v. Weis Markets, Inc., No. CV-09-1535 (C.P. Northumberland May 19, 2011). What social media information is discoverable? You post User Content... on the Site at your own risk. Although we allow you to set privacy options that limit access to your pages, please be aware that no security measures are perfect or impenetrable. - Romano v. Steelcase Inc. (citing Facebook’s privacy policy (last viewed June 18, 2009))  Early disputes: public versus private information »What about the private sections of your Facebook?

11. What social media information is discoverable? 11 Is everything discoverable? Courts are settled that social media is discoverable, but not how much is discoverable E.E.O.C. v. Original Honeybaked Ham Co. of Georgia Inc., 2012 WL 5430974 (D. Colo. Nov. 7, 2012): Reasoned that social media data was the logical equivalent of an “everything about me” folder with a bevy of relevant information. Private Sections? Narrow Broad Mailhoit v. Home Depot U.S.A., Inc., 2012 WL 393063 (C.D. Cal. Sept. 7, 2012): The Federal Rules do not grant a “generalized right to rummage at will through information [a person] has limited from public view” absent a Rule 34 showing of “reasonable particularity” in request for data.

12.  The court’s protocol involved the following steps: 1.The court would appoint a special master forensic expert 2.Cell phones and access codes for emails/social media were to be provided directly to the special master 3.Parties were asked to: collaborate on a questionnaire to identify devices and accounts relevant to special master’s inquiry; create instructions to define material to be collected by special master; and identify areas of dispute for court resolution 4.Special master was ordered to: supply information for court to determine in camera which responsive information to provide to defendant (carving out room for potential privilege claims by the EEOC) 12 E.E.O.C. v. Original Honeybaked Ham Co. of Georgia Inc., 2012 WL 5430974 (D. Colo. Nov. 7, 2012). What social media information is discoverable?

13. What social media information is discoverable  Prohibits: »Electronic Communication Service (ECS) and »Remote Computing Service (RCS) providers  From: »knowingly divulging the contents of a communication it stores  Unless the divulgence is: »to an intended recipient of such communication or express permission from the sender is obtained Does the Stored Communications Act prohibit production of social media? 13

14. May I obtain contents of a user’s account from Facebook using a civil subpoena? “Federal law prohibits Facebook from disclosing user content (such as messages, timeline posts, photos, etc.) in response to a civil subpoena. Specifically, the Stored Communications Act, 18 U.S.C. § 2701 et seq., prohibits Facebook from disclosing the contents of an account to any non-governmental entity pursuant to a subpoena or court order. Parties to civil litigation may satisfy discovery requirements relating to their Facebook accounts by producing and authenticating contents of their accounts and by using Facebook’s "Download Your Information" tool, which is accessible through the "Account Settings" drop down menu.” http://www.facebook.com/help/133221086752707/ 14

15. 15 Who do I seek information from when cooperation ceases? Seek court order to obtain party’s login information? Subpeona social networking site provider? Crispin v. Christian Audigier Inc., 717 F.Supp.2d 965. Zimmerman v. Weis Markets, Inc., No. CV- 09-1535. McMillen v. Hummingbird Speedway, Inc., No. 113-2010 CD. SCA

16. “When angry, count to four; when very angry, tweet!” Mark Tweet 16

17. 17 Learning to Collection  Metadata is data about data Text of post - not metadata Key responsive metadata!

18. “ 18 The Evidentiary Power of Social Media “ [Some social media collection tools are] now able to map a given location, such as a city block or even a full metropolitan area, and search the entire public Twitter feed to identify any geolocated tweets that have been made [within a specified timeframe] Source: http://blog.x1discovery.com/2013/02/21/live-social-media-evidence-capture-from-todays-vegas-strip-shooting/http://blog.x1discovery.com/2013/02/21/live-social-media-evidence-capture-from-todays-vegas-strip-shooting/

19. 19 Learning to Collection  With social media data, all the standard discovery obligations apply, including the duty to preserve  Problems… »Changes very frequently »Stored on third-party servers »Security and privacy settings block access »Few reliable technologies available for social media preservation

20.  Assume you discover that: –Your client has been sued and –Your client has relevant non-privileged information on his LinkedIn profile?  Your options: 20 Learning to Collection Unassisted Collection Social Media Collection Tools “Download Your Information” 1. 2. 3.

21. Use ‘print screen’ to capture relevant information Screen/video capturing programs do exist  Nothing wrong with “old school” collection 21 Learning to Collection Unassisted Collection 1. 2.3. Simply ‘Googling’ a name works extremely well Flag other social media profiles he has for review Effective social media search tools do exist Create a log of exactly how and when you documented the webpage; this is essential for authentication Hold on to the images! Profiles are ‘subject to change’

22. Navigate to the General Account Settings Page to You then will get an ‘archive’ of that user’s Facebook account; as Facebook explains: Is this everything you need? Maybe. It’s entirely possible that the scope of discoverable information may be broader than what’s included in the “archive” Remember to document the process extensively  Facebook has a tool that can ease collection 22 Learning to Collection Unassisted Collection 1. 2.3. “Download Your Information” 2.

23. Social media collection tools assist social media collection Some platforms allow you to search social media sites With credentials (court ordered or otherwise), or From a third party perspective – you get to see what’s public Some solutions allow you to add Boolean logic to search the data pool E.g., “fired AND new york” These programs leverage Facebook’s APIs enabling the collection of available metadata  New tools in the ediscovery industry 23 Learning to Collection Unassisted Collection 1. 2.3. “Download Your Information” 2. Social Media Collection Tools 3.

24.  Best Practices »Consider social media production problems (e.g. native format) upfront when negotiating at the Rule 26(f) meet and confer »Don’t try to collect social media without consent of the owner »Don’t get overwhelmed: consider enlisting the help of an investigator or service provider if a case size is massive or deadlines are tight »Communicate to your client the importance of prior postings to litigation and the far reaching repercussions of spoliation sanctions 24 Learning to Collection

25. “I don’t give a damn for a man that can only tweet a word in one way.” #dumfella Mark Tweet 25

26. Social Media Best Practices  Organizations should: »Control access »Monitor usage »Articulate clear policies »Ensure understanding »Update, disseminate and make information accessible 26 Onus is on organizations to set policies regarding social media use in the workplace

27. Social Media Best Practices  Develop a social media policy that clearly identifies what is and is not acceptable  No “one size fits all” approach  Policy reflects both corporate culture and law  Must understand: »Your company’s brand »Tolerance for dissent and risk »Relationship with workforce  Balance those factors with what the law requires/allows 27

28. ACME Co. Social Media Policy 28

29.  Possible policy elements include: »Clear guidelines on proper social media use »Consequences of non-compliance »Employee training »Specifics on what employees can and cannot divulge 29 Social Media Best Practices

30. Parting Thoughts 30  Stay updated on social media— it will only continue to expand  Pay attention to case law, new legislation, and ethical guidance  Address social media challenges at every stage of the EDRM  Consider Social Media a data source in the discovery process

31. Jake McKee Kroll Ontrack Houston 281-639-0762 jmckee@krollontrack.com 31