[1990] HCA 47
Auspine Ltd v Australian Newsprint Mills Ltd (1999) 93 FCR 1
Briginshaw v Briginshaw (1938) 60 CLR 336
[1938] HCA 34
Brunskill v Sovereign Marine & General Insurance Co Ltd (1985) 59 ALJR 842
[2013] HCA 46
Fox v Percy (2003) 214 CLR 118
[2009] NSWCA 278
Lemoto v Able Technical Pty Ltd (2005) 63 NSWLR 300
Source
Original judgment source is linked above.
Catchwords
[1990] HCA 47
Auspine Ltd v Australian Newsprint Mills Ltd (1999) 93 FCR 1
Briginshaw v Briginshaw (1938) 60 CLR 336[1938] HCA 34
Brunskill v Sovereign Marine & General Insurance Co Ltd (1985) 59 ALJR 842[2013] HCA 46
Fox v Percy (2003) 214 CLR 118[2009] NSWCA 278
Lemoto v Able Technical Pty Ltd (2005) 63 NSWLR 300[2005] NSWCA 153
Levick v Commissioner of Taxation (2000) 102 FCR 155[2000] FCA 674
Myers v Elman [1940] AC 282
Nadarajapillai v Naderasa (No 2) [2015] NSWCA 209
NewellMuriniti v De Costi (2018) 97 NSWLR 398[2018] NSWCA 49
Orchard v South Eastern Electricity Board [1987] QB 565[1987] 1 All ER 95
Re Bendeich (No 2) (1994) 53 FCR 422
Re FelicityFM v Secretary, Department of Family and Community Services (No 4) [2015] NSWCA 19
Ridehalgh v Horsefield [1994] Ch 205[1994] 3 All ER 848
Riverlate Properties Ltd v Paul [1975] Ch 133[1974] 2 All ER 656
Saleh v Romanous (2010) 79 NSWLR 453[2010] NSWCA 274
State Rail Authority of New South Wales v Earthline Constructions Pty Ltd (in liq) (1999) 73 ALJR 306[1999] HCA 3
Taylor v Johnson (1983) 151 CLR 422
Judgment (88 paragraphs)
[1]
Background
The substantive proceeding in which the present application is brought is the second such proceeding to have been brought by the Applicants involving claims of breach by Mr Corry (who is not a party to the present notice of motion) of obligations in relation to the Applicants' alleged confidential information (in particular, information relating to certain pharmaceutical formulas).
The first proceeding (the 2017 Proceeding) was resolved by compromise between the parties without a hearing on the merits (at a time when judgment was reserved on an issue of privilege against self-incrimination in respect of certain items that had been obtained on the execution of search orders). The second proceeding (the current 2019 Proceeding) was commenced last year and arises out of complaints as to what transpired following the settlement of the 2017 Proceeding. In essence, it is alleged that certain of the Applicants' confidential information that was required to be returned to the Applicants or deleted had in fact been retained by one or more of the defendants and was continuing to be used in the second defendant's competing business. The claims in the 2019 Proceeding as against the defendants other than Mr Corry have now been settled (as will be explained in due course) with a substantial payment made, without admission, to the Applicants but with no order as to costs. Relevantly, those claims were settled prior to the discovery by the Applicants of some or all of the conduct here impugned.
The Respondents are two of the directors and principals of Geomat Consulting Pty Limited, which trades as Miller & Prince Lawyers (Miller & Prince). They were admitted to practice at different times in 2015. As at the time of the commencement of their involvement in the substantive proceedings (in February 2019), they had been practising as solicitors for about 3½ and 4 years, respectively. Reliance is placed by the Respondents in submissions on their relative inexperience at the time of the events in question (inconsistently, the Applicants say, with how they have portrayed themselves in their affidavits and on their firm website). In my opinion, this could only relevantly go to the issue of discretion as to any sanction for the impugned conduct, since the Respondents' obligations as legal practitioners in this regard do not depend on their level of experience at the time.
The Respondents initially commenced acting for the second defendant (Medicina Pty Limited, to which I will refer as Medicina) in the 2019 Proceeding on 19 February 2019. Later, they came also to act for the third to fifth defendants (who are the directors of Medicina other than Mr Corry - namely, Mr Ghaly, Mr Singh and Mr Goradia) in the 2019 Proceeding.
Although the Respondents did not, as I understand it, act at any stage for Mr Corry in his personal capacity, it will be seen from the chronology of events set out below that the Respondents were in regular receipt of communications and instructions from Mr Corry during the relevant period, those communications presumably being sent to them by Mr Corry in his capacity as a director of Medicina or as a party with a common interest to the Respondents' clients' claims. That has some relevance to the suggestion made in the course of submissions on the present application that it was not appropriate for the Respondents to disclose to the Applicants matters going to Mr Corry's conduct, he not being their client.
[2]
Present application
The relevant events occurring in relation to the substantive proceeding are set out in the chronology of events below. As to the present application, on 8 October 2019, the Applicants filed and served Points of Claim, setting out the relevant background to, and basis for, the relief they now seek.
In summary, the Applicants allege that they have incurred unnecessary or wasted costs as a result of the Respondents' conduct in: breaching the Undertaking; failing to conduct a competent investigation into the circumstances in which the Password was provided by them to Mr Corry in breach of the Undertaking and falsely asserting that they were not responsible therefor; failing to disclose their knowledge to the Court or the Applicants that Mr Corry had accessed the Dynamics Account, the existence of the Second Corry Email Account, and as to the use of the Second Corry Email Account by Mr Corry (including for the purpose of monitoring the Applicants' access and review of the Dynamics Account); and failing to disclose their knowledge to the Court or the Applicants that documents had been deleted from the Dynamics Account, and misleading the Court and the Applicants by failing to disclose that knowledge in correspondence and in preparing, filing and serving the affidavits ordered to be served by Kunc J in May 2019 after the issue of disruption to the Dynamics Account had been raised (the May Affidavits, as to which see below).
The allegations of serious misconduct, neglect or incompetence, within the meaning of s 99 of the Civil Procedure Act, as articulated in the Points of Claim, are as follows.
[3]
(i) Breaches of Undertaking (Points of Claim [76]-[78])
It is common ground that there were breaches by both Respondents of the Undertaking (see below) by the provision to the defendants of the Password (Mr Corry's password to what has been referred to as the First Corry Email Account). The breaches occurred in the same way, namely by communications to the defendants, including Mr Corry, in which there was embedded an email chain containing an email which disclosed the Password.
Although in their Points of Claim it is alleged by the Applicants that, if deliberate, that conduct amounted to serious misconduct, it is here accepted by the Applicants that the breaches were inadvertent; and the contention now is simply that that conduct amounted to serious neglect or serious incompetence. Furthermore, although the Respondents have raised a pleading issue (i.e., that the Points of Claim plead only the breach of Undertaking by the First Respondent sending an email on 15 March 2019 which contained the Password - see at [27] of the Points of Claim - that being the first breach of the Undertaking), the Applicants contend that the Respondents were on notice of the allegation that there was a further breach by the Second Respondent in the sending of what is referred to below as the Further Breach Email (and they note that the sending of this Further Breach Email has been admitted by the Respondents).
[4]
(ii) Failure to disclose breach of the Undertaking by provision of the Password (Points of Claim [79]-[81])
The complaint here made is that, on and from about 24 April 2019, despite having investigated matters raised by the Applicants in their 23 April 2019 letter, the Respondents: falsely confirmed that no one from Miller & Prince had provided the Password to the defendants (defined as the False Assertion) (see 50); repeated the False Assertion on 30 April 2019 (see 60); and did not disclose the falsity of the False Assertion to the Court or to the Applicants during the course of the proceeding.
The Applicants contend that, if the Respondents made and repeated the False Assertion knowing it to be false as a result of their investigations, then that conduct amounted to serious misconduct; and, if they did so without knowing it to be false despite their investigations, then that conduct amounted to serious neglect or serious incompetence.
[5]
(iii) Failure to disclose Second Corry Email Account (Points of Claim [82]-[84])
The next complaint (chronologically arising at an earlier point in time to the previous complaint) is that, on and from 11 April 2019, the Respondents: knew that the First Respondent had accessed the Dynamics Account; knew of the existence of the Second Corry Email Account; knew of the use of the Second Corry Email Account by Mr Corry including for the purpose of monitoring the Applicants' access and review of the Dynamics Account; and did not disclose that knowledge to the Court or the Applicants during the course of the proceedings. It is asserted that the Respondents were obliged as officers of the Court to disclose to the Court and the Applicants their knowledge of those matters.
The Applicants say that, when the Respondents realised that Mr Corry had access to the Dynamics Account (contrary, they say, to the regime which had been put in place by the Court's orders on and from 21 February 2019, and then 14 March 2019) and that Mr Corry was using his access to monitor the Applicants' review of the Dynamics Platform, the Respondents should immediately have disclosed both of these matters to the Applicants. In oral submissions it was accepted that, if the Respondents had the state of mind that there was nothing wrong with Mr Corry accessing the Dynamics Platform (a proposition with which the Applicants nevertheless cavil), then there would be no requirement for the Respondents to disclose that Mr Corry did have that access (see 17/7/20 at T 18.7), though the Applicants say that this would not address the complaint as to the non-disclosure of Mr Corry's review of the Applicants' access to the Dynamics Account.
Again, the Applicants contend that, if that conduct was deliberate (and they maintain that it is open to conclude that the Respondents did consciously conceal these matters), then it amounted to serious misconduct; and that, if inadvertent, then it amounted to serious neglect or serious incompetence.
[6]
(iv) Failure to disclose the deletion of documents (Points of Claim [85]-[87])
The complaint here made is that, on and from about 24 April 2019, the Respondents: knew that documents had been deleted from the Dynamics Account (as a result of the receipt of an email from Mr Corry of that date in which reference is made to "deletion" of records); did not disclose that knowledge to the Court or the Applicants during the course of the proceedings; and misled the Court and the Applicants by failing to disclose that knowledge and by preparing, filing and serving the May Affidavits (see below).
Again, it is contended that, if deliberate, that conduct amounted to serious misconduct; and, if inadvertent, that conduct amounted to serious neglect or serious incompetence.
[7]
Applicants to be held to their pleaded case
I interpose here to note (as adverted to above) that the Respondents insist that the Applicants should be held to their "pleaded" case. Leaving aside the complaint that there was only one breach of the Undertaking that was the subject of an allegation in the Points of Claim, the Respondents say that it is not part of the Applicants' pleaded case on this application that the Respondents were subject to "some duty to educate" the Applicants about how the "Dynamics Account" (which I will consider in some more detail shortly) operated, how it was used in connection with the Medicina business or the identity of the different users who accessed that system on a regular basis; nor that the Respondents had some duty to assist the Applicants to formulate orders they sought against the defendants.
The Applicants do not accept that they are here seeking to expand the case as "pleaded" in the Points of Claim. Nor did I understand the Applicants' submissions as seeking to formulate some novel duty to educate one's opponent in litigation (hard-fought or otherwise as the litigation may be). Rather, as I apprehend it, the complaint made as to non-disclosure of various matters (and in particular non-disclosure of Mr Corry's monitoring of the Applicants' review of documents on the Dynamics Account) is put on the basis of duties owed by solicitors as part of their professional obligations and more generally their obligation to assist in the administration of justice (as to which I will say more in due course).
[8]
Consequences of the impugned conduct
The unnecessary or wasted costs said to have been incurred by the Applicants as a result of the impugned conduct are set out at [88]-[90] of the Points of Claim and in an affidavit affirmed on 4 October 2019 by the Applicants' solicitor, Mr Neil Wallman of HWL Ebsworth (HWLE) (the Wallman Costs Affidavit); and are as follows.
First, that the Applicants reviewed the Dynamics Account in the period from 22 March 2019 to 23 April 2019 in circumstances where they say that, had they known: that Mr Corry had created the Second Corry Email Account on 28 February 2019; that the Respondents had breached the Undertaking by providing the Password to Mr Corry; that Mr Corry had set up "Notification Alerts" (see below); and that the Respondents were also receiving those Notification Alerts; they would instead have taken immediate steps to cease that review and to relist the proceedings. (Pausing here, having regard to the history of the interlocutory stoushes in this matter there seems little reason to doubt that, had the Applicants known at an earlier time of the matters that they say the Respondents should have disclosed, then they would indeed have taken action of the kind to which Mr Wallman has deposed.) The Applicants say, in effect, that by reason of the Respondents' conduct they were either uninformed or misinformed about the true circumstances pertaining at the time.
Second, that the Applicants were required to take the steps they did on and from 23 April 2019 (when their access to documents in the Dynamics Account was disrupted and they ceased their review) to 5 June 2019 to investigate and interrogate the cause of that disruption. It is said that they were prevented by the Respondents from properly understanding the true position, and that the Respondents' conduct deprived them of the opportunity to relist the proceedings on a properly informed basis (referring to Mr Wallman's evidence on 7/4/20 at T 15.30-32; 16.41-43; 17.4-9).
Third, that the Applicants are no longer able to prosecute their case against Mr Corry for use and exploitation of the relevant information without conducting a review of the Dynamics Account afresh (which they maintain cannot be done with any certainty in any event). Complaint is made that the imaged version of the Dynamics Account created by the Independent Computer Expert is unintelligible and cannot now be meaningfully reviewed (see Mr Wallman's affidavit affirmed 12 August 2019 at [97]; his evidence on 6/4/20 at T 32.45-33.21; and Mr Wallman's affidavit affirmed 16 May 2019); and that the Applicants can thus now have no certainty that the contents of the Dynamics Platform accurately reflect the contents of the platform as it was at the date of the execution of the Search Order (pointing to uncertainty as to the fact or extent of the deletion of records; whether documents such as sale records record the true position of Medicina in relation to sales and revenue; and the fact and extent of the deletion of any other records).
[9]
Points of Defence
In response to the Points of Claim, the Respondents filed and served Points of Defence on 21 November 2019.
In the Points of Defence, the Respondents admit to having breached the Undertaking (see Points of Defence at 27; Mr Gerges' affidavit sworn 10 January 2020 at [17], and Mr Athanassios' affidavit sworn 10 January 2020 at [15]). The Respondents contend that: the breach was inadvertent (which the Applicants now accept), the Password having been sent to Mr Corry as part of a lengthy email chain (Points of Defence at 27); and (which the Applicants do not accept) that the breach was of no consequence because by then Mr Corry had already created the "Second Corry Email Account" and obtained access to the Dynamics Account on 28 February 2019 (Points of Defence at 27).
The Respondents admit that they received from Mr Corry the emails on 22 and 26 February 2019 enquiring as to when he could access his email account related to the First Corry Email Account and the Dynamics Account (see Points of Defence at [18]-[19]). The Respondents further admit receiving the emails in relation to the Notification Alerts (Points of Defence at 35). As to the existence of the Second Corry Email Account, the Respondents contend that: the Applicants were aware of the existence of the legal_ac@nexgenpharma email account from at least 26 February 2019; that the legal_ac@nexgenpharma account was one of the aliases of the Second Corry Email Account; and that the Second Corry Email Account was a "global administrator" account with broad access to the Dynamics Account (see Points of Defence at 35-(d)). (The Applicants accept that they were aware of the existence of this email account but they point out that it was not linked to the Dynamics Account until 28 February 2019 - see 17/7/20 at T 51.39 - and they say that they did not know that the Second Corry Email Account was one to which global administrator access was attached.)
