Who Really Controls the Data on an Employee’s Personal Phone?

ModeOne
Contact

ModeOne

Mobile devices have become one of the most important sources of evidence in modern litigation and investigations. Yet the legal framework governing discovery obligations was written long before smartphones became the primary tool for business communication.

This disconnect is the focus of a forthcoming article by Judge Xavier Rodriguez in the Journal of Technology Law & Policy, which examines one of the most pressing questions in discovery today: Who actually has “possession, custody, or control” of data on an employee’s personal mobile device? Excerpt here.

For litigators, corporate counsel, and discovery professionals, the answer is far from straightforward.

The Problem: Mobile Devices Blur the Line Between Personal and Business Data

In today’s workplace, employees frequently use their personal devices to communicate with colleagues, clients, and business partners. Text messages, messaging apps, and mobile email are often used interchangeably with traditional corporate communication tools.

This practice, commonly referred to as Bring Your Own Device (BYOD), has created a significant challenge for discovery.

When litigation arises, relevant communications may exist on devices that the company does not own and cannot physically access. At the same time, those communications may directly relate to business decisions, employment issues, or contractual discussions.

The result is an increasingly common question during discovery:

Does a company have an obligation to collect data from employees’ personal phones?

Courts Are Split on the Answer

Federal Rule of Civil Procedure 34 requires parties to produce documents and electronically stored information within their “possession, custody, or control.”

But the rules do not define what “control” means in the context of personal devices.

As a result, courts have developed different approaches for determining whether a company must collect mobile data from employees. Some courts focus on whether the organization has the legal right to obtain the information. Others consider whether the company has the practical ability to access it.

These different interpretations can lead to very different outcomes.

In some cases, courts require corporations to collect and produce text messages or other mobile communications from employee-owned devices. In others, courts treat those devices as outside the company’s control, leaving the requesting party to pursue the data through individual subpoenas.

This inconsistency creates uncertainty for both requesting and responding parties.

Why This Matters for Modern Discovery

The stakes are high.

Mobile communications increasingly contain critical evidence in employment disputes, antitrust matters, trade secret cases, and internal investigations. In many situations, text messages or encrypted chat applications may be the only record of key conversations.

At the same time, collecting data from personal devices raises legitimate concerns about employee privacy and corporate overreach. Organizations must balance their discovery obligations with the practical realities of employee relationships and personal data protection.

As Judge Rodriguez notes, the legal standards currently used by courts may not adequately address these competing concerns in a world where mobile devices are central to professional life.

The Larger Conversation: Discovery Rules in a Mobile-First World

The broader issue highlighted by the article is one that legal teams are encountering more frequently: discovery rules written for a different technological era are now being applied to a mobile-first workplace.

Smartphones are always on, always connected, and deeply integrated into both personal and professional communication. Yet the legal framework governing discovery still relies on concepts developed decades before this shift.

As courts, policymakers, and practitioners continue to grapple with these issues, one thing is clear: mobile data strategy and preservation planning are becoming essential components of modern litigation readiness.

Organizations that understand where relevant data lives (and how it can be preserved and collected responsibly) will be far better positioned to navigate the evolving discovery landscape.

Written by:

ModeOne
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA

  • Increased readership
  • Actionable analytics
  • Ongoing writing guidance

Join more than 70,000 authors publishing their insights on JD Supra

Start Publishing »

ModeOne on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide