Plan and manage cases in the eDiscovery Center

6/7/2019
3 minutes to read
- +1

APPLIES TO: yes 2013 yes 2016 yes 2019 SharePoint Online

Electronic Discovery, or eDiscovery, is the discovery of content in electronic format for litigation or investigation. This typically requires identifying content spread across laptops, email servers, file servers, and many other sources.

The eDiscovery Center is a SharePoint site collection used to perform electronic discovery actions. In an eDiscovery Center, you can create cases, which are SharePoint sites that allow you to identify, hold, search, and export content from SharePoint sites, and searchable file shares.

Note

Once you add content sources or queries to an eDiscovery case, changing the regional settings for the site is not supported. > In order for content to be discovered, it must be crawled by search. For more information about the default file types that are crawled, see the article Default crawled file name extensions and parsed file types in SharePoint Server 2013.

Planning and creating cases

If you anticipate managing multiple cases in your eDiscovery Center, consider whether you want to define consistent processes for people in your organization to follow.

Naming conventions for cases - Could matter if you anticipate a larger number of cases, or different types or classifications of cases, for different departments,
Additional data to describe cases
Defining and communicating permissions for managing cases.
Guidelines on creating queries
Standard procedures for communicating when content is placed on hold
Standard procedure for retaining and closing cases

Example lifecycle of an eDiscovery case

Create the site to manage a case
Add sources
Place sources on hold
Create queries
Export case content
Close case

Create a case

In an eDiscovery Center, click Create new case.
Type a title and description for your case.
In the Web Site Address box, type the last part of the URL you want for the case, such as ContosovsFabrikam.
Under Select a template, make sure that eDiscovery Case is selected.
Under User Permissions, select whether or not to keep the same permissions as the parent site or use unique permissions. If specific people will need access to this case, but not to other cases, you should choose Use unique permissions.

Add sources and place them on hold

In the eDiscovery Center, open the case that you want to add a source to.
Click eDiscovery Sets.
Type a name for the eDiscovery Set, such as Executive Correspondence.
Next to Sources, click Add & Manage Sources.
Under Locations, type the URL or file share address for the content you want to use as the source. Any content you include must be indexed by search.
Click Save.
In the box under Filter, type any keywords you want to use to narrow down the source.
To narrow down content by a date range, enter the Start Date and End Date.
To limit results to the author of a document or list item, or to a specific sender of e-mail messages, type the names or e-mail addresses in the Author/Sender box.
Click the Apply Filter button.
Click Enable In-Place hold.
To verify that you've selected the right content, click Preview Results.
Click Save.

For more information, see Add content to a case and place sources on hold in the eDiscovery Center.

Run queries and export content

Once you have defined your sources, and placed them on hold if necessary, you can run queries to narrow down and extract exactly the content you need for a particular case. SharePoint has some tools that can help you refine your queries.

You export content from a case when you are ready to deliver it to an authority or want to work on it with another legal program. The content is exported in a format that is compatible with the Electronic Discovery Reference Model standard.