“57. Ms Vaswani asserts that Quinn Emanuel came off the record because they had concerns about the Respondents' disclosure, and demands that the Respondents "waive privilege and explain why Quinn Emanuel suddenly came off the record" (Vaswani 32/22(d)(iv)). This is an astonishing position for the Claimants to take. The Claimants are not entitled to know the reasons why the Respondents changed their lawyers, and are not entitled to demand that the Respondents waive privilege in order to respond to the Claimants' allegations. 58. I am not willing to waive privilege, but what I can say is that the change in lawyers had nothing whatsoever to do with disclosure or Quinn Emanuel's professional obligations.”
“During the past few weeks, we have tried our utmost to advise Cooperton on how best to comply with its disclosure obligations. In particular, we have repeatedly expressed the view that the failure to search for electronic emails (whether before or after your appointment) is likely to adversely impact on the Judge’s perception of the Respondents and their Defence. Despite our best endeavours, we have not been able to agree on the proper approach. Notwithstanding our serious concerns as to whether Cooperton is complying with its disclosure obligations, and our notices that we may need to go off the record, we stayed on the record in order to ensure that Cooperton was in a position to provide disclosure on 21 September, and gave disclosure on that date in accordance with your strict instructions. …On any view, there has unfortunately been a breakdown of trust and confidence between Quinn Emanuel and Cooperton. We therefore regrettably consider that it would be in the interests of both parties for Quinn Emanuel to come off the record as soon as possible.”
“4. The reasons why those statements did not comply is due to a misunderstanding by both Mr Mavros and by Mr Georghiou as to the extent of the obligations on them. As the Court is aware, Mr Georghiou is a practising Cypriot lawyer and was heavily influenced by his view of what a Cypriot court would have expected from him. In circumstances where he believes that under Cypriot law the failure by Mr Mavros to preserve the image when carrying out the forensic exercise would have been the standard method in carrying out the forensic exercise, and in circumstances where he was content to entrust the process to Mr Mavros as an IT specialist without seeing a need to discuss the detail of Mr Mavros’s task with him, Mr Georghiou did not consider he had acted improperly. Whilst the requirements under the10th June 2020 Order and10th July 2020 were therefore explained to Mr Georghiou, the importance of precise compliance was not fully understood by Mr Georghiou. Mr Georghiou has also been very worried about the effect of any work upon his continued recovery from a heart attack, and considers a Cypriot court would have been more lenient in requiring compliance with Court orders during this time. 5. As to Mr Mavros, he did not consider he had acted in any way improperly in accordance with his understanding of Cypriot law, and therefore did not fully understand the severity of the Unless order being sought. 6. Given the relatively tight deadlines between the date of the10th July 2020 Order and the dates by which the witness statements were to be served, coupled in Mr Georghiou’s case with continued recovery from a heart attack, this witness statement was received from the witnesses at a stage too late for any further amendments and had to be served only partially compliant. Indeed, Mr Georghiou’s witness statement was received back from him after the deadline of 4pm on24th July 2020 and therefore after the deadline for compliance had already passed. 7. The position has been attempted to be rectified by way of serving supplemental witness statements by both Mr Mavros and Mr Georghiou which do comply fully with the requirements in the10 June 2020 order. These supplemental witness statements have been served on7 August 2020 . 8. Whilst therefore we accept and apologise for the lateness of the statements, we request the Court grant relief from sanctions”
“(1) On an application for relief from any sanction imposed for a failure to comply with any rule, practice direction or court order, the court will consider all the circumstances of the case, so as to enable it to deal justly with the application, including the need – (a) for litigation to be conducted efficiently and at proportionate cost; and (b) to enforce compliance with rules, practice directions and orders. (2) An application for relief must be supported by evidence.”