The Respondents' position is that they undertook a competent investigation in April 2019 as to the complaints made by the Applicants (see Points of Defence at 42). They admit that they did not disclose all the matters of which complaint is here made (but do not accept an obligation to make the disclosures the subject of the present complaint) (see Points of Defence at [67]-]70]). The Respondents admit that the May Affidavits do not refer to the 24 April 2019 email or to the bulk deletion of records (see Points of Defence at -(b)). The Respondents do, however, point to the fact that the two affidavits affirmed by Mr Ghaly did refer to the deletion of documents (Points of Defence at ).
[10]
Relevant legal principles
Before turning to the chronology of events, it is convenient to set out the relevant principles that apply on an application pursuant to s 99 of the Civil Procedure Act (which were not here in dispute).
Section 99 of Civil Procedure Act provides, relevantly, that:
99 Liability of legal practitioner for unnecessary costs
(1) This section applies if it appears to the court that costs have been incurred -
(a) by the serious neglect, serious incompetence or serious misconduct of a legal practitioner, or
(b) improperly, or without reasonable cause, in circumstances for which a legal practitioner is responsible.
(2) After giving the legal practitioner a reasonable opportunity to be heard, the court may do any one or more of the following -
(a) it may, by order, disallow the whole or any part of the costs in the proceedings -
…
(ii) in the case of a solicitor, as between the solicitor and the client,
(b) it may, by order, direct the legal practitioner -
…
(ii) in the case of a solicitor, to pay to the client the whole or any part of any costs that the client has been ordered to pay to any other person, whether or not the client has paid those costs,
(c) it may, by order, direct the legal practitioner to indemnify any party (other than the client) against costs payable by that party.
(3) Before making such an order, the court may refer the matter to a costs assessor (within the meaning of Part 7 of the Legal Profession Uniform Law Application Act 2014) for inquiry and report.
…
It should also be remembered that there remains an inherent jurisdiction of the Court to make orders that a legal representative personally pay the opposing party's costs directly for unnecessary or wasted costs, that power arising out of the Court's supervisory jurisdiction with respect to legal practitioners admitted by the Court (see Re Felicity; FM v Secretary, Department of Family and Community Services (No 4) [2015] NSWCA 19 (Re Felicity) at [20], per Basten JA, with whom Emmett JA and I agreed). Section 99 of the Civil Procedure Act does not confine that inherent or supervisory jurisdiction.
Before making a costs order under s 99 of the Civil Procedure Act, the legal practitioner must be given a reasonable opportunity to be heard (s 99(2) of the Civil Procedure Act extracted above; and see the provisions of Practice Note SC Gen 5 (Costs orders against legal practitioners)). The same principle applies where the application is in the inherent jurisdiction of the Court.
[11]
Microsoft Dynamics 365 Account
It is convenient at this stage to describe the so-called "Dynamics Account", not least because the Respondents say that there is a fundamental misconception underlying the Applicants' case that derives from the imprecise usage of the term "Dynamics Account". Indeed, I consider that much of the explanation for the current state of affairs lies in the apparent disconformity between the respective practitioners as to their understanding of precisely how the Dynamics Account operated and how access was able to be gained thereto.
Broadly speaking, the Microsoft Dynamics 365 system (or platform) is a "cloud-based" (or web-based) information and document management system in respect of which Medicina has an account (the Dynamics Account). The orders made by Kunc J are in the terms of the "Dynamics Account", but I do not understand there to be any relevant distinction in terminology between reference to the "Dynamics Account" and the "Dynamics Account", nor for that matter that there is any distinction between reference to the Dynamic's "Account" and the Dynamics "platform". (The terms Dynamics Account and Dynamics Platform are used interchangeably in these reasons.)
The Microsoft Business 365 Account, by contrast, is a reference to the system in respect of which individual Microsoft email accounts are operated by staff at Medicina.
Medicina uses the Dynamics Account in the conduct of its business to store information including formulas, client orders, sales and financial records, file notes of telephone discussions with clients, and materials relating to marketing, online sales and staff management. Access to the Dynamics Account is via a user's username, being the user's office email address. Relevantly, there appear to be different levels of access to the Dynamics Account within the Medicina organisation (the highest level being that of "global administrator", that being the level of access that Mr Corry had to the Dynamics Account both through the First Corry Email Account and, later, the Second Corry Email Account (see Mr Gerges' cross-examination on 7/4/20 at T 100.4 and T 102.47), though it is not clear that this was appreciated by all (or any) of the respective legal practitioners at the relevant time(s). The Second Respondent's evidence, at least initially, was that he was aware that Mr Corry had "full access" through the Second Corry Email Account
[12]
Chronology of events
I turn now to the chronology of events, indicating throughout (in order to put the dispute in context) the differing construction put on various of the events by the respective parties.
[13]
2017 Proceeding
As noted above, the background to the present application may be traced back to 2017 when proceedings were commenced in this Court by the Applicants against a number of defendants; including, relevantly, Mr Corry, Medicina, and Mr Ghaly. The Second Respondent acted for Mr Ghaly in the 2017 Proceeding.
In the 2017 Proceeding, the Applicants alleged misuse of their confidential documents and information. The Applicants obtained and executed a search order (the independent solicitor and independent computer expert appointed on that occasion being the same as those who were later again appointed as independent solicitor and independent computer expert in the subsequent 2019 Proceeding).
The Respondents say that the electronic documents seized and reviewed on that occasion must have included the Dynamics Account, and that it may be inferred that the Applicants and the Independent Computer Expert had some familiarity with Medicina's Dynamics Account and the way in which it was accessed and operated prior to the 2019 Proceeding. Pausing here, I do not know that such an inference can properly be drawn, at least insofar as it relates to the Applicants' knowledge; not least because the 2017 Proceeding was settled at a time when, as I recall, issues of privilege had been raised and were the subject of a hearing on which judgment had been reserved. It is not clear to me what documents, if any, had been accessed by the Applicants by the time of settlement of the 2017 Proceeding; nor the extent of any examination by the Independent Computer Expert of the seized documents or computer systems at the time; and it is not appropriate to speculate thereon.
The 2017 Proceeding was settled in February 2018 and orders were made by consent on 16 April 2018 which, inter alia, required the defendants to those proceedings to deliver up certain software and documents, and for the defendants to be restrained from certain conduct.
[14]
Commencement of 2019 Proceeding and the Search Order
On 18 February 2019, the 2019 Proceeding was commenced, on an ex parte basis, by the Applicants against Mr Corry and Medicina. On that day, Kunc J made search orders, addressed to both Mr Corry and Medicina, permitting a search to be carried out at Mr Corry's home and at the offices of Medicina (Search Order).
Paragraph 8 of the Search Order required members of the search party to be permitted (subject to paragraphs 10-20 of the Search Order) to enter the premises so that they could carry out the search and other activities referred to in the Search Order.
Paragraph 9 of the Search Order obliged Mr Corry and Medicina, having permitted members of the search party to enter the premises, to do certain things, including: to permit the members of the search party to search for, to inspect, and to make copies of, the listed things (sub-para (b)) which were defined in Schedule A of the Search Order. The listed things, as defined, included (at item 8): "Medicina Pty Ltd's Microsoft Dynamics 365 software".
Paragraph 9(e) of the Search Order obliged Mr Corry and Medicina to do all things necessary to enable the members of the search party to access the listed things, including "providing them with all necessary passwords and providing them with access to all email accounts".
[15]
Execution of Search Order on 19 February 2019
The Search Order was executed on 19 February 2019 (see Mr Wallman's affidavit affirmed 12 August 2019 at [14]-[15]) by a search party that included an independent solicitor (Mr Jeremy Mackenzie of Mills Oakley) (the Independent Solicitor) and an independent computer expert (Ms Leanne Balit of Klein & Co) (the Independent Computer Expert).
The Independent Computer Expert subsequently reported (see her report dated 21 February 2019) that, during the execution of the Search Order (at which time various laptops, phones and other computer devices were seized) Mr Corry "provided passwords for the following online accounts" (which were described by the Independent Computer Expert as a "Microsoft Office 365 business account" and a "Microsoft Office Dynamics Account"). The Independent Computer Expert noted that for each of those accounts, Mr Corry provided the same login name (to which I will refer as the "alex@nexgenpharma" login or the First Corry Email Account) (see Mr Wallman's affidavit affirmed 12 August 2019 at [21]-[23]).
The Applicants say that the purpose of Mr Corry being required to provide his username and password to the Independent Computer Expert was to enable the Independent Computer Expert to change the password to ensure that the "accounts" (i.e., as I understand it, both the Dynamics Account and the office email account or Business Account) were not tampered with, while those accounts were downloaded offsite.
The Independent Computer Expert advised Mr Corry "that we will take control of the above accounts onsite and then download the contents of these online accounts from our offices", to which it is said Mr Corry agreed; and it is noted that Mr Corry advised that "the data collected from these online accounts was also to be marked as privileged and segregated from the other forensic copies".
Complaint has been made by the Applicants about a number of things that occurred during the execution of the Search Order (and indeed there have been separate contempt proceedings in this Court against both Mr Corry and his wife in relation thereto). Suffice it here to note that the matters of which complaint has been made include: that Mrs Corry had informed her husband in advance of the Search Order; that without disclosing his presence Mr Corry had been on a telephone line during a conversation between the Independent Solicitor and the Second Respondent; and that Mr Ghaly had removed documents from the business premises of Medicina and transported them to a mechanics workshop nearby (see the Independent Solicitor's report at [30]-[33]; [59]-[67]).
[16]
Request for access by Mr Corry
On 20 February 2019, according to the Independent Computer Expert, Mr Corry contacted her requesting access to "his Microsoft Office 365 business account". That request was refused (see p 7 of the Independent Computer Expert's report). Relevantly, the Independent Computer Expert records that she was instructed by the Independent Solicitor (who was instructed by Mr Wallman) that "the control of the accounts not be provided until [the Independent Computer Expert] had finished downloading the contents of both online accounts". (I Interpose to note that it seems clear from this that the Applicants must have understood that Mr Corry's login to the First Corry Email Account was his only means of access to "both online accounts" - i.e., both Mr Corry's Microsoft Office 365 email account and the Dynamics Account.)
Also on 20 February 2019, the download of the Dynamics Account was commenced by a computer analyst in the Independent Computer Expert's office (Mr Jay Banerji).
[17]
21 February 2019 - disruption to downloading of Dynamics Account
On 21 February 2019, the Second Respondent filed a notice of appearance on behalf of Medicina in the 2019 Proceeding.
On the same day, when Mr Banerji attempted to log into the Dynamics Account (using the password provided by Mr Corry for the First Corry Email Account) to complete the download of the Dynamics Account, he was unable to do so. The password to the First Corry Email Account was found to have been changed, with the result that the Independent Computer Expert no longer had access to the Dynamics Account (see p 7 of the Independent Computer Expert's report; Mr Wallman's affidavit affirmed 12 August 2019 at [24]-[25]).
The Applicants' position (with which the Respondents do not appear to cavil) is that it is more likely than not that the password to the First Corry Email Account had been changed by Mr Corry. The Applicants assert (and Medicina admits) that, as at 21 February 2019, the Respondents had no reason to believe that any of the other defendants had changed the password, and that the Respondents knew that it was more likely than not that the password was changed by Mr Corry (see Points of Claim at [15], Points of Defence at 15). The Applicants say that the Respondents' position as to the trust or reliance that could be reposed in Mr Corry's assertions - such as his assertions in relation to the access to the Dynamics Account - is inconsistent with their knowledge or suspicion of what Mr Corry had done already in connection with the search orders. Indeed, the Applicants go so far as to describe Mr Corry as a "dangerous and unreliable" person; and they suggest that it is implausible that the Respondents could have accepted his word at face value.
[18]
21 February 2019 directions hearing
The Applicants then sought for the matter to be re-listed before Kunc J on 21 February 2019. On that occasion, Counsel appeared on behalf of Medicina, instructed by the Second Respondent. Mr Corry did not appear at the directions hearing. The Independent Computer Expert's report had been served only just prior to the directions hearing; and the Respondents had therefore had little (if any) opportunity to consider its contents. The First Respondent did not attend that directions hearing.
Senior Counsel appearing for the Applicants informed his Honour that:
One difficulty that has arisen, as I understand it, overnight, is that the independent solicitor who has been accessing devices, software and cloud storage as part of what she is required to do under the search order, has had her access to some of that materials impeded by a change of password which has taken place overnight. I understand the specific cloud storage that has been changed is the Microsoft 365 Dynamics cloud storage which was the subject of a specific order in the search order.
What we are told by the independent computer expert is that only the defendants or their IT provider would have had the ability to change the password. What's happened is that since the search order has been examined by the independent computer expert, halfway through her access to that cloud storage she has now been locked out.
One of the orders that we are seeking today to ensure the search order can be properly effected and carried out is that the defendants are directed to provide the relevant passwords and be restrained from making any further changes to any relevant passwords …
The Applicants point to the submission made on that occasion on their behalf to the effect that "as long as the material remains with the [Independent Computer Expert], there is no prejudice", and that the status quo was preserved by "no access to any of this material by the defendants" (see 21/2/2019 at T 3.44-45; T 5.9-10). (Pausing here, this seems to me inconsistent with any understanding, on the part of the Applicants at least, that the defendants, who included Medicina and hence its employees, could have access to the Dynamics Account while the material 'remained' with the Independent Computer Expert.)
Kunc J on that occasion made orders which included that the defendants were to provide "any passwords requested by the Independent Computer Expert in respect of any device, software, or cloud storage removed or imaged in the execution of the Search Order", and that the defendants were restrained from "changing or causing to be changed any password for any device, software, or cloud storage removed or imaged in the execution of the Search Order" (see orders 3-4 of the 21 February 2019 Orders). His Honour also ordered that:
6. The first and second defendants are to provide to the Independent Computer Expert by 7.00pm today all passwords to the Microsoft 365 Dynamics Account referred to on page 7 of the Independent [C]omputer Expert's report, in writing by the Second Defendant [Medicina]'s solicitor to the Independent Solicitor.
[19]
Provision of Password on 21 February 2019
Returning to the chronology of events, on 21 February 2019 the Second Respondent (no doubt to comply with order 6 of the 21 February 2019 Orders) asked Mr Corry, by email copied to Mr Ghaly, Mr Goradia and Mr Singh, for "the passwords for the Microsoft 365 Dynamics" (my emphasis; thus seemingly contemplating that there might be more than one). Mr Corry responded, just before 7:00pm, providing one password. The Second Respondent shortly after sent an email to the Independent Solicitor, advising that, in accordance with order 6 of the orders made by Kunc J that day, "I am instructed that the password to the Microsoft 365 Dynamic account is …" (again, my emphasis); and stating that:
The First Defendant [Mr Corry] has requested that this password not be changed as he will be defined [sic; scil denied] access to contact legal representatives and prepare a defence for the matter.
The Respondents say that the 21 February 2019 email from the Second Respondent to the Independent Solicitor is important as it made no secret of the fact that Mr Corry was still accessing the Dynamics Account and would continue to require access (hence the request that the password not be changed). I am not persuaded that this conclusion follows. It says nothing about Mr Corry's actual access at that time, and in my opinion it must have conveyed to the reasonable reader that Mr Corry needed the password in order to be able to access the account (or accounts) to which the password provided access (noting that the password provided was said to be to the Microsoft 365 Dynamics Account) (and that without that password he would not have the required access).
Insofar as this email conveyed (as I think it clearly does) that, without the password, Mr Corry would not have access to whatever accounts he needed to contact his legal representatives and to prepare a defence for the matter (the latter surely including the Dynamics Account, since that was where the alleged confidential information would, on any view of things, most likely have reposed, as it comprised pharmaceutical formulas of the kind that were typically located on the Dynamics Platform), it is inconsistent with there being multiple "gateways" or "keys" to the Dynamics Account (because if there were multiple gateways it would have been open to Mr Corry at any time, as in fact happened, to use or create a different email account to access the Dynamics Account).
