Female Bank Employee Wrongfully Terminated Following Maternity Leave

This case involves a wrong termination dispute at a large bank. The employee in question was granted 12 weeks of maternity leave at the end of the calendar year. In her absence, the company hired someone to perform her job in the interim. The employee suffered a particularly difficult pregnancy due to her past medical history of severe arthritis. When the employee returned in the new year, she had limited mobility but was still able to perform her job at the same caliber she had before taking maternity leave. Within a week of her return, the employee was notified that her job description had changed while she was away. According to her supervisor, the job description included a specific physical and functional capacity which she could no longer perform. As a result, she was terminated from her position. The employee who took her place noted that the job description he received did not include information on any specific physical and functional aspects. It was alleged that the company changed the job description after the employee’s return to push her out. An expert in computer forensics was sought to conduct a forensic analysis on the company’s intranet to determine when the job description was changed.

Question(s) For Expert Witness

1. Please describe your experience performing forensic analysis of information manipulated via intranet.

Expert Witness Response E-020691

I have reviewed many employment matters in which document metadata is at issue. If the job description was contained in a document, the document metadata would be an important piece of evidence because it may contain file creation, access and modification dates and times. If the description was only on web-based medium and only accessed online through the intranet, it would have to be proved or disproved that someone accessed the job description and altered it at some point. For this, logs would be required showing who accessed the area of the intranet containing the job description during the time frame in question. Intranet systems range in architecture, design, and functionality. I would need more specific information about how the description was composed, stored, and accessed to determine when the job description was changed.