Hey everyone, I just received a litigation hold notice regarding a current employee, but the issue is that the laptop is still in active use. What's the best approach to handle this situation? Can I just take the laptop and say we need to preserve the data, or is there a better way to go about it?
6 Answers
When we get a similar request, we clone the disk and hand over the copy to whoever handles it. Just make sure legal and HR are in charge of this process.
Following court orders is serious business. Not doing what they require can lead to major issues, so make sure you’re following the right protocols.
It's crucial to wait for official instructions from legal. You really don’t want to mess up the chain of custody here.
You really should consult your legal department about this. They’ll know the correct steps to follow since we’re sysadmins and not legal experts.
Exactly! Legal should take the lead, and we just need to follow their direction.
True! Plus, they might ask about backups. You might need to implement some file-level backup if you don't have it already.
If this request is coming from outside your company, get in touch with your employer’s attorney right away. They can guide you through the process.
HR and legal should issue the directive for how to manage this. You don't want to start any investigations without written consent from them first.
Definitely! I usually set up litigation holds in O365 and follow whatever instructions legal gives me.
Yeah, but remember that this isn't a court order—just a memo.