SAR Search

[TIOAOA]

We have had a SAR for a pupil and I've been tasked with getting the information from Google vault. My question is what should my search parameters include ? First name only, last name only, first and last names combined, initials ?

Obliviously the more specific I am the less we will have to sift though when redacting information but does this mean some relevant information will be missed. Any advice welcomed

[PrimaryNetMan]

Anything that has been used to identify the pupil. Legal forname, legal surname, known forname, known surname, initials, UPN and any other terms your setting may have used to identify the pupil as a starting point.

[howartp]

We typically start with forname, legal forename, surname, legal surname - which returns far too many results - then filter it out using SIMS to tell me all the false-positives eg "Forename SMITH", "Forename JONES", "Sam SURNAME", "Emma SURNAME" etc.

[TIOAOA]

OK first set of results are in from a surname search and it has returned nearly 2K

 

So my next question is what would be the best way to get these results printed out without having to go into each individual one ?

 

I see I can export them as PST or MBOX files - but what then.

 

What process do others use in this situation ?

[MartinT]

Single indexed PST, if Google can do it. That's what we use for 365 extraction and redaction using Adobe Acrobat.

[TIOAOA]

Was wondering if anyone would be willing to share a step by step guide of how they pull the relevant individuals information, specifically relating to Google Workspace. I have the information from vault but am finding printing all the data out a very time consuming process. I'm sure there must be a simpler way than going through each email thread individually and printing it. Someone save my sanity please.