Metadata
Hidden data embedded in electronic documents showing author, creation date, edit history, and other file properties.
What You Need to Know
Metadata is data about data—information embedded in electronic files that reveals file properties, history, and context. Common metadata fields include: author name, creation date, modification dates, file path, editor names, track changes history, email routing information, GPS coordinates in photos, and software version used. Metadata can help investigate dates or authorship, but fields can be changed, inherited from a template, or affected by software and clock settings. Metadata alone does not prove authenticity, authorship, or location. Conversion can change or omit metadata, so preserve the source and document the process. Forensic tools can extract hidden metadata not visible in standard document viewers.
Put this into practice
Use the step-by-step help to prepare and check your files. Definitions explain the terms; the rules and orders for your matter determine what is required.
Resolve file and processing problemsRelevant Practice Areas
Frequently Asked Questions
What types of metadata are most important in litigation?
Critical metadata includes: (1) creation and modification dates as timeline clues, (2) author and last-modified-by fields as leads to corroborate, (3) track changes and comment history to show document evolution, (4) email routing data (sent/received times, recipient lists) for communication chains, (5) embedded GPS coordinates as location information to corroborate, and (6) file path showing original storage location. Investigate these fields alongside source records, collection history, witness knowledge, and other evidence. A timestamp or author field alone does not establish when a work was created, who created it, or whether a signed document was altered.
How do I preserve metadata when producing documents?
To preserve metadata: (1) collect documents using forensic tools or e-discovery software rather than manual copying, (2) produce in native format (original file type) when requested per Federal Rules of Civil Procedure 34(b)(2)(E), (3) if converting to PDF, use tools that embed metadata in PDF properties, (4) create load files (DAT or CSV) containing extracted metadata fields, (5) document your production methodology in a privilege log or production protocol. Never save over original files or use "Save As" which modifies creation dates. Store forensic images of hard drives for complete preservation.
Can metadata be used to authenticate documents at trial?
Metadata may contribute to authentication under Federal Rule of Evidence 901(b)(4), considered with the surrounding circumstances; it is not conclusive by itself. The process: (1) call a witness who can testify about the document's creation or receipt (author, recipient, or forensic expert), (2) introduce the metadata showing creation date, author, and file properties, (3) ask the witness to confirm the metadata matches their knowledge of the document. Explain how the metadata was collected and why it is reliable in the circumstances. Opposing counsel may challenge metadata integrity or argue it was altered.
When It's Used
Can be critical evidence in disputes over document authenticity or timeline
Example
"Email metadata showing it was sent on March 15 at 2:47 PM, contradicting witness testimony that it was sent in April."
References to check
Related Terms
ESI (Electronically Stored Information)
Digital evidence including emails, databases, social media posts, text messages, and metadata. Subject to special discovery rules.
Authentication
The process of proving that evidence is what it purports to be before it can be admitted at trial.
Chain of Custody
Documentation showing who had possession of evidence and when, from collection through presentation at trial.
Need to Stamp Your Exhibits?
Try ExhibitPrep's browser-based exhibit stamping tool. No installation required.
Try ExhibitPrep Free