[20]
22 February 2019
On 22 February 2019 at 12:06pm, the Applicants' solicitors, HWLE, wrote to the Second Respondent at Miller & Prince, stating, inter alia:
At some time between 20 February 2019 and 21 February 2019, the password for the Microsoft Office 365 was subsequently changed, in an apparent attempt to frustrate the orders made by Justice Kunc on 18 February 2019. Such changes appear to have been made by the First Defendant [Mr Corry].
In the circumstances, we intend upon seeking for the Independent Computer Expert to change the password for the Microsoft Dynamic 365 software so that the status quo of the Search Order can be maintained.
At 5:03pm on 22 February 2019, a solicitor in the Independent Solicitor's office sent an email to the Second Respondent and others stating that:
Microsoft 365 Account Password
Additionally, we advise that the ICE [Independent Computer Expert] has changed the Microsoft 365 account password this afternoon, at the request of the Plaintiffs' solicitors, in order to secure the account until the ICE has completed downloading Dynamics.
[Emphasis added]
It is clear from the exchange of emails on 22 February 2019 that the Independent Solicitor appears to have considered that change of the password would "secure" the Dynamics Account; and it seems likely from this that the Applicants would have understood that this would prevent Mr Corry from accessing the First Corry Email Account and the Dynamics Account (as has been alleged in the Points of Claim at [17]). This is not consistent in my opinion with the Applicants having an understanding at the time that there were multiple passwords that would have permitted access to the Dynamics Account (whatever may have been the Respondents' understanding at the time).
Meanwhile, on around 22 February 2019, the First Respondent took over carriage of the review of electronic documents to determine which documents were privileged (see Mr Gerges' affidavit of 10 February 2020 at [24]).
[21]
25 February 2019 email from Mr Corry requesting password
On 25 February 2019 at 10:02pm, Mr Corry sent an email to the Second Respondent (from a different email address to which I will refer as the "the legal_ac@nexgenpharma" login or email address) stating:
Tomorrow I REALLY need you to jump on getting my email account back up.
I will be following it up tomorrow with Frank. But this is a company email company issue and we NEED it operational to firm up the Brett response.
[The Brett response, as I understand it, is a reference to an unrelated matter involving a statutory demand served on Medicina by a former employee of the company - see Mr Athanassios' affidavit sworn 10 January 2020 at [56]; and Mr Gerges' affidavit sworn 10 January 2020 at [20].]
The 25 February 2019 email from Mr Corry is unclear as to the account or accounts to which he was insisting he required access. It refers to his "email account back up", which would be consistent with Mr Corry needing to be provided with a password to access his personal or business email accounts. However, it seems inherently more likely that documents required in order to respond to a statutory demand (at least insofar as they comprised invoices or the like) would have been located on the Dynamics Account. In any event, it must have conveyed to a reasonable reader in the position of the Second Respondent that there was some "company issue" to do with Medicina's business that necessitated Mr Corry being provided with access to his email account; and that he did not at that time have access to whatever account was necessary for him to deal with a matter involving the operation of the Medicina business. The use of capitals in the email can only be understood as a matter of emphasis (or agitation) on Mr Corry's part.
On 26 February 2019 at 10:16am, the Second Respondent responded to the above email, in an email copied to the other directors of Medicina, stating:
Hi Alex - as per the attached email, the ICE has not finalised the downloading of the Microsoft Dynamics. They will be providing me an update today in respect of when they propose to finalise the download of the Microsoft Dynamics. Based on the attached email, once they've finalised the download of the Microsoft Dynamics, we should have access to the account. …
[Emphasis added]
Pausing here, the last sentence of this email (insofar as it is responding to Mr Corry's seemingly agitated demand for the Second Respondent to "jump on getting my email account back up") seems to link access to the "email account" to the status of the download of the Dynamics Account. This suggests that it was the Second Respondent's understanding that, absent access to the "account" (i.e., his password to the First Corry Email Account) Mr Corry could not access the Dynamics Account (consistent with what seems to have been the Applicants' understanding and inconsistent with the proposition now put by the Respondents that everyone should have realised that at all times Mr Corry has had access to the Dynamics Account).
[22]
Provision of password
On 27 February 2019 at 1:48pm, the Independent Computer Expert sent an email to, among others, the Second Respondent (addressed among other email addresses to the legal_ac@nexgenpharma email address, which was not, it seems, at that stage linked to the Dynamics Account), advising that:
We have finished downloading the data from the Microsoft Dynamics Account and can arrange for the drive to be delivered to Mills Oakley …
We are also ready to provide the password back to Mr. Corry in order for him to access his account. Can we please be provided with his mobile number, in order for me to text the password to him?
At 1:50pm that day, the Second Respondent emailed Mr Corry (at the legal_ac@nexgenpharma email address) and the other directors of Medicina, stating that:
Alex - see attached. They have completed the download. They will be texting you the password. What your number?
At 2:00pm that day, Mr Wallman (of HWLE) sent an email to the Independent Computer Expert and others (including to "Alex Corry", and to the legal_ac@nexgenpharma email address - which as I understand it had not yet been linked to the Dynamics Account), responding to the 1:48pm email from the Independent Computer Expert (see above), stating:
Consistent with the Orders of 21 February 2019, we ask that you do not provide the password to the defendants.
To the extent that the Orders of 21 February 2019 are varied, we will notify you immediately.
Tellingly, in my opinion, Mr Corry's response to this, sent by email to the Second Respondent at 2:03pm (from the legal_ac@nexgenpharma email account), was "Wtf??!!!". (The Respondents admit that Mr Corry's response was as alleged - see Points of Defence at [20].) This reaction on its face appears to be inconsistent with Mr Corry at that stage being able to have access to the account (or accounts) accessible via the First Corry Email Account (since it is difficult to see why he would be so frustrated if he had been able, at all times, to have access to his accounts). Although I accept that it might be consistent with Mr Corry being frustrated at being disbarred only from access to his personal email account (which, as I understand it, is how the Respondents argue that this communication should be read), and not from the Dynamics Account as such; it is surely not coincidental that Mr Corry's next step (see below) was to set up the link to the Second Corry Email Account which did have access to the Dynamics Account (and it does not appear that thereafter Mr Corry was agitating for the return of access through the First Corry Email Account).
[23]
27 February 2019
At 7:46pm on 27 February 2019, the Second Respondent sent an email addressed to Mr Corry's "legal_ac@nexgenpharma" email address and to Mr Ghaly and Mr Goradia. The email (marked as having high importance) is said by the Applicants to be fatal to the Respondents construction argument and current position as to their understanding at the relevant time. Relevantly, it contained the following:
Prohibitions of access to material
Alex, I understand that you do not agree that they are entitled to maintain the password to the Microsoft Dynamics Accounts.
The prima facie evidence in respect of the Microsoft Dynamics Accounts is that the cloud solution contains information which ought to have been delivered up as part of the prior proceedings. That is the position contended for by the Plaintiff and it is on that basis that they are insisting on the information being stored with the independent solicitor rather than being returned to the relevant defendants (see order 2 of the 21 Feb 2019 orders).
The Barrister [Mr Mirzai] and I discussed this today and to be completely frank, it does not at all assist the defendants that during the course of executing the search order, the password to the account was changed by the only person who could have had access to it. If nothing else, that conduct would support the drawing of an available inference that there is information within the cloud account that the NexGen (and its stakeholders) ought not to have had access to.
The Barrister's view is it would be difficult for NexGen (and its stakeholders) to insist on having access to the material until the material issues in dispute in this case have been determined.
The email canvassed the possibility of seeking an undertaking to be proffered by the Applicants as to loss and damage caused by the imposition of the "restraint of the information"; but said that "there is absolutely no point in doing so if the reality is that the information that has been confiscated contains the very thing the Plaintiffs suspect it contains". The email also stated:
Should the material returned back to the Defendants
The reason why there is now very little scope (and in our view - no tenable scope) for an argument that the material ought to be returned is because of the conduct of the certain defendants alluded to above (in addition to their initial attempts to dispose of or hide material - and in addition to the circumstances of having settled the initial proceedings). Because the property is not to be returned to the persons from whom it was seized, namely - the Defendants, there would be no basis for access to the password to be provided to the Defendants.
[24]
Privilege Review
In the period from 28 February 2019 to 8 March 2019, solicitors from Miller & Prince conducted a review of the electronic documents to identify documents potentially subject to a claim for privilege (see Mr Athanassios' affidavit sworn 10 January 2020 at [58]-[80]; Mr Gerges' affidavit of 10 January 2020 at [27]-[42]).
It appears that the Respondents encountered various practical difficulties in the privilege review process (as described in the affidavit references above). One of those practical difficulties related to access to the imaged versions of the devices and the Dynamics Platform, which was apparently not only technically onerous but also very costly (including because specialist software was required to access and navigate those imaged versions). Indeed, as it ultimately transpired, it appears that had an attempt been made to carry out the privilege review on the imaged version of the Dynamics Platform, it would have been unworkable in any event - as explained in Mr Wallman's affidavit affirmed16 May 2019 - since it appears as an unintelligible source code.
By letter dated 6 March 2019, the Second Respondent raised these concerns with the Applicants' solicitors and proposed certain changes to the regime established by the 21 February 2019 Orders: first, to extend time for the privilege review; second, to conduct the privilege review on the devices themselves and on the live Dynamics Platform; and, third, to transfer the control of the devices and the Dynamics Platform from the Independent Solicitor to the Respondents' firm.
The Second Respondent relevantly offered an undertaking at that time not to permit any third party access to any of the information on the devices or the Dynamics Platform "without being in the presence of a legal representative". Pausing here, it is difficult to square the proffering of such an undertaking with the Second Respondent having an understanding at that time that there were numerous users who already had unfettered access to the Dynamics Platform (and there is force to the Applicants' submission that if that was indeed the Respondents' understanding at the time then the undertaking would have been impossible to honour). However, as I understand it, the Respondents' response to this is, again, to contend that their understanding was that all that was restricted was access through Mr Corry's individual and unique login - the First Corry Email Account.
[25]
Access to the Dynamics Account by Mr Corry re Notification Alerts
Meanwhile, from around 28 February 2019, Mr Corry accessed the Dynamics Account to set up a Notification Protocol - i.e., an alert system so that he would receive notifications to the Second Corry Email Account as to when documents were reviewed by the Applicants using access via the First Corry Email Account (see Points of Claim at [31]) (Notification Alerts). There are copies in evidence of numerous such Notification Alerts in the period from at least 3 April 2019 to 3 June 2019. However, it is not established that the Respondents were aware of this prior to the 14 March 2019 directions hearing (see below). Indeed the Respondents do not appear to have been forwarded a Notification Alert until 11 April 2019 (the relevance of that date being that it is the first alternative date from which the wasted costs order is claimed).
[26]
14 March 2019 directions hearing
The matter came back before Kunc J on 14 March 2019. On that occasion the Applicants were represented by Counsel at the directions hearing, as was Mr Corry. Medicina was represented by the Second Respondent.
The Respondents place emphasis on what was said in the course of this directions hearing; in particular, on what they maintain was a concession, during that directions hearing, made by Senior Counsel for the Applicants that the Medicina (or NexGen) business was still running (T 3.21-22); in the context of the agreement by the Applicants to the defendants' solicitors taking custody of the various devices and keeping them in their offices while having first access for the purposes of the privilege review (T 5.29-37). The Applicants point to the following exchange in relation to the Dynamics Account password (from T 6.37-41):
HIS HONOUR: But is there a problem with giving them the new password if they need it?
DAWSON: No, your Honour. And we've proposed that in the orders …
The Respondents emphasise that Senior Counsel for the Applicants told Kunc J that "[t]he problem with this [i.e., the extension of time sought for the privilege review] is that this business is still running" and that "we say they're still using our information and our formulas and other things". The Respondents say that, by this, it was being suggested by the Applicants that because the Respondents were still using the Applicants' information there was a need to have the matter progressed expeditiously (see 17/7/20 at T 63.10); and hence that there was no suggestion that on that occasion that what was achieved on 21 February 2019 was a shutdown of the business. The significance attached to this was that, notwithstanding this, no injunction was sought to restrain the conduct of the business.
The Applicants say that a review of the entirety of the transcript shows that this did not amount to an acknowledgment or concession that they knew that people were accessing the Dynamics Account. It is said that the concern expressed on the Applicants' behalf at the hearing on 14 March 2019 before Kunc J, that the ongoing operation of Medicina's business involved the use of the Applicants' information and formulas, cannot be converted into an admission that the Applicants knew that the defendants were continuing to access the Dynamics Platform. It is noted that no such "concession" is recorded; and, in any event, it is said that it could not have been made at that point (i.e., before the Applicants had had access to the platform themselves). It is noted that the 14 March 2019 Orders were made to facilitate the Respondents' privilege review of the Dynamics Platform and to defer the Applicants' access to the Dynamics Platform to gather evidence. The Applicants say that it is not clear how the Respondents can suggest that the submission was a concession in light of the concerns expressed on behalf of the Applicants at the hearing before Kunc J on 21 February 2019, namely that if the defendants were given access to the Dynamics Platform, they would continue to use any information on the platform in breach of the settlement of the 2017 Proceedings (see 21/2/19 at T 3.44-45; T 5.9-10).
[27]
Privilege review after 14 March 2019
From 14 March 2019 to 21 March 2019, Miller & Prince undertook further work reviewing the devices and the Dynamics Account to identify privileged documents. The First Respondent took carriage of the privilege review, and the Second Respondent had limited involvement in that review (see Mr Athanassios' affidavit sworn 10 January 2020 at [86]-[95]; and Mr Gerges' affidavit sworn 10 January 2020 at [46]-[52]). The First Respondent has deposed that each day in the period from 15 March 2019 to 21 March 2019, Mr Corry attended the offices of Miller & Prince with his own solicitor to review the electronic documents on the devices and on the Dynamics Account; and that the First Respondent was not involved in that review (see Mr Gerges' affidavit sworn 10 January 2020 at [50]).
[28]
Collection of devices by Respondents from Independent Solicitor
At 11:22am on 14 March 2019, Ms Tereana Suhle, an Associate at Miller & Prince, sent an email to the Independent Solicitor, asking when someone from Miller & Prince would be able to collect the relevant devices from the office of the Independent Solicitor, and advising that Miller & Prince would forward a sealed copy of the 14 March 2019 Orders when they were available online. That email was copied to both of the Respondents, and to the solicitors for the Applicants and for Mr Corry.
At 11:37am on 14 March 2019, the Independent Solicitor responded to Ms Suhle, indicating that he would comply with the 14 March 2019 Orders when he knew what orders had been made. That email was also copied to both of the Respondents, and the solicitors for the Applicants and for Mr Corry.
At 1:00pm on 14 March 2019, Mr Wallman sent an email to the Independent Solicitor setting out the 14 March 2019 Orders, including the Undertaking. Mr Wallman's email, and the preceding email chain, was copied to both of the Respondents, and the solicitor for Mr Corry.
[29]
The 15 March 2019 email
On 15 March 2019, at 10:36am, Ms Suhle sent an email to the Independent Computer Expert referring to the 14 March 2019 Orders and requesting that she be provided with the password or any variation to the password in respect of the Dynamics Account as a matter of urgency. Ms Suhle's email, and the preceding email chain, was copied to the Respondents (see Mr Gerges' affidavit sworn 10 January 2020 at [53]; and Mr Athanassios' affidavit sworn 10 January 2020 at [96]).
