From EDRM
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9
- All information on a file's travels from its original creation version to its final production version. A detailed account of the location of each document/file from the beginning of a project until the end. A sound chain of custody verifies that you have not altered information either in the copying process or during analysis. If you cannot show the chain of custody, you may have a difficult time disproving that outside influences might have tampered with the data. A chain of custody failure — i.e., the mishandling of electronic evidence (even fully recovered files) — can cause a litigation defeat.[1]
- A process used to maintain and document the chronological history of the handling of electronic evidence. A chain of custody ensures that the data presented is "as originally acquired" and has not been altered prior to admission into evidence. Some providers maintain an electronic chain-of-custody link between all electronic data and its original physical media throughout the production process.[2] [3]
- An accounting of the control (custody) of real evidence at all times until the moment it is offered in evidence. Chain of custody helps to show that the evidence being offered has not been tampered with and is authentic. Chain of custody is important for electronic evidence because it can be easily altered.[4]
See also
Footnotes
- ^ Fenwick & West LLP, FWPS eDiscovery Terminology (11/6/2005). Citing Feldman, The Essentials of Computer Discovery, Computer Forensics Inc. (1/1/2001), http://www.forensics.com/pdf/Essentials_of_Discovery.pdf#page=12.
- ^ RenewData, Glossary (10/5/2005).
- ^ Vinson & Elkins LLP Practice Support, EDD Glossary.
- ^ Ibis Consulting, Glossary.
