Lorne -
A point of clarification (maybe for me). It used to be that the hold was placed only on existing content. The search was run one-time and whatever results came back received a hold. Has that changed? (I'm sort of reading between the lines in your response.)
I don't know of a way to protect new content. Obviously it's unlikely to hit the retention period but it can technically be manually deleted.
Sona - Once something has a hold on it, it's well protected. Search is definitely the way to accomplish that task but I'm relatively sure that this is a one-shot operation. If you have a long-running matter you may need to "refresh" the hold with another case/search.
Rob
------------------------------
Robert Bogue
President
Thor Projects LLC
------------------------------
Original Message:
Sent: 10-27-2020 10:30
From: Lorne Rogers
Subject: Legal Hold in MS Teams and Sharepoint sites
Sona,
The only aspect of holds that are at a user level is for mailboxes, and that's because mailboxes are assigned to users (be that an actual person or a "system user". However the rules for the hold are established independent of individual mailboxes. In terms of the other M365 services (i.e. Teams, OneDrive, Planner, etc.) the holds for eDiscovery are the same – they are established based upon the query(ies) you create:
Let's say you want to put a hold on all instances of the word "travel" as shown above. And you apply it across all the locations (locations=the different M365 services for the eDiscovery functionality) in your environment. That means any time M365 finds "travel" the email, file, chat or other object will have the hold applied. You can set a from-to data range or you can leave it open and it will run until you stop it.
A few things to keep in mind:
- The eDiscovery search , even advanced eDiscovery, does not provide capabilities such as redaction (so you're only providing the information required and not what is outside the scope).
- It can take up to 24 hours after you initiate the hold for it to actually be applied.
- Advanced eDiscovery requires E5 licenses (the most expensive tier) and the basic (or 'core") eDiscovery does not meet EDRM (Electronic Discovery Reference Model) standard
- Only Advanced eDiscovery provides the workflow
Does that help clarify?
Standards Council of Canada (SCC) ISO/TC 171/SC 2 Mirror Committee (MC) Member
Original Message:
Sent: 10/27/2020 7:59:00 AM
From: Sona Moideen
Subject: RE: Legal Hold in MS Teams and Sharepoint sites
Thank you Lorne. So how can we apply litigation hold on future Teams channel conversations and sharepoint site collections, means a teams channel created after we have applied legal hold? Also how do other organisations manage legal hold in such cases. Legal hold is applied on an individual user and not on the whole Teams channel members.
KInd regards
Sona
Diageo
------------------------------
Sona Moideen
Records and Information Management Analyst
Diageo
------------------------------
Original Message:
Sent: 10-26-2020 17:37
From: Lorne Rogers
Subject: Legal Hold in MS Teams and Sharepoint sites
Hi Sona,
Well first off Teams doesn't store any documents itself. Documents are kept either in the SharePoint Online (SPO) site collection that gets created when you create a Team (and has an associated 365 Group) or in OneDrive when files are shared person-to-person.
In terms of Microsoft 365 holds and eDiscovery and how it is done, you can check out this article: https://bit.ly/34vDhnZ
You can also feel free to ping me directly if there are questions that the article either doesn't answer or brings up!
Standards Council of Canada (SCC) ISO/TC 171/SC 2 Mirror Committee (MC) Member