At 12:03pm on 15 March 2019 (in what turned out to be the fateful email, in that this was what was later forwarded to the defendants in admitted, but inadvertent, breach of the Undertaking, to which I will refer as the Password Email), the Independent Computer Expert sent an email to Ms Suhle (copied to each of the Respondents and to the solicitor for Mr Corry) providing the "password for Microsoft Dynamics" (the Password) and advising that the username was the alex@nexgenpharma email address.
Pausing here, I note that, in general, the email communications between the relevant persons appear to be made by way of a response to preceding emails rather than as separate communications and that they therefore often formed part of an email chain.
At 4:05pm on 15 March 2019, the First Respondent sent an email to the Independent Computer Expert, which included the preceding email chain, requesting that the Independent Computer Expert confirm the passwords for various electronic devices.
At 4:07pm, on 15 March 2019, Mr Corry (not as part of the above email chain) sent an email to his solicitor and to each of the Respondents about the issue of privilege (see Mr Athanassios' affidavit of 10 January 2020 at [180]).
At 4:58pm on 15 March 2019, the Independent Computer Expert sent an email to the First Respondent, which included the preceding email chain (but not the above 4:07pm email from Mr Corry which was not part of that email chain), copied to each of Ms Suhle, the Second Respondent, and Mr Corry's solicitor, advising that the Independent Computer Expert had not required passwords to access the devices but attaching a document recording passwords to the devices that Mr Corry had previously provided.
At 5:06pm on 15 March 2019, the First Respondent sent an email (the Breach Email) to all of the defendants (i.e., to all of the directors of Medicina, including Mr Corry at the legal_ac@nexgenpharma email address), copied to the Second Respondent, asking the defendants if they could clarify which of the passwords to the devices provided by the Independent Computer Expert belonged to which of the particular devices. The email included the preceding email chain, including (relevantly, and most unfortunately to say the least) the Password Email. The email stated:
Dear All,
Please see email below and attachment.
None of the passwords attached seem to work.
If either of you can clarify which password belongs to which device (and soon) that would be much appreciated as we are short on time as it is for what will no doubt be an extensive exercise.
I look forward to your prompt reply.
[30]
21 March 2019 directions hearing
On 21 March 2019, there was another directions hearing before Kunc J. By that stage, the privilege review had been completed, and what was apparently envisaged was that the Applicants were to be permitted to have access to those documents over which there was no claim for privilege.
His Honour made orders providing for the provision by the solicitors for Medicina to the solicitors for the Applicants by 5:00pm that day of "the password to the Microsoft 365 Dynamics Account and all passwords to the Accessible and Inaccessible Devices" (as there defined) (see order 2). Pursuant to order 3, the solicitors for the Applicants undertook to the Court not to change or otherwise allow the password to be varied "in respect of the Microsoft 365 Dynamics Account" and not to provide the password to the Microsoft 365 Dynamics Account to the Applicants, their officers, representatives or employees unless and until further order of the Court. Pausing here, this again suggests that there was an understanding at that time that there was only one password to the Dynamics Account.
At 5:09pm on 21 March 2019, the Second Respondent provided to Mr Wallman the passwords for the devices and the password to the Dynamics Platform, following which the Applicants commenced their evidence review.
[31]
Applicants' review of documents on Dynamics Account
Between 22 March 2019 and 23 April 2019, the solicitors for the Applicants reviewed documents on the Dynamics Account (see Points of Claim at [28]-[30]; Mr Wallman's affidavit affirmed 12 August 2020 at [42]-[57]; and the Wallman Costs Affidavit at [12]-[13]). Mr Wallman has deposed that the purpose of the review was to identify various documents, including documents recording formulas of medication, necessary to prove the Applicants' case against the defendants (see Mr Wallman's affidavit affirmed 7 May 2019 at [20]). As part of that review, two computer analysts, Mr Nick Bova and Ms Asha Vasu, accessed the Dynamics Platform for the purpose of comparing the levels of similarity between formulas on the platform and the Applicants' formulas (see Mr Wallman's affidavit affirmed 7 May 2019 at [21]).
Relevantly, Mr Wallman has deposed that he accessed and reviewed approximately 100 documents, but that he did not record the majority of the documents he reviewed as he was not anticipating that access to the Dynamics Platform would be disrupted. He did record twelve documents he accessed and reviewed on 22 March 2019 (see Mr Wallman's affidavit affirmed 7 May 2019 at [25]-[26]; and Ex A). Mr Wallman's evidence is that he experienced no problem accessing the Dynamics Platform of any documents on the platform during his review. He says that he was told by Mr Bova and Ms Vasu that they were able to access documents containing formulas through the SharePoint screen on the Dynamics Platform (Mr Wallman's affidavit affirmed 7 May 2019 at [22]; T 30.21-30.34).
[32]
Mr Corry's claim for confidentiality
On 26 March 2019, Mr Corry swore an affidavit in support of his claim for confidentiality in respect of the Dynamics Account and the information held in that account (that affidavit forming part of Ex 1). The Respondents note that that affidavit explained the operation and functionality of the Dynamics Account in detail; and that it also annexed a number of pages detailing 46 different applications or files and including hyperlinks to access each file and separate links to identify where each application or file was located. It is submitted by the Respondents that the affidavit plainly could not have been prepared without Mr Corry having access to the Dynamics Account (the Applicants cavil with this). It is noted that the affidavit was served on the Applicants and Mr Wallman read it. (Pausing here, Mr Corry's account of the operation and functionality of the Dynamics Account could presumably have been prepared without actual access at the time to the Dynamics Account if it was based on his recollection but, as I understand it, it is the inclusion of hyperlinks and the like is said to show that Mr Corry had access to the Dynamics Account at that time. Nevertheless, it is not clear to me that this would necessarily have been apparent to the Applicants' solicitors.)
The Respondents say that the affidavit sworn 26 March 2019 of Mr Corry is a further example of information being provided to the Applicants which made no secret of the fact that Mr Corry continued to have access to the Dynamics Account. It is said that the Applicants raised no issue about that at the time. The Respondents say that it would have made no sense for Mr Corry to be raising the issue of confidential information contained on the Dynamics Account if the effect of the court orders was to prevent him and the other defendants from using or accessing the Dynamics Account. It is said that on that construction of the relevant orders, the documents and information contained on the Dynamics Account would have ceased to be of any interest to Mr Corry and the other defendants.
[33]
27 March 2019 directions hearing
On 27 March 2019, there was another directions hearing before Kunc J. On that occasion Counsel appeared for Mr Corry and the Second Respondent appeared for Medicina. Orders were made which permitted the Applicants to inspect the Confidential Documents (as defined) upon terms that any officer of the Applicants who wished to inspect those documents was required first to sign and serve on the solicitors for the defendants the Confidentiality Undertaking as defined in the 21 March 2019 Orders (see Mr Wallman's affidavit affirmed 12 August 2019 at [43]).
[34]
Review of documents on Dynamics Account
On and from 27 March 2019, Mr Bova and Ms Vasu, reviewed documents on the Dynamics Account through the First Corry Email Account (see Points of Claim at [30]).
[35]
Notification Alerts to Mr Corry of access to the Dynamics Account via First Corry Email Account
As adverted to above, in the period from 3 April 2019 to 3 June 2019, at least 102 Notification Alerts were sent to the Second Corry Email Account detailing documents reviewed by the Applicants on the Dynamics Account (see Points of Claim at [34]; Mr Wallman's affidavit affirmed 12 August 2019 at [50]-[55]).
At 8:43pm on 11 April 2019, Mr Corry sent an email (from his alexcorry@nexgenpharma email address; i.e., the Second Corry Email Account) to his solicitor and to the Second Respondent, which stated:
Hi Dan and Chris.
Fyi, Please see below.
My understanding was that the orders provided access to dynamics.
The file accessed below is a file listed on SharePoint which is a document server.
I would attest a search beyond scope of the pipulse [sic; scil purpose] and the terms of the current orders
I'll send through more as they come
Cheers
AC
The document that appeared (and to which reference was there made) was described as "Notification for the alert 'Bova Compounding Alert Policy'", and recorded that the user (alex@nexgenpharma) (i.e., the First Corry Email Account to which the Applicants at that stage had what they clearly understood to be the only access) had accessed a specified file.
The Second Respondent deposes that, when he received that email, he had a discussion with the First Respondent to the following effect:
A: "George, an email came through from Alex with some sort of notification alert - what's he on about?"
G: "Not important."
A: "I don't understand what this is."
G: "Don't worry about it."
(see Mr Athanassios' affidavit sworn 10 January 2020 at [115]; and Mr Gerges' affidavit sworn 10 January 2020 at [68]-[71]). In their submissions, the Applicants point to matters that they say cast significant doubt on whether any such conversation occurred, which I address in due course.
From 12 April 2019 to 24 April 2019, further emails were sent by Mr Corry (at the alexcorry@nexgenpharma address) to his solicitor and the Second Respondent, forwarding similar Notification Alerts showing access to files (see Mr Athanassios' affidavit sworn 10 January 2020 at [116]-[117]; and Mr Gerges' affidavit sworn 10 January 2020 at [72]-[73]).
The Respondents admit that they received a "small number" of emails from Mr Corry indicating that there had been activity on Medicina's Dynamics Platform but they maintain that the content of those emails did not inform the Respondents that Mr Corry had established a new means of access to the Dynamics Account (and in any event, as already noted, they say that access to the Dynamics Platform or Dynamics Account by Mr Corry was not prohibited by the orders).
[36]
11 April 2019 directions hearing
On 11 April 2019 there was another directions hearing before Kunc J. On that occasion, orders were made joining the other directors of Medicina (Mr Singh, Mr Goradia and Mr Ghaly) as the third to fifth defendants, respectively, to the 2019 Proceeding. From that time, the Second Respondent (and Miller & Prince) acted for those defendants as well as Medicina in the 2019 Proceeding.
[37]
Alleged difficulties with Applicants' access to Dynamics Account
The Applicants allege (see Points of Claim at [39]) that on 23 April 2019: their access to documents containing formulas on the Dynamics Account was disabled; the format of the Dynamics Account was changed, so that it appeared that folders had been removed and documents containing formulas were no longer visible or accessible and had been deleted; and that they identified for the first time that the Second Corry Email Account had been created (with access to the Dynamics Account).
Mr Wallman's evidence is that on 23 April 2019 he was informed by Mr Bova that his and Ms Vasu's access to the Dynamics Platform had been disabled (Mr Wallman's affidavit affirmed 7 May 2019 at [23]; Ex A; 6/4/20 at T 31.34-44); and that he was informed by Mr Bova and Ms Vasu, that the format of the Dynamics Platform had changed, in that folders appeared to have been removed and documents containing formulas were no longer visible or accessible (see Mr Wallman's affidavit affirmed 7 May 2019 at [24]; Ex A; 6/4/20 at T 31.44-32.5).
After being informed of the above, Mr Wallman attempted to access documents on the platform between 1 and 7 May 2019. Mr Wallman's evidence is that he was unable to access the majority of the twelve documents that he had previously accessed; and that he was otherwise only able to access documents containing formulas that were identified as "recently accessed" documents (Mr Wallman's affidavit affirmed 7 May 2019 at [28]-[30]; Ex A). (The Applicants note that there was no challenge in cross-examination to the above evidence.)
Meanwhile, the Applicants say that, as a result of the disruption caused to the Applicants' review of the Dynamics Platform, they ceased to review the Dynamics Account on 23 April 2019 (Mr Wallman's affidavit affirmed 12 August 2019 at [64]).
[38]
23 April 2019 allegation by Applicants of misconduct
At 9:36pm on 23 April 2019, HWLE wrote to Miller & Prince (addressed to the Second Respondent) and to Mr Corry's solicitor, asserting, inter alia, that files to which they had previously had access on the Dynamics Account had been disabled; and that the defendants had attempted, unsuccessfully, to delete or destroy the records of a number of documents which "evidence the deliberate and calculated use and/or exploitation" of the Applicants' business records to carry on Medicina's business.
The letter demanded that: affidavits be provided from each of the defendants confirming that they had not deleted, or directed others to delete, documents; changed the Dynamics Account password; or limited the Applicants' access to the Dynamics Account; and that affidavits also be provided from every employee of the respective law firms concerned with the matter to confirm that they had not provided the password to the Dynamics Account to any of the defendants or their employees or agents.
Pausing here, one would think (particularly in light of the history of what had already occurred in the matter) that this would have caused no little concern on the part of the Respondents; and, not surprisingly, it appears from the Respondents' evidence in cross-examination (and to the promptness of their response in seeking instructions about this email - which occurred in the early hours of the morning on 24 April 2019) that it did.
The Second Respondent's evidence, for example, was that he read the Applicants' solicitors' letter of 23 April 2019 the same evening he received it ([131] of his affidavit sworn 10 January 2020). In cross-examination (on 6/5/20 at T 191.25-192.4), he said he may have been out of the office at 9:30pm but then, once home at about 11:00pm, he would have normally (and says he did in fact on that occasion) checked his emails, responded to emails, "and then addressed this" (referring to the letter of 23 April 2019). He agreed that upon reading the letter, which raised as a possibility the fact that the Respondents' firm had breached its undertaking to the Court, it "sent a cold chill through [his] blood." Further, he agreed that it was possible that he conducted some enquiries of his email at the time, shortly after receiving the letter, "to address the cold chill running through [his] blood about the possibility that [he] had breached an undertaking to the court". That accorded with his earlier evidence (on 6/5/20 at T 189.26-28) that when he received the letter he "wanted to get on top of it and find out what the issue was and why it had been - why the plaintiffs had been complaining about the access".
[39]
Directions hearing on 8 May 2019
There was a directions hearing before Kunc J on 8 May 2019 at which his Honour was informed by Senior Counsel for the Applicants that a second email account "with the status of global administrator" had been set up in Mr Corry's name after the search order was made; and that the Applicants did not know whether or not that email account had been used to access the "365 database".
[40]
Notice of motion filed 10 May 2019 and hearing 16 May 2019
A notice of motion was then filed by the Applicants on 10 May 2019 seeking orders including that the defendants file and serve affidavits regarding access to the Dynamics Account.
That notice of motion was heard by Kunc J on 16 May 2019. There was debate as to whether there was any existing order preventing Mr Corry from creating the Second Corry Email Account, and it was accepted that there was no order in express terms that had been breached, but it was said that what had occurred was a frustration of the regime that had been put in place (namely, one where the restriction of access to his password was designed to prevent Mr Corry having access to the Dynamics Account). By then, the Respondents were clearly on notice of the Applicants' assertions (and apparent understanding) as to the Password preventing Mr Corry having access to Dynamics Account, whatever be the case with the other users at Medicina.
Various orders were made at that time (see the orders of 16 May 2019) which included orders: for the defendants to file and serve affidavits in the terms described in [23] of the Search Order, including details of any listed thing altered or deleted from the Dynamics Account, and of how the Second Corry Email Account was created and the use made of it; and restraining the defendants from creating any further accounts or profiles within the Dynamics Account, the First Corry Email Account, or the Second Corry Email Account. The orders contained a notation (see below) that the order did not prevent the creation by the defendants of new documents within the Dynamics Account or from accessing and viewing the Dynamics Account.
The Respondents emphasise the following exchange that occurred between Kunc J and Senior Counsel for the Applicants on that occasion (16/5/20 at T 22.47-23.50):
DAWSON: … the failure to tell us about the second Corry account, which it seems to us is the way in which Mr Corry has gone into the Dynamics Platform when all of the orders made to date … have been made build on the original search order and are designed to shut Mr Corry out…
HIS HONOUR: Just pause there, please, Mr Dawson. Show me which order you say is breached by the creation of the second email account.
