Legal pulls an employee’s personal email from a BYOD device into eDiscovery without a protocol separating work from private messages. What risk does this highlight?
Select an answer to reveal the explanation.
Short Explanation
Lawsuit hold is not a free pass to vacuum someone’s private inbox off a personal phone. Scope the collection, minimise what you take, and use a protocol. BYOD eDiscovery still has privacy brakes.
Full Explanation
Litigation preservation must be reconciled with data minimisation, purpose limitation, and confidentiality when devices mix personal and work data. Unfiltered collection of private email from BYOD increases unnecessary processing and confidentiality risk. Controllers and counsel should define collection scope, use targeted search where possible, document legal bases, and avoid treating personal content as automatically in-scope.