“26. Triviality is not part of the test described in the rule. It is a useful concept in the context of the first stage because it requires the judge to focus on the question whether a breach is serious or significant. In Mitchell itself, the court also used the words “minor” (para 59) and “insignificant” (para 40). It seems that the word “trivial” has given rise to some difficulty. For example, it has given rise to arguments as to whether a substantial delay in complying with the terms of a rule or order which has no effect on the efficient running of the litigation is or is not to be regarded as trivial. Such semantic disputes do not promote the conduct of litigation efficiently and at proportionate cost. In these circumstances, we think it would be preferable if in future the focus of the enquiry at the first stage should not be on whether the breach has been trivial. Rather, it should be on whether the breach has been serious or significant. It was submitted on behalf of the Law Society and Bar Council that the test of triviality should be replaced by the test of immateriality and that an immaterial breach should be defined as one which “neither imperils future hearing dates nor otherwise disrupts the conduct of the litigation”
“41. The very fact that X has failed to comply with an unless order (as opposed to an ‘ordinary’ order) is undoubtedly a pointer towards seriousness and significance. This is for two reasons. First, X is in breach of two successive obligations to do the same thing. Secondly, the court has underlined the importance of doing that thing by specifying an automatic sanction in default (in this case the Draconian sanction of strike out). 42. On the other hand, as Mr Weston rightly says, not every breach of an unless order is serious or significant. In Utilise the claimant was just 45 minutes late in complying with an unless order. He filed his budget by 4.45 p.m., rather than 4 p.m. when it was due. The Court of Appeal held that a delay of only 45 minutes in compliance was “trivial”
“(2) Unless, by 4pm on Friday17 July 2020 , Dencora and Unistarel comply with the obligations in respect of Mr Mavros in paragraph 4(ii) of the 10 June Order, and the obligation not being in respect of a specific witness in respect of paragraph 5 of the 10 June Order, their Points of Defence shall be immediately struck out and judgment shall be entered for the Claimants in the Wycombe Application and the Montrose Application, and the Charging Orders in the Claimants’ favour over the Wycombe Property and the Montrose Property shall be made final. (3) Unless, by 4pm on Friday24 July 2020 , Dencora and Unistarel comply with the obligations in respect of Mr Georghiou in paragraph 4(ii) of the 10 June Order, their Points of Defence shall be immediately struck out and judgment shall be entered for the Claimants in the Wycombe Application and the Montrose Application, and the Charging Orders in the Claimants’ favour over the Wycombe Property and the Montrose Property shall be made final.”
“(4) In the event that Dencora and Unistarel contend that compliance with paragraphs (2) and (3) above is not possible because ISS has destroyed or otherwise not preserved the images and copies of documents referred to in those paragraphs (the “Destroyed Data”), then: … (ii) By 4pm on24 June 2020 Dencora and Unistarel shall file and serve witness statements from each of Mr Georghiou and Mr Mavros stating: a. the circumstances resulting in the destruction or nonpreservation of the Destroyed Data; b. when the Destroyed Data was destroyed or otherwise failed to be preserved; c. upon whose instruction this took place; and d. why they allowed this to happen, given the obligation on Dencora and Unistarel as parties to these proceedings to preserve potentially disclosable documents.” (ii) By 4pm on24 June 2020 Dencora and Unistarel shall file and serve witness statements from each of Mr Georghiou and Mr Mavros stating: a. the circumstances resulting in the destruction or nonpreservation of the Destroyed Data; b. when the Destroyed Data was destroyed or otherwise failed to be preserved; c. upon whose instruction this took place; and d. why they allowed this to happen, given the obligation on Dencora and Unistarel as parties to these proceedings to preserve potentially disclosable documents.”
“6. I would like to begin by saying that I am not party to this litigation. As I explain below, I was hired to carry out certain tasks by Mr. Georghiou (acting on behalf of Dencora and Unistarel). I did not and do not have a wider role. I do not work for Mr. Georghiou or his firm.”
