Office 365 eDiscovery E-Mail Search Limitations

357c90_0ee052469a8f4b6e918e0897e174fadeOffice 365 is enjoying continued success – driven partly by the popularity of Microsoft Outlook.  Outlook, according to the Radicati Group, is the most popular business email client on the market, with a 60% market share in 2015. For years to come, Office 365 will be used by companies to conduct the electronic discovery of e-mail.

Given the significance of Office 365, what are Office 365’s e-mail search limitations from a discovery perspective?  What do users need to be aware of when conducting litigation, internal investigations and regulatory compliance?

Overview

The eDiscovery cases page in the Office 365 Compliance Center is where cases are accessed and managed.  Here, users can identify relevant e-mail and place litigation holds on sources such as SharePoint and Exchange (Exchange is the Office 356 mail store).  Holds can be placed based on key word queries, dates, authors, senders, and e-mail domains.

When searching for keywords, standard Boolean (AND, OR, NOT) and proximity operators (NEAR(n)) can be used, as well as wildcards* that expand keywords to include terms that contain part of a keyword or terms that have alternative spellings.

From what we can tell, Office 365 is still using the FAST search engine and Continuous Crawl which insures that new items are almost instantly searchable.

Limitations

There are clear e-mail search limitations in Office 365 to be aware of when conducting eDiscovery.

  • OCR.  Because OCR is not being performed by Office 365, image-based files will not

  • be searched (if OCR is added at some point – which is unlikely – check with Microsoft Support on the OCR engine.  Not all OCR engines support the recognition of Chinese, Japanese and other foreign languages).

  • Password-Protected Attachments.  Password-protected e-mail attachments are not searched.

  • Indexing of Special Characters.  Special characters (e.g., those often found in patent cases, such as “, . / – ‘ _ &”) are not indexed, which can result in a higher number of documents in the attorney review stage of the eDiscovery process.

Proportionality

Understanding its limitations, should Office 365 be used for eDiscovery search?  If so, to what extent?  As a testifying eDiscovery expert, I have firsthand experience in cases in which companies performed electronic discovery using the basic features such as those offered by Office 365.  When evidence is missed, the consequences can be very severe.

The key is properly weighing these proportionality factors from the soon-to-be-updated Federal Rules of Civil Procedure (Rule 26(b)(2)(C)(iii):

  • the needs of the case

  • the amount in controversy

  • the parties’ resources

  • the importance of the issues at stake in the action, and

  • the importance of the discovery in resolving the issues.

Consider leveraging the Proportionality Triangle as you consider your eDiscovery process for a given case.

Conclusion

Office 365 offers a significant amount of utility with regards to litigation holds and preservation.  However, it’s e-mail search capabilities have distinct limitations.  Consider these limitations as you determine the shape of your eDiscovery process.