DAWSON: Well, there isn't an order that says "he may not create a second account". I don't suggest that. What we say is - and I can take your Honour through the orders - every order built on restrictions against Mr Corry accessing the Microsoft Dynamics database.
HIS HONOUR: Well, where is the order that says he can't access it? You may say, all right, there's no order that says he can't create a second account. But what has he breached by creating that account and, if you're right, accessing the database?
DAWSON: Your Honour's right to put it in those terms because there isn't an order that says, "He may not access the database." What it says is he can't have the password to his account. That was, as I presented it, every time designed to prevent him having access. Now, if the order is wanting in the sense that there isn't an order in express terms saying, "And just for clarity, Mr Corry is not allowed to get behind this and access the Dynamics Platform in some other way" if that's the question then there is no order that says that. But plainly, given the terms of the search order which says "you can't delete things, you can't modify things, you can't move things around", and the orders that were made as we learnt of each attempt to frustrate the carrying out of that search order, if the proposition is that Mr Corry skates between the fence posts and gets through because there's no specific order saying he can't have any access, in circumstances where we were here a number of times, that would be a surprising conclusion, particularly in circumstances where the creation of the second account was not disclosed to your Honour...
HIS HONOUR: The fact remains, Mr Dawson, that you can't point me to an order which has been breached either by the creation of the second email account or indeed the use of the second email account to access the platform.
DAWSON: There's no order in express terms that he's breached, no, but the point is frustration, not breach of the order; frustration of the regime that's been put in [place].
HIS HONOUR: That's a different question.
DAWSON: Yes, and that's what I'm putting. But your Honour's question, is there an express order that I say he's breached? No. …"
[41]
Events after 16 May 2019 hearing
At 6:28pm on 16 May 2019, the Second Respondent wrote to all staff at Medicina to notify them of the orders and requiring each employee to sign a document confirming he or she had read the letter.
Affidavits (the May Affidavits) were in due course attested to by Mr Singh (on 24 May 2019), Mr Goradia (on 24 May 2019), and Mr Ghaly (on 27 May 2019), respectively. Each of Mr Singh and Mr Goradia deposed that he had not accessed the Dynamics Account since 18 February 2019 nor asked anyone to access it; had not viewed altered or deleted any information in the Dynamics Account; had not had access to the Second Corry Email Account; nor did he know whether that email account was used to access the Dynamics Account; or to delete, remove or change documents or to restrict the Applicants' access. Those affidavits were prepared with the assistance of the First Respondent.
Mr Ghaly's affidavit (also prepared with the assistance of the First Respondent) differed from the other two in that he swore that he did have access to the Dynamics Account but that he had not accessed it using the alex@nexgenpharma account (i.e., the First Corry Email Account), and that that account (i.e., the first Corry Email Account) was never in his possession. He deposed that he had not asked anyone to access the Dynamics Account or given anyone access to the Dynamics Account using his email or Mr Corry's email. He said that he had not had access to the Second Corry Email Account, nor did he know whether that email account was used to access the Dynamics Account, or to delete, remove or change documents or to restrict the Applicants' access to the Dynamics Account.
Mr Ghaly there deposed that he continued to use his account to process and dispense customers' prescriptions and orders; and to review and send emails and create new products, which included correcting any incorrect entries from time to time. He recalled deleting approximately 3 products (because there were replicated entries in the system) but otherwise did not recall deleting any files.
Mr Ghaly has sworn a further affidavit on 28 May 2019 in which he there set out details of enquiries made by him of thirteen employees of Medicina; including in relation to all of those employees their own ability to access the Dynamics Account via personal email accounts, their knowledge (or otherwise) of the Second Corry Email Account; and that they did not access the Dynamics Account using either the First Corry Email Account or the Second Corry Email Account.
[42]
Restoration of access and files
On 3 June 2019, a computer expert retained by the Respondents (Mr Ulysses Maclaren of SSW) provided a report concluding that: compromised access to the Dynamics Account had been caused by client customisations to the account most likely some time in the past which had been "broken" by a software update from Microsoft; there had been compromised access to the library but that had been completely restored; going as far back as 27 February 2019 (which was the earliest date of the audit logs), there had been no files deleted from the standard operating procedures library; several other files had been deleted by various users between 27 February and 28 May 2019 and the report provided a log of those files; files that were in the recycle bin had been restored; and, based on Mr Maclaren's investigations on the available dataset, no data had been lost.
[43]
Settlement of 2019 Proceeding as between Applicants and other defendants
A mediation was conducted between the Applicants and the second to fifth defendants in respect of the 2019 Proceeding on 4-5 June 2019, which resulted in a settlement under which settlement amounts totalling $1 million were to be paid in return for releases; and the parties thereto each agreed to bear its or his own costs. As part of the settlement, the Applicants obtained access to the Second Corry Email Account on 3 July 2019. (The Respondents suggest that the present claim for "wasted costs" does not take into account the settlement reached but the Applicants point out that each party agreed to bear its own costs under the terms of that settlement and that, at that time they were not aware of the impugned conduct.)
[44]
Discovery of emails in Second Corry Email Account
On 18 July 2019, HWLE wrote to Miller & Prince alleging that, after reviewing the Second Corry Email Account, there were emails in that account that suggested that Miller & Prince: had breached undertakings given to the Court; knew of and encouraged Mr Corry to circumvent court orders; and failed to inform HWLE or the court of that conduct. HWLE alleged that that conduct resulted in the Applicants being unable to prove or being significantly hindered in proving their case in the proceedings and incurring unnecessary and significant costs.
The Respondents have deposed that they first became aware on 18 July 2019 that the Password to the Dynamics Account had been sent to Mr Corry (see Mr Athanassios' affidavit sworn 10 January 2020 at [17],[173]; and Mr Gerges' affidavit sworn 10 January 2020 at [63], [112]).
On 26 July 2019 (following a directions hearing on 22 July 2019 before Kunc J (in which contempt proceedings against Mr Corry were foreshadowed, as was a s 99 of the Civil Procedure Act application against Miller & Prince), his Honour indicated that he expected Miller & Prince to respond in writing to HWLE; Miller & Prince subsequently wrote to HWLE on 26 July 2019 stating that the Password to the First Corry Email Account was inadvertently disclosed to Mr Corry. A further letter was sent on 1 August 2019 in relation thereto.
[45]
Orders in relation to the Dynamics Account
It is relevant at this point to consider the proper construction of the orders that were made in relation to the Dynamics Account because the Respondents maintain that a critically important issue in the case concerns the extent to which the 21 February 2019 and 14 March 2019 Orders restricted or prevented access to the Dynamics Account or the use of the Dynamics Account (an associated issue being identified as the extent to which those Orders required the Respondents and/or Mr Corry to provide passwords to the Applicants or the Independent Computer Expert). I will then consider the issue as to the Respondents' understanding at the time of those Orders (after first addressing the credit issues raised in relation to the Respondents).
At the outset I note that it has been said that the approach to construction of court orders is that which applies generally to the construction of contracts (see JKB Holdings Pty Limited v de la Vega [2013] NSWSC 501 at [87], per Lindsay J).
The Respondents have submitted that, in circumstances where the construction contended for by the Applicants is relied on as a central component of their s 99 of the Civil Procedure Act case against the Respondents, that construction should only be accepted if the Court is satisfied that is the correct construction on the Briginshaw standard. I have some difficulty with that proposition. Insofar as the relevant issue is the proper construction of orders made by the Court, that must be an exercise in reviewing and forming a concluded view as to the orders - not something influenced by the significance of the use to be made of those orders (cf perhaps the position where the issue is as to what a party's subjective understanding of the orders was). In any event, nothing turns on this because I am comfortably of the view set out in due course as to the proper construction of the orders having regard to the potential consequences of such a finding.
As adverted to already, the Applicants maintain that the construction contended for by the Respondents of the respective Orders is a recent invention only raised for the first time in submissions filed on 3 April 2019 before the first tranche of the hearing (and that this was in part responsible for the elongation of the hearing). The Applicants place significance in a change of terminology as between the Respondents' opening and closing submissions (namely that references in the former to the 21 February 2019 Orders and 14 March 2019 Orders relating only to "Mr Corry's email account" have been replaced with references to "Mr Corry's specific login" to the Dynamics Account) as a "further demonstration of the artificiality" of what they characterise as the Respondents' recent construction argument.
[46]
Proper construction of the relevant Orders
The opposing constructions have been outlined already. The Applicants contend that the Orders gave the Independent Solicitor and the Independent Computer Expert control over everything the subject of the Search Order (the devices, software and cloud storage); and prevented the defendants from having access to any of that material without further order of the Court, thus effectively locking Mr Corry and the other defendants out of the Dynamics Platform. The Respondents say that the Orders made by Kunc J: were directed to Mr Corry's login to the Dynamics Account via the First Corry Email Account; did not require the Respondents or any of the defendants to the proceedings to disclose to the Applicants, the Independent Solicitor, or the Independent Computer Expert any other user login details or associated password connected with the Dynamics Account; did not restrain or prevent the continued operation of the Medicina business; and did not restrain or prevent any employees or directors of Medicina from accessing or using the Dynamics Account. The Respondents say that the relevant Orders only ever restricted access to the Dynamics Platform using Mr Corry's unique login and password.
[47]
Applicants' submissions as to construction of orders
The Applicants say that the access regime effected by the 21 February 2019 Orders, the 14 March 2019 Orders and the 21 March 2019 Orders, and the conduct of the parties and their representatives in that period, was predicated on there being only one password to the Dynamics Platform.
The Applicants note that the Search Order refers to the Dynamics Platform in Schedule A (namely, "Medicina Pty Ltd's Microsoft Dynamics 365 software"). They say that this is obviously what the Independent Computer Expert was referring to in her report when referring to the "Dynamics Account", emphasising that the report makes clear that the Independent Computer Expert understood her task was to "take control" of two separate things: "the business Microsoft Office 365 account" (emails) and "the Microsoft Dynamics Account" for the purpose of imaging them so that they could be searched for the Applicants' information.
It is said that this is clear from the various references to emails on the one hand and to the Dynamics Platform on the other (on pp 5-7 of the report). It is also noted that the Evidence List and the Hard Drive Listing in Annexure E separately list the email accounts of the various employees of the second defendant, and the Dynamics Platform. The Applicants maintain that the reference to Dynamics on page 10 of the report in the Evidence List is plainly a reference to the platform ("Microsoft Office Dynamics"), referring to the description in the report of the login addresses as "Microsoft Office 365 Emails", as well as to the explanation on page 7 of the Report that the evidence captured and placed on a hard drive includes the emails of the various named persons (as well as the contents of the devices). It is said that there is no suggestion in the Report that those email addresses are also logins for the Dynamics Platform, let alone logins with their own password. I note here that the Evidence List includes no login for the Dynamics Platform itself.
The Applicants submit that the reference to "the Microsoft 365 Dynamics Account referred to on page 7 of the [Independent Computer Expert]'s report" in the 21 February 2019 Orders is a reference to the Dynamics Platform, and not merely to Mr Corry's access to it (and they say that that was how the Applicants, Mr Wallman and the Respondents understood it).
[48]
Respondents' submissions as to construction of orders
The Respondents say that the only regime with which the 21 February 2019 and 14 March 2019 orders were concerned was that the downloading of the Dynamics Account could take place via the First Corry Email Account; and that "means of accessing" the Dynamics Account and the Microsoft 365 emails was preserved (see 17/7/20 at T 66.15). In other words, they focus on the preservation of a means of access (not to the preservation of the material being downloaded via that means of access). With respect, I consider it difficult to accept that this is what the Applicants understood at the relevant time; but, in any event, once complaint was made in April 2019 about deletions from the Dynamics Account it must have been obvious to the Respondents that the Applicants thought that more was being preserved than just a "means of access".
The Respondents, however, maintain that there is no evidence to suggest that anything was said by anyone on 21 February 2019 to the effect that the purpose of the orders was to prevent all employees of Medicina from using the Dynamics Account, or to prevent Medicina from using the Dynamics Account in the operation of its business; and that a Ferrcom inference can be drawn from the fact that no evidence was called by the other legal representatives present on that occasion to contradict the Second Respondent's evidence of the discussions outside of Court (citing Commercial Union Assurance Company of Australia Ltd v Ferrcom Pty Ltd (1991) 22 NSWLR 389 (Ferrcom) at 418-419, per Handley JA).
Indeed, the Respondents' position on the present application is to criticise the drafting of the orders 6. They say that order 6 should have been drafted by the Applicants' legal representatives with greater precision and clarity. In particular, they say that the requirement for the provision of passwords by reference to page 7 of the Independent Computer Expert's report (without identifying any part of that page or otherwise specifying what was to be provided) was "clumsy" and "unhelpful"; and that it is plain from a reading of the first half of that page of the report that it is concerned only with the login and password that had been provided by Mr Corry to the Independent Computer Expert on 19 February 2019 (the First Corry Email Account), as detailed on p 5 of the Independent Computer Expert's report (where the Independent Computer Expert noted that Mr Corry had provided passwords to each of the two online accounts there specified with the same login name).
[49]
Conclusion as to proper construction of 21 February 2019 Orders and 14 March 2019 Orders
I have extracted the relevant orders above. What was required under the 21 February 2019 Orders in terms of the provision of passwords was the provision of "all passwords to the Microsoft 365 Dynamics Account referred to on page 7 of the Independent Computer Expert's report" (my emphasis).
Page 7 of that report (as noted above) made reference to the request Mr Corry had made for access to his "Microsoft Office 365 business account" (which had been refused until the Independent Computer Expert finished downloading "both online accounts") and to the disruption to Mr Banerji's downloading of the "Microsoft Office Dynamics Account" (i.e., there was a distinction there drawn between the "Microsoft Office 365 business account", which by reference to the evidence list referred to above must have been to Mr Corry's email account, to which the Independent Computer Expert understood Mr Corry had requested access; and the "Microsoft 365 Dynamics Account" or "Microsoft Office Dynamics Account", the downloading of which had been disrupted).
It is in my opinion significant that what was there being required by the terms of order 6 was the provision of "all passwords" (as I have emphasised) to the "Microsoft 365 Dynamics Account". To a reasonable reader who understood (as the Respondents must, on their present case, have done) that there was a difference between the "live" Dynamics Platform and an individual's email account, the reference to the Microsoft 365 Dynamics Account must have been understood as a reference to the "Dynamics Account" (i.e. to the live platform). Therefore, the order for provision of "all" passwords must have encompassed, at the very least, all passwords the use of which would enable a user to have access to the Dynamics Platform. In its terms, therefore, I read "all" passwords there to mean every single password of however many employees had access to the Dynamics Account.
There might perhaps have been a distinction drawn between passwords that gave limited rights of access (such as viewing, but not editing, documents on the platform); but that would involve reading words into the orders that are not there. In other words, I accept that there might be an argument that it was not necessary, in order to preserve the integrity of the documents on the platform, for a password that gave "viewing only" access to be obtained but that is not the point since no such limitation was built into the orders. In any event, that is a moot point because even if such a limitation were able to be read into the orders, at the very least, the orders would encompass all passwords with user access that permitted the documents on the platform to be amended or deleted. The reference to "all" passwords thus seems to me to make clear that the parties contemplated (whether correctly or otherwise) that there might be more than one password that gave access to the Dynamics Account; and I see no basis to read down the orders to restrict this to "all passwords" that gave Mr Corry access to the Dynamics Account.
[50]
Credibility
The Applicants maintain that the Respondents' evidence was attended by considerable doubt and, in some instances, was demonstrably false. It is said that each Respondent demonstrated an unwillingness to answer questions in a frank manner; and that there were several occasions on which they were forced in cross-examination to contradict an earlier answer they had given. The Applicants say that the Respondents' evidence in cross-examination as to their claimed understanding of the Independent Computer Expert Report was unconvincing.
