Unreported / Non-Citable
Background
Rippling has alleged that its competitor Deel recruited Rippling's then employee Keith O'Brien to spy on Rippling and share commercially sensitive information, with payments flowing from November 2024 until March 13, 2025. O'Brien's affidavit, attached to the First Amended Complaint, described WhatsApp and Telegram communications with Deel CEO Alex Bouaziz and CFO Philippe Bouaziz, monthly payments of roughly 5,000 euros later converted to Ethereum transfers, and Telegram chats set to auto-delete after 24 hours. After Rippling's honey-pot scheme exposed O'Brien, Irish proceedings led to a preservation order, though O'Brien factory-reset his phone and Alex Bouaziz allegedly smashed his own phone with an axe.
The court had previously granted Rippling's request for a forensic examination of Alex Bouaziz's devices but denied the request as to Philippe Bouaziz's devices, without prejudice to renewal based on new information. Rippling returned with a request to inspect two iPhones belonging to Philippe Bouaziz and the iPhone 16e that Alex Bouaziz began using on March 23, 2025, seeking data for 16 artifacts largely relating to WhatsApp, Telegram, call history, notification data, and contact information. The parties submitted competing expert declarations from Rippling's Joseph Naghdi and Deel's J. Christopher Racich, and the court heard argument at discovery status conferences on October 8 and October 22, 2026, before resolving the dispute.
The Court’s Holding
Applying the Rule 26(b)(1) relevance-and-proportionality framework and Rule 34's inspection provisions, the court held that no heightened standard applies to forensic examinations, though privacy interests factor into the proportionality balance. The court found the requested data relevant to Rippling's corporate espionage and spoliation claims, rejecting Deel's argument that a newer phone could not contain older data because application-specific backups can restore pre-existing data onto a new device. The court declined to credit Racich's claim that he found no pre-March 23 data because he did not describe his search methodology in sufficient detail for the opposing expert or the court to assess its comprehensiveness.
On proportionality, the court pointed to evidence that Alex Bouaziz deleted a LinkedIn message O'Brien attested receiving on March 14, 2025, shortly after the Irish preservation order was served, and that Alex continued using disappearing-message functions after the lawsuit was filed, including for messages with Philippe. The court also noted evidence that Alex changed A.D.'s name in his contact list and that Alex exchanged calls with Philippe and A.D. close in time when O'Brien received cryptocurrency payments. The court emphasized that a requesting party need not prove wrongdoing to establish relevance, and found Rippling's narrowed request for 16 artifacts, down from 107, together with a first-look protocol for user-generated data and the existing protective order, reasonably mitigated privacy burdens. The court granted the inspection requests and ordered Deel to produce the data by November 12, 2026, unless stayed by further order.
Key Takeaways
- The court confirmed that no heightened discovery standard applies to forensic device examinations, with privacy concerns addressed through the ordinary Rule 26(b) proportionality balancing.
- A party seeking device inspection does not need to prove wrongdoing; the request must simply be reasonably calculated to lead to the discovery of admissible evidence.
- The court rejected the argument that a newly acquired phone cannot contain older relevant data, crediting expert testimony that application-specific backups can transfer pre-existing data to a new device.
- Evidence of deleted messages, continued use of ephemeral messaging after litigation began, and suspicious contact-list changes collectively supported a finding of proportionality for forensic inspection.
- Narrowing the scope of requested data artifacts and applying a first-look protocol for user-generated data helped mitigate privacy concerns for the executives whose devices were inspected.
Why It Matters
This order illustrates how courts apply the familiar Rule 26(b) proportionality framework to increasingly common disputes over forensic imaging of personal smartphones belonging to corporate executives. The decision underscores that evidence of message deletion, ephemeral messaging use, and communications timed around suspicious payments can tip the proportionality balance in favor of invasive discovery, even without proof of underlying wrongdoing.
The ruling also carries practical significance for litigants and forensic experts: an expert's conclusory assertion that no relevant data exists on a device may be discounted if the expert fails to document the search methodology in enough detail for the opposing side and the court to evaluate its thoroughness. Parties seeking device inspections can improve their prospects by narrowing the requested data set and proposing protective protocols that address privacy concerns.