
Liederbach v. NYU Langone Hospitals, No. 24-CV-00742 (S.D.N.Y. July 16, 2025)
This ruling underscores that forensic imaging of personal devices, particularly those belonging to nonparties, remains an exceptional and intrusive form of discovery. Courts require a clear, fact-based showing of need before authorizing such measures, especially when weighed against privacy concerns and proportionality under Rule 26.
In Liederbach v. NYU Langone Hospitals, No. 24-CV-00742 (S.D.N.Y. July 16, 2025), the plaintiff alleged that NYU Langone violated the Family and Medical Leave Act by wrongfully terminating her after she sought medical leave. During discovery, attention turned to text messages held by an employee of the defendant hospital who was not named as a party to the case.
This employee searched her personal cellphone for responsive messages, took screenshots of those she found, and provided them to defense counsel. No messages existed from before December 2023 because she had switched to a new device before suit was filed, and her prior phone had not been backed up to iCloud. The plaintiff argued that this self-collection was insufficient and that a forensic review could potentially recover deleted or backed-up data. She also claimed that replacing the phone after a May 2022 preservation letter constituted spoliation.
Speculation about what a device might contain is insufficient to require forensic imaging; courts require concrete evidence of misconduct or concealment before ordering such intrusive discovery. For corporate internal investigations, this presents a challenge. Often, the most critical evidence surfaces from devices examined initially as a precaution. Had a wider net have been cast and the employee been explicitly included in the legal hold—and instructed that devices could not be wiped, replaced, or discarded—the outcome may have been different.
Collection from personal devices remains a last resort. Privacy rights are a priority for the judiciary. Organizations with BYOD programs must define with precision what constitutes “company-owned” or “business-related” data on a personal device. Without such clarity, courts will be reluctant to authorize invasive collections of mobile data. Proportionality was another key factor in the Court’s analysis. The expense and burden of engaging a forensic expert to image a personal phone were not justified given the claims at issue
Ultimately, the decision underscores two parallel truths:
1) Privacy protections remain paramount—courts will shield individuals from disproportionate and intrusive measures.
2) Corporate investigators face limits—without early identification of custodians, broad legal holds, and defensible preservation, key evidence may be lost or rendered inaccessible.
Bree Murphy, CEDS, Senior Solution Consultant, Exterro, E-Discovery Chicks Co-Host
For the purposes of most e-discovery matters, logical collection will meet the needs of the court. However, it’s helpful to understand when a forensic collection might be necessary and have that capability if it’s likely to be needed. Read this blog for a more detailed discussion of logical and forensic collections.