In particular, the Applicants point to the following in respect of each of the Respondents.
It is noted that the First Respondent, when asked about his state of mind as at 15 March 2019 as to the reason equipment had been moved from Medicina's business premises on the day the Search Order was executed, initially maintained that no reason occurred to him at the time (T 32.37-33.1) but then admitted that he knew at the time that it was to avoid the search party finding those items (T 33.36-44); but said that he had never turned his mind at the time to Mr Corry's reason for attempting to frustrate the Search Order (T 43.11-13). The Applicants say that the First Respondent was more focused on his evidence that he was not going to judge Mr Corry's future conduct by reference to past conduct (T 42.29-30; 43.6-9), but when pressed he did admit that, at the time, he thought that Mr Corry's actions were to prevent the Applicants from proving their case (T 43.15-46) (but see T 43.48-45.1).
The Applicants next say that the First Respondent obfuscated in his evidence in relation to the 24 April 2019 notification email and that he gave answers which were "self-evidently contradicted" by the document itself (see at T 120.46-127.34); for example, maintaining that the "notification" referred to was in relation to the IP address search and not the alert that Mr Corry had set up in the Dynamics Platform.
As to the evidence in relation to the discussion between the Respondents in relation to the 23 April 2019 letter, the Applicants point to inconsistency between the First Respondent's 10 January 2020 affidavit at [83] (in which the First Respondent said that the Second Respondent had "explained the 23 April Letter" to him); and his oral evidence in which he denied that the Second Respondent had explained the letter to him, saying that he had said to the Second Respondent that he would read the letter first and come back to him (see T 133.26-7). Reference is also made to the evidence at T 133.33-38; T 133.40-134.11 in that regard.
[51]
Respondents' submissions as to their credit
The Respondents maintain that they have taken the allegations made against them very seriously; they emphasise that they are both at an early stage of their careers, and they point to the stress of the hearing as matters to be taken into account when considering their evidence. As adverted to above, they submit that the stress of skilful cross-examination in the present case was exacerbated by the fact that it proceeded "at great length over multiple days with hearings that often ran for significantly longer than usual court hours and with reduced breaks", and that it took place "in a confined room, sitting in close proximity to the cross-examiner during a pandemic and with the challenges of video links to the Court". The Applicants challenge the premise on which this last submission is made.
In that regard, while I accept that the fact that the matter was heard during the height of the restrictions due to the current COVID-19 pandemic meant that there was some disruption occasioned by technological issues, I do not accept that there was any procedural unfairness or undue stress thereby occasioned to the Respondents. In particular, insofar as it was submitted that the cross-examination of the Respondents was more stressful because it was conducted in a confined conference room and beyond normal Court sitting hours, I repeat my observation made in the course of submissions that the Respondents did not seem to me to be subjected to any more stressful cross-examination than would have been the case had they been sitting in the witness box in the court room (and indeed I would have thought it at least arguable and probably more likely that the latter would have occasioned a greater level of stress due to the formality of the court room). (Pausing here, to my observation the conduct of hearings in the virtual court room environment has had a regrettable tendency to lead to informality amongst practitioners and witnesses alike but I digress).
That said, whether in the course of a virtual hearing taking place during a pandemic, or not, I accept that the present application raises issues that any responsible legal practitioner would surely find highly stressful.
The Respondents submit that they were credible witnesses who gave truthful evidence which was supported by contemporaneous events and documents. It is conceded that the Second Respondent was argumentative at times, but it is said that this was when he sought to justify his conduct and was in the face of "sustained and often repetitive questioning" (for example, as to whether the 21 February 2019 Orders were directed to Medicina's Dynamics Account as a whole, or that account as accessed and viewed via Mr Corry's login via the First Corry Email Account). It is submitted that the Second Respondent's refusal to accept the Applicants' construction of the orders does not reflect poorly on his credit (and does not demonstrate that he was an untruthful witness or that he was lying).
[52]
Applicants' solicitor
It is relevant here to note that criticism was not made as to Mr Wallman's credit, as such; although complaint was made that Mr Wallman had not made enquiries that were open to be made by him as to the operation of the Dynamics Account; and (as already noted) criticism was made of the drafting of the relevant orders (responsibility for which appears to be attributed to him). I note here that, as to the submission by the Respondents that Mr Wallman did not make enquiries about other possible access to the Dynamics Platform, the Applicants point to Mr Wallman's evidence in cross-examination that he did not believe those enquiries were necessary (because nothing in the Independent Computer Expert's Report suggested other logins to the Dynamics Platform and Mr Corry was expressing extreme frustration at not having access); and his awareness that Mr Corry was using a different email account told him nothing about his access to the Dynamics Platform (see at [24]).
[53]
Conclusions as to evidence
I consider that the Respondents' evidence should be seen in the context of the (no doubt understandable) human reaction of seeking to portray one's actions in the best possible light. I do not accept that the Respondents have consciously lied to the Court or have deliberately concealed matters from the Court. I consider that, while at times in the witness box appearing defensive of their own conduct, the Respondents endeavoured to give truthful evidence and were conscious of the seriousness of, and apologetic as to, their breach of the Undertaking.
[54]
Respondents' understanding of the relevant orders
I turn now to the submissions made as to the Respondents' understanding of the relevant orders.
[55]
Applicants' submissions as to understanding of orders
The Applicants submit that the fact that the Respondents did not understand from the Independent Computer Expert's Report that there were multiple logins to the Dynamics Platform with their own unique passwords is clear from their conduct at the time (referring to the terms of email correspondence, and in particular, the 27 February 2019 email (Ex B) and to the issues raised in the cross-examination of the Respondents - to which I have referred above). Reference is also made to the Second Respondent's affidavit of 13 March 2019 in this regard.
The Applicants say that if the Respondents had really believed that there were multiple logins with passwords to the Dynamics Platform they would have referred to that when dealing with Mr Corry's repeated complaints about not having access to his emails and to the Dynamics Account (see the communications from 21-29 February 2019 to which I have referred above); and that if that was the case then the affidavit of the Second Respondent sworn 13 March 2019, and the basis put to the Court for the orders the Respondents were seeking in March 2019, was seriously misleading; and the regime proposed by the Respondents made little sense.
The Applicants also say that, if the Respondents believed that there were multiple logins, then it follows that the Second Respondent must have known that the provision of only one password on 21 February 2019 was incomplete and a breach of the 21 February 2019 Orders (and must have appreciated that he was misleading the Independent Solicitor when he provided the one password and passed on Mr Corry's concern about being denied access if the password were to be changed).
Much weight is placed on the 27 February 2019 email, in that it is said that if there were multiple access points to the Dynamics Platform then there would not have been a basis to ask for an undertaking as to damages in respect of disruption to business (as the Second Respondent suggested and/or recommended might be done); and there would not have been a basis for the assertions contained in the March 2019 affidavit as to the delay in the privilege review due to not having the password.
The Applicants say that the suggestion (in the evidence of both Respondents) that their understanding that there were multiple logins to the Dynamics Platform with multiple passwords derived from instructions to that effect is also problematic. It is said that, if the Respondents really had those instructions, whether before or after 21 February 2019 (noting that the First Respondent said in cross-examination that he had that knowledge before and after the 21 February 2019 Orders; at T 9.27-38), then they must have appreciated that the defendants were in breach of order 6 of the 21 February 2019 Orders, which required the defendants to provide "all" passwords to the Dynamics Platform. It is submitted that the Respondents accepted as much (see the First Respondent at T 79.13-16; the Second Respondent at T 56.15- 27).
[56]
Respondents' submissions as to understanding of the orders
The Second Respondent's evidence (T 22.8-36.30) was that, after reviewing the Independent Computer Expert's report, he understood that there were multiple users who could access the Dynamics Platform because the Independent Computer Expert had said that in her report (T 22.16); but he accepted that the emails were separate from the Dynamics Platform (T 30.15-19). Insofar as the Second Respondent had relied on the access IDs listed at page 8 of the report and his knowledge that Medicina had a number of employees (T 23.38-40; T 24.47), the Applicants say that the reference to "access IDs" is a reference to the heading "Access ID / Serial / Label" and the information set out at page 8 of the Independent Computer Expert's report (CB 357-359); and that there is nothing in the Independent Computer Expert's labelling or identification of the listed items of evidence that would indicate multiple users had access to the Dynamics Platform with unique passwords.
The First Respondent's evidence was also to the effect that he understood the Independent Computer Expert report as disclosing multiple logins (and the First Respondent referred to undisclosed instructions from the Respondents' client) (T 46.26-27; T 47.20-49.35).
As to the Respondents' subjective belief or understanding as at 21 February 2019 as to whether there were other users able to access the Dynamics Account, the Respondents say that their subjective belief is irrelevant on the question of construction (though it is accepted it is of relevance to the separate allegations of failure to disclose). Further, they point out that the Independent Computer Expert's report had only been provided to the Second Respondent at that hearing; and he had not had the opportunity properly to read it (noting that the First Respondent was not there and only read it after the orders were made).
The Respondents say that an available reading of the Independent Computer Expert's report was that there were multiple users of the Dynamics Account who used the identified logins to access both their emails and the Dynamics Account (and that it was entirely reasonable for the Respondents to have that understanding based on the report); and that it follows that it was reasonable for the Respondents to assume that the Applicants' legal representatives also understood that there were additional users of the Dynamics Account (so that this was not something the Respondents needed to tell them).
[57]
Conclusion as to respondents' understanding of the orders
I am not persuaded that the Respondents' understanding of the orders at the relevant time (to the extent that they gave it any considered thought - and I have real doubt that they did so) was that there were multiple logins and passwords to the Dynamics Account. Rather, I consider (on the balance of probabilities and conscious of the seriousness of the findings that I have been called upon to make in light of their potential consequences) that the Respondents proceeded (to the extent that they gave it any real thought) on the assumption that provision of Mr Corry's password would preserve the integrity of the Dynamics Account and that it was for that reason that Mr Corry was frustrated at the delay in his password being returned to him and the lack of access by reason thereof (i.e., that it would not be open for documents on the Dynamics Platform to be altered or deleted pending the downloading of the Dynamics Account by the Independent Computer Expert).
I do not consider that the communications and chronology of events set out above is consistent with the Respondents having an understanding at the relevant time that there were multiple users who had the ability to access the Dynamics Account and to amend or alter documents on that account. Indeed, had I accepted the Respondents' contentions in that regard, I would have been of the view that there was at the very least unsatisfactory professional conduct (and perhaps misconduct) in the Respondents not drawing that to the Applicants' attention once it must have become apparent to the Respondents that the Applicants were operating under the misunderstanding that "control" of the Dynamics Account had been achieved by the provision of the password to the First Corry Email Account.
I do not, however, consider that a finding that the Respondents have consciously lied in their evidence to the Court can here be made. I consider that the cross-examination of the Respondents made clear that they have engaged in a process of (not dishonest) reconstruction of the events that occurred in the heat of the litigation and in the face of acrimonious accusations from both Mr Corry and the Applicants. I consider it most likely that they have attempted to make sense of the disaster that had unfolded in relation to the breach of the Undertaking and the disruption to the regime for the inspection of the documents, and have fostered on an explanation that makes sense of their conduct in the most favourable light to them. It seems to me that their current stance is one of seeking in hindsight to excuse or justify their conduct (and to downplay the seriousness of it) by availing themselves of a construction of the orders that they have now convinced themselves must have been the case at the time.
[58]
Impugned conduct
I now propose to address seriatim the particular instances of conduct that the Applicants contend amount to serious misconduct, serious neglect or serious incompetence, as articulated in the Points of Claim; or otherwise resulted in costs improperly or without reasonable cause being incurred for which the Respondents are responsible.
[59]
(i) Breach of Undertaking
As already noted, it is common ground that the First Respondent's Breach Email was in breach of the Undertaking; that the Second Respondent's Further Breach Emails were also in breach of the Undertaking; and that the breaches were inadvertent.
The Respondents' evidence is that, if they had realised that they had inadvertently breached the Undertaking, they would have immediately brought this to the attention of the Applicants and the Court. Leaving aside the fact that this does not appear to be the course that was taken as soon as the discovery was made (which on the Respondents' evidence was 18 July 2019), acceptance by the Applicants that the breaches were inadvertent means that the question for determination here is as to whether the inadvertent disclosure of the Password amounts to serious neglect or serious incompetence within the meaning of s 99 of the Civil Procedure Act. (I consider in (ii) below the effect of the subsequent failure to disclose that inadvertent disclosure of the Password had occurred).
[60]
Applicants' submissions
The Applicants say that the breaches of the Undertaking that occurred on 15 March 2019 were the product of serious neglect or serious incompetence (indeed they say that the Breach Email and the Further Breach Emails occurred as a result of an extraordinary level of carelessness).
The Applicants emphasise that: the Respondents were communicating at the time not just with Mr Ghaly, Mr Goradia, and Mr Singh, but also with Mr Corry; and say that the Respondents knew: that Mr Corry and Mr Ghaly had attempted to frustrate the Search Order on the day it was executed (by removing and concealing items); that the Respondents knew that it was, in all likelihood, Mr Corry who had locked the Independent Computer Expert out of the Dynamics Account before she had been able to complete the imaging of the contents of the platform; and that Mr Corry was increasingly agitated about not having his password to the Dynamics Account (and being locked out of the platform).
It is submitted that it was incumbent on the Respondents in those circumstances to take very great care in their communications with the defendants concerning anything to do with the topic of passwords (particularly when passing anything from the Independent Computer Expert onto the defendants on that topic); and, hence, that their failure to take that care was, on their part, serious neglect and serious incompetence.
The Applicants note that, in cross-examination, the First Respondent accepted that the breach was serious (T 24.8), careless (T 107.2), and an oversight, but that he resisted the description "extraordinarily careless" (saying that that was a matter for the Court to decide; as was whether his oversight was incompetent) (T 26.34-27.28); and that the Second Respondent also accepted that the breach by the First Respondent was a serious matter (T 157.37), and accepted that his own inadvertent disclosure of the Password in the Further Breach Emails was an "extraordinary oversight" (T 161.13).
Pausing here, it is a matter for the Court to characterise the Respondents' conduct. The question whether the Respondents in hindsight accepted that their conduct was extraordinarily careless or the like (and their appreciation or otherwise of the seriousness of the breach of Undertaking) can, in my opinion, relevantly go only to considerations that might be taken into account when considering what sanction, if any, should be imposed if the jurisdiction to make a wasted costs order is found to be enlivened.
[61]
Respondents' submissions
At the outset, as already noted, the Respondents raise the pleading point that the only breach of the undertaking relied on by the Applicants in the Points of Claim arises from the email sent by the First Respondent at 5:06pm on 15 March 2019 (not the Further Breach Email), though it is accepted that the instance of the Further Breach forms part of the relevant circumstances in assessing the seriousness of the breach and whether it should result in a grant of relief pursuant to s 99 of the Civil Procedure Act.
The Applicants say their primary case is confined to the allegations concerning the Respondents' conduct set out in the Points of Claim; and that they do not seek to expand upon that case. To the extent that the Respondents complain that the Second Respondent's breach of the Undertaking is not particularised in the Points of Claim, the Applicants say that there can be no real complaint in light of the fact that the Second Respondent, despite including it in his affidavit evidence, did not appear to realise he had also breached the Undertaking until after the Applicants had pointed out the breach in their submissions (or, if he did, chose not to apologise for it when he apologised for the First Respondent's breach in his affidavits). Further, it is said that the Second Respondent was given a fair opportunity to respond to that issue during cross-examination.