“19. The Jacobs Order did not provide anything about the procedure and the method to be followed for the IT forensic exercise, did not provide about images and any retaining of images and of what images of what data. The Jacobs Order was providing only for the performance of an IT forensic exercise in relation to Dencora and Unistarel and the delivery of a brief report with the results of the IT Forensic Expert. … 21. I am not computer literate and I do not understand much about technology, while I do not understand anything about forensic process. At that time I did not know anything about images, what images are and how the things are working. My concern was to comply with the Jacobs Order and concurrently to protect the data of the third parties and to have a USB with the responsive documents. There has been no issue in relation to the preservation of the data. The data was either on the electronic systems of AAG or on USBs kept by AAG. Specifically the responsive documents of Dencora and Unistarel, including all disclosure documents, apart from the electronic systems and/or the USBs, are also preserved on the USB delivered to me by Mr Mavros. …. 23. It has been very clear to me, and the Claimants and their lawyers made a big noise and criticised me that I have not stated previously how I preserve the data, that I am the one who is responsible to preserve the data and I hereby state and confirm that all electronic and hard copy data in AAG’s system and my possession are securely preserved and that all these documents were reviewed and disclosed by the lawyers of the Respondents. 24. Specifically, I hereby state and confirm that all the population of the electronic data of AAG, including the data related to Dencora and Unistarel, as well as to the other Respondents for the period from01 January 2014 until31 January 2020 are stored and preserved on a Network Attached Storage (“NAS”) in the server room of AAG, of which (room) I am the only one who has the key, on two USBs which I am the only one who keeps them and knows where they are. Furthermore, all the electronic documents which are responsive in relation to Dencora and Unistarel, according to the Jacobs Order, are kept on one USB which is also in my exclusive possession. 25. To my knowledge and understanding, the images are not data which should be preserved and ISS has not have the legal right to preserve any images or even data. There has been no valid legal basis to retain them. The duty to preserve the data is mine and I have stated and explained how the data are preserved in paragraphs 47 to 52 of my Sixth Witness Statement. Therefore, no data and in no case have been destroyed or not preserved as the lawyers of the Claimants submitted and managed to convince the court that this is the case. …. 37.1 There are not destroyed data or non preserved data and I do not accept the term “Destroyed Data”
“While I am not party of these proceedings, as a matter of good will and to be fully cooperative with the Court without accepting any of the unsubstantiated allegations made by Hogan Lovells reference my expertise and manner I have contacted and implement my forensic examinations I have decided to provide this supplementary witness statement for the avoidance of any doubt or challenge in a final effort to clarify the issue at hand.”
“(a) I must repeat that no data has been destroyed. Speaking about the forensic copies of the original data which have not been preserved, this should have taken place after13th January 2020 . I say this because on the13th January 2020 was the date during which I sent the 989 documents to Mr Dominic Chambers and thereafter there was nothing else, to my understanding, I should do, in relation to this case. (b) I do not remember when exactly the deletion of the forensic copies was made. As regards the keeping of records, I keep records only in cases where I will be called to testify as a witness before a Competent Court. I repeat that in this case, apart from the fact that it is a civil case, the requirement from the forensic expert was only to deliver a Brief Report which I did. (c) I have not and never discussed such issue with Mr Georghiou. With all due respect, I did not consider and/or could have imagined that the non-preserving of the forensic copies (the original data can be retrieved at any time) was going to be of such a big issue in order to preserve them or to record it. (d) please see above.”
“16. I understand from Mr. Dougans that Dencora and Unistarel and Mr. Georghiou have been criticised for not preserving this material. I am not party to this case and not able to speak on their behalf. All I can say is that, without clear written and specific instructions to do so in a Relevant Court Order applicable in our jurisdiction, I would NOT have retained such material in any case, as such action on behalf of ISS would lead to violation of GDPR laws.”
