When you think of data collection in the context of e-discovery, the first technique that may come to mind is the forensic imaging of data sources. A full bit-by-bit copy of all the data on a custodian’s computer casts a wide net that catches deleted file remnants and at least as much system information as it does potentially relevant data.
That’s useful in some situations, but if you’re thinking more critically these days about the data you collect for litigation and internal investigations, take a look at the infographic below for some guiding principles.