As I do not ultimately consider that the breaches of Undertaking (though most unfortunate) were the product of serious incompetence or neglect, it is not necessary further to consider this pleading issue.
Turning then to the substantive issue now in dispute, the Respondents say that the relevant emails were sent by them at a time when they were both very busily occupied with a privilege review of a number of separate devices and the Dynamics Account, and working long hours with a weekend approaching and limited time in order to complete the review and ascertain the documents that should be the subject of a claim for privilege; that the breaches occurred in the context of each of them making a request of the defendants by separate emails on the evening of Friday 15 March 2019 to provide passwords to certain computer devices that needed to be reviewed on an urgent basis in compliance with paragraph 1 of the 14 March 2019 Orders; and that, in order to make these requests, each of them referred to, and sent to, the defendants the email and attachment received earlier in the day on 15 March 2019 from the Independent Computer Expert, which included the Password.
[62]
Finding as to (i)
I accept that the Respondents sincerely regret their mistake in forwarding the emails that contained the Password in the embedded email chain. In the circumstances in which that occurred, I consider that this amounted to incompetence (in the sense of a lack of care) on their part; but I am not persuaded that in all of the circumstances referred to above the breach(es) of the Undertaking amounted to serious neglect or serious incompetence, or otherwise enliven the exercise of the jurisdiction under s 99 of the Civil Procedure Act. It is an unfortunate fact of modern life (about which I consider that judicial notice can be taken) that emails can be sent in haste and without sufficient attention apparently being paid to the contents of an email chain of which they form part or to the recipients of the email. (The proliferation of "Reply All" emails is a common illustration of this.)
Relevantly, in this regard, I accept that the emails were sent at a time when the Respondents were under considerable pressure expeditiously to complete the privilege review and I accept their explanation of the circumstances in which they did not realise at the time they sent the Breach Emails that the Password was contained within the communications.
[63]
(ii) Failure to disclose provision of Password
As to the failure to disclose the provision of the Password, logically that focusses attention on the position when the Respondents first realised that the Password had been disclosed in breach of the Undertaking. The Applicants have made clear that they make no complaint about a failure to disclose the breach of Undertaking prior to the time at which the Respondents were aware of the fact that the Password had been provided to Mr Corry and the other defendants.
[64]
Applicants' submissions
The position of the Applicants focusses, first, on the search that was undertaken when complaint was first made on 23 April 2019 about provision of the Password to the defendants; and, second, on the repeated denial of this (the so-called False Assertion) on 29 April 2019.
As to the first, the Applicants contend that it is open on the evidence to conclude that the Respondents became aware that they had breached the Undertaking in April 2019 and decided to conceal that from the Applicants and the Court (which, it cannot be disputed would constitute serious misconduct). Even if the Respondents did not become aware that they had breached the Undertaking despite the investigation that was conducted in April 2019, then the Applicants say that their ignorance of that breach and their failure to disclose it was the product of serious neglect or serious incompetence - in other words, there is criticism as to the competence of the investigation into the allegation that was made that the Password had been provided to the defendants.
The Applicants maintain that, upon receipt by the Respondents of the Applicants' letter of 23 April 2019 (which raised concerns that the defendants were hindering the Applicants' access to documents on the Dynamics Account and which sought seeking confirmation that Miller & Prince had not provided the Password to any of the defendants) it was incumbent on the Respondents to conduct a competent investigation into the matters raised in that letter, including whether the Password had been provided by them to any of the defendants (Points of Claim at [42]). The Applicants say that a competent review would have included a review of the communications between the Respondents and the defendants; and would have identified the Respondents' breaches of the Undertaking and the circumstances of those breaches.
As to the investigation that was undertaken, the Applicants say that the extent of the investigation conducted by the First Respondent was to look at the sent items in his email account using the keywords "NHB" and "Medicina", and to read the subject line and part of the contents of those emails through a "reading pane" without scrolling through email chains; and without going to back review the emails that were sent immediately upon having received the Password from the Independent Computer Expert (see Mr Gerges' affidavit at [84]-[85]). As to the Second Respondent, it is said that the extent of the investigation was: to forward the letter from the solicitors for the Applicants to the defendants; to speak to Mr Corry; to speak to Ms Suhle and Ms Lam and request that they check their sent items; and to check his own sent items using the keyword "NHB", and without scrolling through email chains (see Mr Athanassios' affidavit at [131]-[139]).
[65]
Respondents' submissions
At the outset, as a general response to the various allegations by the Applicants as to serious misconduct or serious neglect/serious incompetence by the failure of the Respondents to make five different disclosures to the Applicants (namely, as to the breach of the Undertaking; that Mr Corry had accessed the Dynamics Account; the existence of the Second Corry Email Account; that Mr Corry was monitoring the Applicants' access and review of the Dynamics Account; and that documents had been deleted from the Dynamics Account), the Respondents say that they were never under any obligation to make such disclosures to the Applicants (and, in any event, there was no cause to make any such disclosures in the circumstances). They say that even if it could be said that the Respondents ought to have made any such disclosures, not doing so would not amount to serious misconduct or serious neglect and/or serious incompetence.
As to the failure to disclose the breach of Undertaking, the Respondents say that they did not know that the Password had been provided to Mr Corry in breach of the Undertaking until they were so told in HWLE's letter of 18 July 2019; that, as soon as that happened, the Respondents looked further into the matter, confirmed that the breach had occurred, and conceded as much in their letter dated 26 July 2019 to HWLE; and that, although the Respondents denied disclosing the Password to Mr Corry prior to that correspondence, they say that that was because they did not know that that had occurred, and they believed they had not done that. It is submitted that, given their state of mind and the fact that the disclosure was inadvertent, the denials (although now known to be incorrect) are said to be reasonable.
In those circumstances, it is said that there is no substance to the allegations that the Respondents' conduct involved serious neglect or serious incompetence (Points of Claim at [81]); and that the allegation of serious misconduct (Points of Claim at [80]) fails because it relies on the Respondents knowing that the Password had been disclosed and falsely representing to the contrary, an allegation not supported by the evidence.
As to the complaints made in relation to the investigations carried out by the Respondents following 23 April 2019, the Respondents say that on receipt of the 23 April 2019 email from HWLE they acted promptly and took serious steps to address the matters in that letter, namely: the Second Respondent sending the urgent email to the directors of Medicina seeking urgent instructions; checking the sent items in their electronic mailboxes to confirm they had not sent the password (though neither believed he had done so); and the Second Respondent speaking to the relevant employees of Miller & Prince and to Mr Ghaly (and he believed also Mr Singh and Mr Goradia).
[66]
Finding as to (ii)
I do not accept that the evidence establishes to the requisite standard of satisfaction (the Briginshaw standard) that there was a deliberate concealment of the fact that the Password had (inadvertently) been disclosed. In that regard, I do not accept that there was some kind of "fake" investigation (or no investigation at all).
As to the submission that the explanations proffered by the Respondents were "inherently improbable", I note that evidence is said to be "inherently" or "glaringly" improbable where it is "contrary to compelling inferences of the case", so "incredible and unreasonable that no reasonable person could accept it", "inherently incredible", "contrary to incontrovertible facts" or subject to "inherent contradictions" (see, for example, Fox v Percy (2003) 214 CLR 118; [2003] HCA 22 (Fox v Percy) at [28]-[29], [42], per Gleeson CJ, Gummow and Kirby JJ; State Rail Authority of New South Wales v Earthline Constructions Pty Ltd (in liq) (1999) 73 ALJR 306; [1999] HCA 3 at [63]-[64], per Gaudron, Gummow and Hayne JJ; at [93], per Kirby J; Brunskill v Sovereign Marine & General Insurance Co Ltd (1985) 59 ALJR 842 (Brunskill) at 844, per Gibbs CJ, Wilson, Brennan, Deane and Dawson JJ; [1985] HCA 61; Devries v Australian National Railways Commission (1993) 177 CLR 472 at 479; [1993] HCA 78; Abalos v Australian Postal Commission (1990) 171 CLR 167 at 178ff, per McHugh J, Mason CJ, Deane, Dawson and Gaudron JJ agreeing; [1990] HCA 47; Holman v Holman [1964] 5 FLR 406 (Holman) at 409, per Sugerman J, Richardson and Macfarlan JJ agreeing; and Saleh v Romanous (2010) 79 NSWLR 453; [2010] NSWCA 274 at [49]-[50], per Handley AJA, Giles JA and Sackville AJA agreeing).
Evidence is not glaringly improbable merely because there is conflicting testimony or conflict between compelling but not conclusive documentary evidence and other evidence (documentary or oral) (see Fox v Percy at [25]ff, per Gleeson CJ, Gummow and Kirby JJ; at [88], per McHugh J; Hecron Ltd v Cousins [1990] NSWCA 93). To accept that evidence is glaringly improbable is to acknowledge that it would constitute an injustice to accept it, such that, on appeal, the finding would be set aside. Evidence is typically shown to be glaringly improbable where it is contradicted by "uncontroverted facts" (such as uncontested oral testimony, or uncontested contemporaneous documents), or by compelling inferences of the case (such as may be drawn from the "inherent commercial probabilities", or "objective commercial probabilities" of the facts).
[67]
(iii) Failure to disclose Second Corry Email Account/use thereof
Next is the alleged failure to disclose the Second Corry Email and use thereof.
[68]
Applicants' submissions
The Applicants say that the Notifications Alert protocol that was established in effect enabled Mr Corry to monitor the Applicants' access to the Dynamics Account without the Applicants knowing they were being monitored, and to know which documents the Applicants were aware of within the Dynamics Account and which documents they intended (or might intend) to use, to prove their claims in the proceedings (see Points of Claim at [32], Mr Wallman's affidavit at [49]-[55]).
Mr Corry received such Notification Alerts via the Second Corry Email Account from at least 3 April 2019 (Points of Claim at [33], Mr Wallman's affidavit at [49]); and that, in the period 3 April 2019 to 3 June 2019, at least 102 Notification Alerts were received by the Second Corry Email Account (Points of Claim at [34], Mr Wallman's affidavit at [55]); and that Mr Corry, via the Second Corry Email Account, forwarded several of these Notification Alerts to the First and Second Respondents (including emails sent on 11 April 2019, 12 April 2019, 13 April 2019, 24 April 2019, and 24 April 2019; receipt of which is admitted by the Respondents).
It is submitted that, in the circumstances, the Respondents were aware that Mr Corry had access to the Dynamics Account (contrary to the 21 February 2019 Orders and 14 March 2019 Orders), and that he was monitoring the Applicants' access, and that he was using that his own access to identify the documents that the Applicants were looking at as part of their preparation of the 2019 Proceeding. It is said that the Respondents themselves were aware of the documents that the Applicants were looking at from the Dynamics Account, and, in so doing, they and Mr Corry obtained a significant unfair forensic advantage (Points of Claim at [36]).
The Applicants contend that the Respondents were obliged, as officers of the Court, on and from 11 April 2019 upon receipt of the first Notification Alert, to disclose to the Applicants and the Court: first, the fact that Mr Corry had access to the Dynamics Platform despite the regime established by the 21 February 2019 Orders and the 14 March 2019 Orders (which I interpose to note raises the vexed question of the proper construction of the Orders that I have considered above and the Respondents' understanding thereof); and, second, the fact that Mr Corry was "secretly monitoring" the Applicants' evidence review of the contents of the Dynamics Platform and reporting to the Respondents. It is said that the Respondents' failure to do so constituted serious misconduct.
[69]
Respondents' submissions
The Respondents say that the allegations as to the failure to disclose that Mr Corry had access to the Dynamics Account in the period from 11 April 2019 depends on acceptance of the Applicants' construction of the 21 February and 14 March 2019 Orders; and should fail for the reason that, if Mr Corry was always entitled to access the Dynamics Account, then there was nothing inappropriate with him doing so, and no call for the Respondents to tell the Plaintiffs that had occurred. The Respondents rely upon what was said at the 16 May 2019 hearing (as referred to above) as consistent with that conclusion. Alternatively, even if the Applicants' construction of the Orders is found to be correct, it is submitted that there was no serious misconduct, serious neglect, or serious incompetence on the part of the Respondents for the following reasons.
First, that the Respondents' understanding as to the effect of the orders (even if wrong) was reasonably held and resulted from the Applicants' poor drafting of the orders; or the Applicants' failure to seek additional or other more specific orders. It is said that the Applicants' conduct cannot be divorced from that understanding, and there cannot be a finding of serious misconduct and the like when a person reasonably does not appreciate that there was any requirement to act differently.
Second, that the Applicants' solicitors knew or ought reasonably to have known that Mr Corry had accessed the Dynamics Account because, as early as 27 February 2019, Mr Corry was using another email address with the same domain as the First Corry Email Account (and all of the other users identified in the Independent Computer Expert's 21 February 2019 Report), namely legal_ac@nexgenpharma.com.au. It is noted that the Second Respondent explained in cross-examination that he believed that the Applicants or their solicitors were well aware that Mr Corry had access to the Dynamics Account, including via other users who accessed the platform. It is said that the detailed information provided by Mr Corry in his 26 March 2019 affidavit put the Applicants on notice that he had access to the Dynamics Account, and that the timing of this is highly significant because the Applicants allege that the obligation to disclose on the part of the Respondents only arose on 11 April 2019 (some three weeks after it is said that the Applicants must have known, or ought reasonably to have known, of Mr Corry's access). It is said that, even if the Applicants' solicitors failed to appreciate that "obvious state of affairs" by their own neglect or incompetence, it was reasonable for the Respondents to assume that the Applicants and/or their legal representatives did understand this.
[70]
Applicants' submissions in response
In response, as to what the Notification Alerts disclosed, the Applicants say that: the Respondents knew that Mr Corry was able to determine whether the Applicants were looking at Dynamics or SharePoint (noting that the First Respondent accepted that whether Mr Corry was monitoring the Applicants "on SharePoint or looking at them on Dynamics", he understood that "Mr Corry was able to work that out") (T 108.19-22); the First Respondent accepted that he knew, from the Notification Alerts, that "whatever the plaintiffs were looking at, this shows that Mr Corry was able to watch what the plaintiffs were doing (T 108.16-18); the Second Respondent understood that SharePoint contained formulas (for medications) and he had obtained that understanding from the First Respondent (T 180.21-181.1). The Applicants point to Mr Wallman's evidence in his 7 May 2019 affidavit at [22] was that SharePoint was a screen on the Dynamics Account, about which he was not challenged in cross-examination.
The Applicants accept that the 11 April 2019 Notification Alert does not disclose on its face when it was set up but they say that its name ("Bova Compounding Alert Policy") and the fact that it was sent to the Second Corry Email Account, together with the fact that Mr Corry was forwarding it to the Respondents, give rise to the strong inference that Mr Corry himself set it up; and that in any event, he was clearly a recipient of the alert policy. It is noted that the Notification Alert: identified the file that had been accessed and the date and time of that access; and was accompanied by a commentary from Mr Corry.
Insofar as the Respondents submit that, even if they had examined the hyperlinks associated with each of the Notification Alerts, it would have revealed very little about the files that had been accessed, the Applicants point to the hyperlink set out in the 11 April 2019 Notification Alert, which they note discloses that the item under review was the final master manufacturing formula records for Pimobendan 2.5mg (the issue of pharmaceutical formulas being the nub of the confidential information claim). In response, the Applicants say that it is difficult to reconcile the Respondents' submission (at [153]) that the Notification Alerts revealed nothing of interest or utility to the Respondents, particularly in light of the First Respondent's reaction to receiving the 24 April Notification Alert. The evidence given by the First Respondent about that Notification Alert is said to have been "absurd"; and an obvious attempt to avoid accepting the forensic advantage that Notification Alert provided.