“22. According to the Jacobs Order, ISS was not to keep and was not allowed legally to keep any images or data. I, myself, didn’t know about any images and therefore I could not give any instructions to Mr Mavros about them. My ignorance led me to be mistaken, something which was considered by HL as contradiction between me and Mr Mavros. … “37.4 I have not had any idea about the forensic search procedure and about images and I have not participated in the search or given any instructions to Mr Mavros apart from the conducting of the search according to the Jacobs Order.”
“I do not accept the terms “destroyed data” or “destruction of data”
“I have not given any instructions about this and I do not know that anyone has given such instructions.”
“11. At pages 2-3 of the Brief Report [2-3] I set out the process used by which I took images from Mr. Georghiou’s firm to conduct further searches. As I say in the Brief Report, this procedure took place on 5 and6 September 2019 . 12. Following that, as I set out at pages 3-4 of the Brief Report [3-4] I set out the analysis procedure and what took place next. I confirm that this material is true. Specifically, after the application of the Search Terms and the Unrelated Terms to the images responsive electronic files and their metadata were sent to Candey (the solicitors then representing Dencora and Unistarel) and uploaded to their review Platform “Open Test”
“Actions In order to execute the assigned instructions, on the 5th of September 2019 and the 6th of September 2019, the ISS team headed by me visited the premises of the legal company A.A. Georghiou LLC to create forensic images of electronic data of the existing computing devices. Specifically, we found and created forensic images of the electronic data stored on the following computing/mobile devices, by using Access Data FTK Imager, XRY, UFED Cellebrite and Magnet AXIOM: A. Desktops (8) which are used by the following employees: a. Adamos Aristidis b. Kyriaki Siantani c. Alexandrina Buceatch d. Angelina Schukina e. Chloe Pharmkalidi f. Lola Champidi g. Alexandra Oikonomou h. Charoula Artemiou According to Mr. Andreas Georghiou, the above Desktops cover the period of 1st of January to the dates of the imaging. B. Servers (3) Virtual Servers a. Active Directory b. File Server c. Application Server C. An external USB drive containing archived emails and attachments, which according to Mr. Andreas Georghiou cover the period 1st of January 2014 to 31st December of 2017. D. Mobile Devices including their SIM cards (2) a. Nokia Asha RM-840 IMEI 355520053666200 with CYTA SIM 99434443 b. Samsung SM-A300FU IMEI 359665065108712 with CYTA 9940333 Forensic Analysis Procedure Between the dates 7th of September 2019 and14th September 2019 , we conducted an automated analysis of all the obtained images in our facilities. For the analysis we used the forensic software/tool “Access Data FTK” that I am a qualified examiner for, and our company has a valid usage license (License 2-1 312310). Specifically, we performed recognition and categorization of all electronic data that were stored on the electronic devices under investigation, including Optical Character Recognition (OCR) and indexing of file content. Thereafter we applied all Search Terms of the List provided by Mr. Leo Nabbaro (APPENDIX C) according to the court order (APPENDIX B) and we found all the responsive documents that contained any of the related key words for the period1st January 2014 to the dates of the imaging. Then according to paragraph 4(b) of the court order (APPENDIX B), we excluded the results found on the C and D Drives of Mrs. Lola Champidi computer for the period1st January 2018 to3rd June 2019 . Then, to these search results we applied the Unrelated Terms (APPENDIX D) and we removed all search results according to this list. The list (APPENDIX D) was not applied to the mobiles of Mr. Andreas Georghiou because no responsive hits were found when we applied the Search Terms contained in APPENDIX C.”
“I obtained image copies of the electronic data stored on the computer devices under search using the latest release at the time of Access Data FTK Imager. The software was configured to create a bit by bit forensic images/copies of the physical storage (Full) of all the data including all the documents and of all folders on each device. Thereafter, I conducted an automated analysis of all the obtained images and specifically I performed recognition and categorization of all electronic data that were stored on the electronic devices under investigation, including Optical Character Recognition (OCR). I say all these and generally, I describe all the procedures followed in my Brief Report which I repeat and adopt.”
