Legal Frameworks & Regulatory Standards Flashcards

Under the Federal Rules of Evidence Rule 702, a forensic expert witness must demonstrate that their testimony is based on:

Answer: Sufficient facts or data and reliable principles and methods

FRE 702 requires expert testimony to rest on sufficient facts or data, reliable principles/methods, and reliable application of those methods to the facts.

Which doctrine holds that evidence derived from an illegal search is inadmissible in court?

Answer: Fruit of the poisonous tree

The 'fruit of the poisonous tree' doctrine excludes evidence obtained as a result of an unlawful search or seizure under the Fourth Amendment.

The Health Insurance Portability and Accountability Act (HIPAA) Security Rule requires covered entities to implement which category of safeguards for electronic PHI?

Answer: Physical, administrative, and technical safeguards only

HIPAA Security Rule mandates physical, administrative, and technical safeguards to protect electronic protected health information (ePHI).

A forensic examiner is asked to testify about findings in a state court case. Which standard for expert testimony most commonly applies in state courts that have NOT adopted the Daubert standard?

Answer: Frye general acceptance standard

The Frye standard, requiring scientific evidence to be 'generally accepted' in the relevant scientific community, is still used by some states that have not adopted Daubert.

Under 18 U.S.C. § 1030 (Computer Fraud and Abuse Act), accessing a protected computer without authorization to obtain information carries criminal liability. What makes a computer 'protected' under this statute?

Answer: It is used in or affects interstate or foreign commerce or communication

Under the CFAA, a 'protected computer' is one used in or affecting interstate or foreign commerce or communication, which broadly covers virtually all internet-connected systems.

Which legal privilege most commonly protects communications between a forensic examiner hired by defense counsel and that counsel?

Answer: Work product doctrine

The work product doctrine protects materials prepared by or for an attorney in anticipation of litigation, including forensic reports commissioned by defense counsel.

The Sarbanes-Oxley Act Section 802 imposes criminal penalties for altering or destroying records with intent to obstruct a federal investigation. The maximum prison term for this offense is:

Answer: 20 years

SOX Section 802 provides for up to 20 years imprisonment for knowingly altering, destroying, or falsifying records in a federal investigation or bankruptcy proceeding.