What should change in how I handle evidence once an IP dispute becomes likely?

During normal work, teams replace drafts, delete old messages, recycle devices and close former employees’ accounts. Once a dispute becomes likely, those same actions can remove information needed to understand what happened. This matters whether you intend to bring a claim or are responding to one.

Begin planning before a lawsuit is filed: records may disappear while the parties are still assessing their positions or discussing a resolution. The practical steps below help preserve material for later examination. Legal duties to retain or disclose it, the point at which those duties arise and the consequences of loss vary by jurisdiction. Ask your adviser which rules apply, including where the people and records are in different countries.

Agree what needs preserving and who will coordinate it

Identify the disputed work or information, relevant events and likely time period with your adviser. Then locate the people, systems and physical items that may hold evidence. For an IP dispute, these might include development repositories, shared workspaces, disclosure emails, access logs, laboratory notebooks, prototypes and retained product samples.

Assign someone to coordinate the practical work with legal advisers, IT and the relevant project team. Keep a record of the instructions, actions taken and unresolved gaps. The scope should follow the issues in the dispute and be reviewed as they become clearer.

For help defining the subject matter, see how to identify the work or know-how at issue in an IP dispute.

Interrupt routine deletion where it affects relevant records

Check automatic message deletion, log retention, backup rotation, account closure and device replacement. Tell the people responsible which records must be retained, and confirm that the necessary changes have actually been made. Include relevant service providers and others holding material on your behalf.

Retain relevant material even when it weakens your account. Your adviser needs the complete picture to assess the dispute, including conflicting versions and correspondence. Agree a targeted retention plan covering the relevant records and time periods, rather than stopping all deletion indefinitely. Whether particular material must later be disclosed, and whether legal privilege or other protections apply, are separate questions for your lawyer.

Consider a hypothetical dispute about a former collaborator’s use of a process. Your final process sheet survives, but messages explaining which version was shared expire after 30 days. A departing project manager’s laptop is also due to be reassigned. Copying the process sheet alone would leave both sources of context at risk. The immediate task is to coordinate preservation before those routine actions proceed.

Agree a collection method before investigating

Ask IT or a digital-forensics specialist how to preserve the relevant systems before staff start opening files, installing recovery tools or searching devices themselves. Prioritise information that changes quickly or may soon become unavailable. Decide what needs specialist acquisition and what can be collected through a documented export.

Include timestamping in the collection plan where useful. Once the files have been collected, timestamp the preserved set together with the collection report identifying its sources, the method used and the person responsible. This creates a dated reference for the material collected. Keep the collection time recorded separately from the time the timestamp was obtained.

Where there is an active leak, coordinate containment and preservation. Necessary security measures may change the system; record what was done and why. Avoid treating either evidence collection or continued exposure as something to leave unmanaged while the other is addressed.

NIST’s guidance on forensic collection emphasises planning, the volatility of data and documenting acquisition. It provides technical principles for specialists, rather than a universal procedure for collecting evidence in an IP case.

Retain usable originals and document handling

Keep original-format files, relevant metadata and the context needed to interpret them. An email export with its attachments and headers retains information that a pasted quotation may omit. A repository may contain relevant history beyond the latest source-code download.

Agree the preservation format with the person responsible for collection. A PDF or screenshot may be useful for reading, while leaving out information needed to examine the source record. If you create a redacted or annotated copy, retain the unaltered material and identify the copy clearly.

Store preserved material securely, limit access and use identified working copies for review. Record who collected each item, its source, the date, the method and subsequent handling or transfers. Specialists can document integrity checks as part of that process. This handling history is commonly called the chain of custody; NIST’s collection guidance explains the underlying practices.

Keep any timestamp certificates and verification data alongside the exact files they cover. These allow a reviewer to check whether a later copy matches the timestamped material. Read more about what a digital timestamp establishes and what independent verification means.

Keep new explanations, annotations and comparisons separate from the preserved records. If something is already missing or has changed, document the gap and tell your adviser so that possible recovery or alternative sources can be assessed.

Coordinate contact and disclosure with your adviser

Before sending a demand letter or asking the other side to return or delete material, discuss the evidence implications. In trade-secret disputes, WIPO warns that alerting the alleged wrongdoer may lead to concealment or destruction and affect possible preservation measures. See its guidance on collecting evidence for proceedings.

In the EU, Article 7 of the IP Enforcement Directive provides for court-ordered measures to preserve relevant evidence, potentially before proceedings on the merits and, in specified circumstances, without first hearing the other party. These measures require supporting evidence and are subject to safeguards. They are distinct from your own retention arrangements; the directive does not establish a general EU-wide duty to freeze records whenever a dispute seems possible. Your adviser can assess the available national procedure.

Collection also needs to respect applicable privacy, employment and access rules. Having access credentials does not by itself settle whether you may search a personal account or retrieve a former colleague’s files. Agree the lawful route and scope with your adviser.

Preserving material does not mean sending it all to the opposing party. Keep confidential information controlled while your lawyer assesses what must be disclosed, in what form and with which protections. For EU trade-secret proceedings, Article 9 of the Trade Secrets Directive provides for measures such as restricted access to documents and hearings and non-confidential versions of decisions, while protecting the parties’ right to a fair trial.

Review the preservation arrangements as the dispute develops, and obtain advice before resuming deletion of the affected records.