“17. Insofar as the Court and the Claimants are interested in the chain of custody of the image and the material extracted from the image according to my analysis, the matter is simple. I took the image from Mr. Georghiou’s firm (as I explain in the Brief Report) and took it to ISS lab for examination. I then kept it until all questions were answered. Nobody else had any access. 18. I do not believe there are any documents exhibiting this chain of custody, as simply, I did not pass it to other people. I did not (for example) sign any agreement with a third party to handle the material because I did not give it to them to handle.”
“All the above findings (responsive electronic files and their metadata) were sent electronically to Candey Limited in their original state and to their Review Platform “OpenText”
"now being more familiar with how the litigation process works in England, I will do everything I can to ensure that there are no repeats of the mistakes of the past"; and ii) in evidence of the same date, Mr Chambers QC said: "
“100. … the Respondents’ conduct is now imperilling the fairness of these proceedings. They have destroyed, or allowed to be destroyed, important data in circumstances which remain opaque and which they refuse properly to explain. They are also refusing to allow a reputable independent IT expert to reconduct their disclosure exercise, with the effect of (1) preventing the integrity and accuracy of their previous disclosure exercise being tested (as the Court has deemed necessary) and (2) preventing proper disclosure being given at all. And they continue to accuse the Claimants of serious wrongdoing without any basis and continue to contest the validity of this Court’s Orders. 101. The Respondents have shown no remorse and, regrettably, have shown that the Court can have no confidence that matters will ever improve. It is not fair for the Claimants to be required to continue to litigate these Charging Order Applications at considerable expense in circumstances where (1) the fairness of the proceedings has now been jeopardised and (2) it is overwhelmingly likely that granting the Respondents a yet further indulgence will merely result in further non-compliance, further cost and the use of further Court time in dealing with those.”
“9. I was not informed that the Jacobs Order required ISS to store any of the items described and/or to create or keep the forensic images reviewed, and most importantly ISS was not instructed to do so. Having reviewed the Jacobs Order (a copy of which is attached to the Brief report [10-19] I can say from my own knowledge and experience that this is NOT a mandatory procedure in the computer forensic science since in many cases a live index search with special software and hardware applied at the investigation scene to bypass exactly the legal issues on seizing evidence which includes personal communication data. Moreover, when I worked for the police, the legitimate procedure would be that forensic images could be seized and retained by the police ONLY after special relevant court orders both for seizing and retaining and if such an order was not made then such material could not be retained. I know that the same situation applies and that it would be a breach of Cyprus law and EU law (in the form of the GDPR) to retain such material myself. I have worked with lawyers and police officers all of my career and this is what I have always been doing. 10. I repeat that the Jacobs Order did not require ISS to store any of the items and/or to create or keep forensic images and did not specify any procedure which ISS should follow. … 13. As explained above I was not instructed to store and/or create or keep forensic images and the Jacob’s Order did not require me to do so thus I considered that what needed to be preserved was the original material in Mr. Georghiou’s office, and of course the product of the searches which I uploaded to Candey and to its platform and also delivered it to Mr Georghiou in a USB drive. 14. As I set out above, this is NOT a mandatory procedure in the computer forensic science. Active relevant court orders, with clear instructions for seizing and retaining digital evidence for each case should be issued by an authorized regional Court of Law. I was especially conscious of the fact that the images referred to at para. 10 above were taken from an established law firm. Signing before I proceed a relevant legal NDA agreement obviously understood that any electronic documents taken from a law firm would be likely to contain private and legally privileged information. 