Back to Browse Magazine

2023 - November and December - page 22

Image details

Issue number 395
ISSN 2632-7171
Publication date 1st November 2023
Transcription magazine Feature
Microsoft Purview
eDiscovery: An intro for
Information Managers
You may have heard the Microsoft 365 terms ‘Purview’
and ‘eDiscovery’ floating around, but what actually
is Microsoft Purview eDiscovery? And how can
information managers and governors benefit from it? In
this article, Jacqueline Stockwell, CEO and Founder of
Leadership Through Data provides the answers.
What is eDiscovery?
Electronic discovery, or eDiscovery, is the process of
identifying electronic information while it remains in situ
in records repositories and can be used as evidence in:
• Legal cases
• Freedom of Information requests or other Official
Information Act requests
• UK General Data Protection Regulation and UK Data
Protection Act or other Privacy Act requests, such as
request for deletion or subject access.
scrutinised in a separate location from the original.
This set of tools can also be used for other business
scenarios when searching across the whole Microsoft 365
ecosystem is required. Here are a few examples:
• Requests from external agencies for specific
information held by the organisation, such as a
request from the police
• Internal investigations into user activities, useful in
HR matters
• Responding to Inquiries such as the COVID-19
Inquiry.
What can you do with Microsoft Purview eDiscovery
(Premium)?
If your organisation has an Office 365 E5 or Microsoft
365 E5 subscription (or related E5 add-on subscriptions),
you can further manage custodians and analyse content
by using the feature-rich Microsoft Purview eDiscovery
(Premium) solution in Microsoft 365.
How do I use eDiscovery as an information manager?
You can use eDiscovery tools in Microsoft Purview to
search for content in Exchange Online, OneDrive for
Business, SharePoint Online, Microsoft Teams, Microsoft
365 Groups, and Microsoft Viva.
You can search mailboxes and sites in the same
eDiscovery search, and then export the search results
as a copy. The source items remain available to the
organisational operations in normal repositories whilst
the case is being investigated.
You can use Microsoft Purview eDiscovery (Standard)
cases to identify and export a copy of content found
in mailboxes and sites that can be manipulated and
22
You can also use the standard eDiscovery to identify
and estimate the size of request information that
would be returned, which can help to judge Freedom
of Information or similar requests. The export results
function can also be helpful for refinement of queries
and conversations with requestors, drilling down to the
data that really matters, prior to completing a full export
of the content itself.
Microsoft Purview eDiscovery (Premium) cases can be
used to create ‘holds’ to preserve content that might be
relevant for your case:
• You can place ‘holds’ on users and their data sources.
• You can also place ‘holds’ on mailboxes (including
group mailboxes), SharePoint sites, OneDrive for
Business sites, Microsoft 365 groups as well as
mailboxes and sites associated with Microsoft Teams.
• When content locations are placed on ‘hold’, content
can’t be removed until these locations are released
from hold.
• These holds can be visible or hidden to users
depending on the context.
If there is a requirement to redact or annotate the data
this can also be achieved by enabling a PDF version of
the information to be exported, adding additional layers
of information protection during a case review.