15. I cannot now recall the date when this took place. It must have happened some time after13 January 2020 . … 17. … I took the image from Mr Georghiou’s firm (as I explain in the Brief Report) and took it to ISS for examination. I then kept it until all questions were answered. …” Order: “In addition it is obvious that the Jacobs Order did not require forensic images and made no reference to any specific IT forensic procedure which should have been followed. The images were taken according to the procedure I have decided to implement that would allow to secure the integrity of the data. As explained I had no instructions to retain them and obviously I couldn’t predict and/imagine that forensic copies that already were provided to the parties would become of such significance and importance taking also into consideration that any other expert can proceed to the examination of all original data at any time. Images are not retained unless there is a specific provision/order in the relative court order. Otherwise and in accordance with GDPR laws/regulations anything related to any data, including images must be retained only until the scope of the relative order, and in general the scope of the forensic exercise is fulfilled. Immediately thereafter, the images/data must be deleted. Several laws/regulations deal with the subject matter some of which are: The Retaining of the Telecommunication Data for the Purpose of Serious Criminal Offences of 2007 (Law 183 (I)/2007 in combination with the laws on the Protection of the Confidentiality of Private Communication (Surveillance of Communication and Access to Recorded Content of Private Communication) (Law 92 (I) 1996, the Protection of Natural Persons with Regard to the Processing of Personal Data (Law 125 (I)/2018) and the Regulation of Electronic Communication and Mail Services (Law 112 (I)/2004 the data/images in no case can be retained for a period of more than 6 months without the specific provision of any law or any court order. It is for me absolutely clear the Jacobs Order did not provide for the retaining of any images. On the contrary, the Jacobs Order was providing only for the IT Forensic Exercise to be conducted by applying the relevant search terms, to upload the responsive documents to a designated platform for review and disclosure and to prepare and deliver a brief report on the electronic data and forensic analysis (Brief Report). I have done everything and I consider that I have acted in full compliance with the Jacobs Order and with all due respect there has been no expert evidence before Mr Justice Butcher to the contrary. … I must clarify that no data has been destroyed. I only created forensic copies of the original data when I needed them to preserve the integrity of the actual original data and when I needed them for the forensic exercise and I deleted them when I did not need them. The actual original data has been at all times on the electronic systems of the law firm A.A.Georghiou LLC (AAG) and in the possession and/or control of Mr Georghiou. The Jacobs Order did not contain such instructions and none of the parties instructed and/or suggested and/or asked and/or demanded and/or even mentioned to create and/or retain and/or return any forensic copies to Mr Georghiou or to anyone else. It has always been my understanding that the taking of the images was part of my forensic exercise procedure which, according to the applicable legislation, the practise and the way I have understood the NDA Statement should be deleted at the end of the exercise and on the fulfilment of the scope of the exercise. … As I said, I have uploaded all the responsive documents to the OpenText platform. OpenText said that 350 emails could not be opened in the native format and it took a long time to solve this issue and from what I know some emails were required to be sent by AAG in their original form. Furthermore, Hogan Lovells raised issues about the USTs and finally it was agreed between the parties to exclude the 2660 documents/emails containing the USTs in the “To” or “From”: @candey.com, @quinnemanuel.com, @russel-cooke.co.uk, @signaturelitigation.com and to send the remaining responsive documents to Mr Dominic Chambers. Consequently, I excluded the 2660 email which were responsive to the aforesaid email addresses, and the remaining 989 responsive documents to the USTs were sent to Mr Dominic Chambers for review and disclosure. Nobody gave me instructions to retain the images pending any possible issues/questions/requests of Hogan Lovells. Nobody told me that issues/questions were pending and that the images were of relevance and/or importance. … I repeat, that no data has been destroyed. The forensic images are only copies of the original data, and the original data are existing, preserved and never destroyed. The forensic images were deleted by myself for the reasons I explained above. … ... I emphasize that at no point Mr Georghiou or anybody else pointed out to me that the forensic copies could have been considered as potentially disclosable documents, and I myself didn’t know that the forensic copies were required to be preserved as potentially disclosable documents. Nobody and nothing directed my mind to this possibility. I only acted according to the Jacobs Order, to the Cyprus laws, the GDPR and the practice.”