[71]
Respondents' response
The Respondents say that the analogy the Applicants seek to draw with the decision in Expense Reduction and Solicitors' Conduct Rules rr 6 and 31 is inapt. The Respondents say that their knowledge of the Applicants' review of files on the "live" Dynamics Platform bears no comparison with the retention by an opposing solicitor of confidential privileged material.
Further, it is submitted that there is nothing inappropriate about the First Respondents' email of 24 April 2019. It is noted that the Applicants had complained about their limitation on access to the Dynamics Platform on 23 April 2019. In the course of investigating this allegation, Mr Corry informed the Respondents that HWLE had accessed the Platform on 24 April 2019. It is said that the First Respondent regarded that information as contradicting the Applicants' assertions and was proposing to use the information to "discredit" the Applicants if they persisted with their allegations; and it is submitted that this reflected a strategic and forensic approach to a disputed issue which had emerged at that point in the proceedings.
[72]
Finding as to (iii)
As to the failure to disclose the existence of the Second Corry Email Account per se, I am not persuaded that there was serious misconduct; nor that there was serious incompetence. I am of the view that there was sufficient scope for confusion as to precisely what was the operation of the Dynamics Account (and the operation of the Orders); and that, as a result, no finding should be made of serious misconduct or serious incompetence. I consider that it is at least open on the evidence to conclude that the Respondents (to the extent they turned their mind to the issue) operated on the basis that the Applicants (on receipt of the email communications from the Second Corry Account) knew the same as the Respondents then did about access to the Dynamics Account.
What I have real difficulty with (and what I consider amounts to serious incompetence in the sense of a serious failure to be cognisant of their professional and ethical obligations in this regard) is with the Respondents' non-disclosure of the fact that Mr Corry was secretly reviewing the Applicants' access to the Dynamics Account (once that became apparent to them after receipt of the Notification Alerts).
I consider that it must have been obvious at the time of the 21 February 2019 Orders and the 14 March 2019 Orders that the Applicants were proceeding on the basis that integrity to the Dynamics Account would be preserved by the provision of the Password to the First Corry Email Account. That must be the case in that the Independent Computer Expert was being instructed to obtain "control" in order to preclude the Dynamics Account being tampered with; and the purpose of the regime for downloading the Dynamics Account was understood by everyone to be in order to preserve the integrity of what was on that account at the time it was downloaded. Where that regime came to grief, so to speak, was when the decision was made to inspect documents on the Dynamics Account by access to the "live" platform, coupled with the problem that the imaged version was unintelligible.
However, while I accept that there was scope for a genuine misunderstanding as between the practitioners as to the issue of access to the Dynamics Account going forward from the 21 February 2019 Orders and the 14 March 2019 Orders, there is nothing to suggest that the Applicants were aware that Mr Corry was able to monitor their review of the documents on the Dynamics Account.
[73]
(iv) Failure to disclose deletion of documents
Next there is the alleged failure to disclose deletion of documents.
[74]
Applicants' submissions
Similarly to the position taken by them in relation to the breaches of the Undertakings, the Applicants contend that it is open on the evidence to conclude that the Respondents, knowing that there had been deletions of material on the Dynamics Platform, decided to conceal that information from the Applicants, therefore constituting serious misconduct. However, again, they say that it is sufficient for the purposes of the application to conclude that the failure to provide this information to the Applicants was the product of serious neglect or serious incompetence.
As noted above, the Applicants point to Mr Corry's email sent on 24 April 2019 which they say made clear that there had been "bulk" deletion of records from the Dynamics Account (albeit that Mr Corry asserted that those records had been manually re-entered). The Applicants also rely in this regard on the May Affidavits (i.e., the affidavits filed and served by the second to fifth defendants following the 16 May 2019 Orders), which they say make no reference to the email from Mr Corry of 24 April 2019 which referred to the fact that there had been "bulk" deletion of records within the Dynamics Account.
The Applicants say that: the references to the deletion of documents in the May 2019 affidavit prepared by Mr Ghaly on behalf of Medicina are references to answers given by employees of Medicina who were asked if they had deleted or altered any documents in the Dynamics Account; and to which those who answered yes, all replied in identical, or near-identical terms, namely "Yes, worksheets that contain errors, or that have been duplicated" (see at [9], answer G); and the references to the deletion of documents in the affidavit of Mr Ghaly are limited to "the correction of entries" while processing prescription orders (see at [12]) and the deletion of three products that were "replicated entries in the system" (see at [15]).
To the extent that the Respondents rely on those responses as evidence that they complied with the 16 May Orders or otherwise fully disclosed the extent of the defendants' knowledge of deletions from the Dynamics Account, the Applicants say that the information provided in those two affidavits plainly sought to minimise or otherwise play down the significance of the relevant deletions, and entirely omitted any reference to the bulk deletion of records.
[75]
Respondents' submissions
As to the reference in Mr Corry's email sent on 24 April 2019 at 7:59am to data deletion, the Respondents submit that, viewed in its entirety and in context, the email did not suggest that there had been any "nefarious" deletion of documents by Mr Corry or anyone else; noting that Mr Corry had emphasised that "we need more information"; that Mr Corry also advised in the email that the Applicants were continuing to access the Dynamics Account via the First Corry Email Account; and that there had been major updates to the Dynamics Account by Microsoft over the Easter break.
The Respondents emphasise that the Second Respondent sought instructions directly from Mr Ghaly (and to his best recollection, also from Mr Singh and Mr Goradia), and received confirmation that they did not have access to the Dynamics Account and they had not caused any interruption to the Dynamics Platform; and that Mr Corry's own solicitor also wrote setting out his own denials in respect of the allegations.
The Respondents suggest that, insofar as Mr Wallman said that he was comforted that he had sufficiently locked Mr Corry out of the Dynamics Account because of Mr Corry's communications complaining and demanding access, this amounted to acceptance by Mr Wallman of what Mr Corry had said at that time (and it is inconsistent therefore for the Applicants to argue that it was untenable for the Respondents to accept what Mr Corry said in his 24 April 2019 email). Further, it is said that, if Mr Corry was not to be believed, then that was a further reason not to convey what he had asserted in his email and not to include reference to it in the May Affidavits (cf the Applicants' submissions at [163]).
The Respondents say that it was not for them to seek to interrogate Mr Corry (who was separately represented), nor for them to disbelieve what he or his solicitors asserted; and that it was reasonable, in all of the circumstances, for them to conduct themselves on the basis that what they had been told was accurate.
It is submitted that a further reason why the Respondents could not disclose the matters addressed in Mr Corry's 24 April 2019 email is that the email, sent to both Respondents and copied to the other directors of Medicina, was a confidential and privileged communication. They say that it would have been entirely inappropriate for the Respondents to disclose it (or its contents) to the Applicants or their solicitors.
[76]
Finding as to (iv)
The difficulty, as I see it, with the response to the 29 April Letter in relation to deletion of documents is that it does not make clear that there had been the deletions referred to in Mr Corry's email. Instructions as to those deletions should have been conveyed to the Applicants. Those matters could have been conveyed without forwarding the email and without divulging privileged information, or instructions should have been obtained as to how that could be conveyed. Similarly, I am troubled by the fact that the references to deletions in the May Affidavits do not make reference to the deletions that Mr Corry had referred to in his email.
However, I am not persuaded that it was intentionally misleading (and hence is not serious misconduct); and I do not accept that this amounts to serious incompetence or neglect of the Respondents' responsibilities as officers of the Court.
[77]
Consequences of the Respondents' conduct
Accordingly, for the above reasons, I have found serious incompetence in relation only to the non-disclosure of the Notification Alerts and, more precisely, the fact that Mr Corry was secretly reviewing the Applicants' solicitors' review of the Dynamics Account. I have found this serious incompetence occurred from 24 April 2019. I am not persuaded to the requisite standard of proof that the Respondents realised, in the earlier period from 11 to 24 April 2019, the use that might forensically be able to be made of the Notification Alerts. Therefore, what falls to be considered are the costs incurred from 24 April 2019 (and I do not address the submissions that go to the costs incurred in the earlier periods).
[78]
Applicants' submissions
The Applicants' review of the Dynamics Account prior to 24 April 2019 was not caused by the failure of the Respondents to disclose the matters of which the Respondents then became aware in relation to Mr Corry's access to, and use of, the Dynamics Account. Relevantly, the costs here sought from 24 April 2019 go to the proposition that they incurred the costs of interrogating and investigating their concerns about interruptions to their access to the Dynamics Account; and that the costs associated with that review and investigation have been wasted. They maintain that they were required to investigate the circumstances in which their access to the Dynamics Account was disrupted, which caused them to incur further wasted costs, including in obtaining orders for the defendants to file on affidavit evidence about their knowledge of those circumstances.
The Applicants further maintain that the costs of that review to date are now wasted, as the review would have to be conducted afresh (see Mr Wallman's affidavit of 12 August 2019 at [96]), assuming that were to be possible (about which there appears to be considerable doubt having regard to the difficulty in accessing a legible version of the image downloaded by the Independent Computer Expert after execution of the search orders - see Mr Wallman's evidence at T 33.1; T 33.11-21, T 36.4, T 36.26-29).
The Applicants' submission is that, by reason of their ignorance of the Notification Alert emails, they were deprived of the opportunity to cease their review of the Dynamics Platform earlier; and thus incurred the costs of that review.
[79]
Respondent's submissions
The Respondents put forward a raft of responses in relation to the issue as to whether the costs the subject of the Applicants' claim were incurred "improperly or without reasonable cause in circumstances where the Respondents are responsible"; or that the Respondents' conduct caused the Applicants to incur wasted costs. These include the following: that Mr Corry was the key person responsible for any "relevant mischief" (and nothing the Respondents are alleged to have done or failed to do could have independently caused the Applicants to waste any costs); that the level of culpability of Mr Corry's own solicitors (who were involved and acting for Mr Corry at all relevant times) must be equivalent or higher than that of the Respondents; and that, a significant cause of any wasted costs must be the Applicants' own conduct, or that of their legal representatives (by reference to a variety of matters included criticism as to the flawed drafting of the 21 February and 14 March 2019 Orders, failure to apply for an injunction restraining any access to the Dynamics Account or preventing the defendants from conducting the Medicina business and failure properly to instruct the Independent Computer Expert).
Further, the Respondents point to the negotiated settlement that the Applicants received (it being submitted that, on any view, the work the Applicants undertook and the legal costs they incurred in the proceedings served a useful purpose and resulted in a successful outcome). As to this, the Applicants point out that the settlement occurred before the discovery of the matters now in issue and included no amount referable to costs.
The Respondents also complain that the evidence does not allow for a proper calculation of what was wasted or what proportion should be borne by them.
The Respondents argue that if the Applicants discovered unlawful conduct as a result of the review that was conducted, that material would ultimately be deployed in evidence against Mr Corry or Medicina; and that if Mr Corry learned that the Applicants had accessed a file that revealed he had done something wrong, "that would surely be something useful to the Plaintiffs' case that Mr Corry would read about in a pleading and then in the evidence in due course in any event". Thus, it is said that there was no wasted costs in this regard. Reference is made to the expert evidence adduced by the Respondents that addressed the issue of deletions.
[80]
Applicants' response
In response, the Applicants say that the Respondents' submissions on the question of causation (at [199]-[211]) misstate the standard of proof required for determining issues of causation on the present application and do not engage with the "causation requirement" in s 99 of the Civil Procedure Act, as recognised in Newell at [71], per Beazley P, as Her Excellency then was (namely that "[s]uch conduct must have caused costs to have been incurred that would not otherwise have been incurred but for that conduct").
Insofar as the Respondents assert that, even if they have engaged in serious misconduct, neglect, or incompetence such as to engage s 99 of the Civil Procedure Act, no order should be made because the Applicants have been compensated in full for their costs of the proceedings by virtue of the sum paid as part of their settlement with the second to fifth defendants (Points of Defence at 88), the Applicants say that this contention overlooks that the terms of that settlement exclude costs and point to the evidence of Mr Wallman at T 13.34-40; T 13.42-45; and T 14.23- 26.
The Applicants say that, consistently with Mr Wallman's evidence at T 16.41-43; 17.4-9, the Applicants were, by reason of the Respondents' conduct, deprived of the opportunity to take appropriate steps in light of what the Respondents knew but did not disclose to the Applicants. Relevantly, they say that: on and from 24 April 2019, having ceased their review of the Dynamics Platform, they undertook a process of investigation (without the benefit of the information the Respondents had not disclosed concerning Mr Corry's access to the Dynamics Platform and his use of that access, the disclosure of the Password in breach of the Undertaking and the fact of deletions in the platform).
The Applicants say that it follows that they would have taken different steps to those they in fact took were it not for the Respondents' conduct. They say that the costs they incurred in taking those steps would not otherwise have been incurred but for that conduct; and that the causation requirement in s 99 of the Civil Procedure Act is therefore established. They say that it is no answer for the Respondents to contend, with the benefit of hindsight, that there were other ways in which the Applicants could have ascertained the information the Respondents failed to disclose. The Applicants say that the submissions as to Mr Corry's conduct or the relative culpability of his solicitors (or their own solicitors' conduct) do not in any event establish that the Respondents' conduct did not cause the Applicants to waste any costs; and is an attempt to shift responsibility for their own failings. The Applicants further note that Mr Wallman was not cross-examined as to the contents of his affidavit of 4 October 2019 in support of his calculation of the wasted costs.
[81]
Consequences of the Respondents' conduct
In relation to the consequence of the Respondents' conduct, at least for the purposes of the orders here sought, I outline below my determination concerning causation and quantification of the costs (see at [574]ff).
[82]
Summary of Respondents' position
The Respondents say that this is an unusual (and novel) application brought in circumstances where the Respondents breached an undertaking of the Court "in understandable circumstances"; and where the evidence does not demonstrate that any wasted costs flowed from that inadvertent breach. As adverted to above, they say that the fundamental basis of this application is an allegation that the Respondents, as solicitors for opposing parties in "bitterly fought" litigation, engaged in serious misconduct, neglect or incompetence by not helping the Applicants in the prosecution of the case against the Respondents' clients by failing to reveal various pieces of information in certain circumstances.
They say that this was in circumstances where: the orders of the Court relied on by the Applicants are, on the construction most favourable to the Applicants, vague and ambiguous, and where the cause of any infelicity in the drafting of the orders lies with the Applicants; the disclosures the Applicants say should have been made were either matters which were known or ought reasonably to have been known by the Applicants, or privileged information, or information of no consequence; the Applicants failed in many ways to take steps to protect their own position, to interrogate properly the electronic files they sought and obtained access to, or otherwise to use computer expert services available to them to gather whatever information they required; the alleged wasted costs were costs incurred in conducting proceedings and building a case against defendants which allowed the Applicants to achieve a settlement payment of $1 million within a few short months; the alleged wasted costs are said to be about $100,000 but the evidence relied on in support of the claim is problematic and the amount claimed appears unreasonable; and, if there were any wasted costs, the conduct of many people other than the Respondents have caused such waste. Further, the Respondents say that the extensive hearing time and submissions devoted to the attack on their credit was both unjustified and unnecessary (in that they say that the key questions for determination do not depend on credit).
The Respondents say that, if it be found that the Respondents failed to disclose any relevant matters to the Applicants and that caused any wasted costs (both of which are denied), Mr Corry's own solicitor (who must have been better placed than the Respondents to understand Mr Corry's conduct) would have, in the circumstances, a significantly greater share of responsibility for wasted costs than the Respondents. Pausing here, it is not clear to me what the relevance of this is. The application for costs under s 99 of the Civil Procedure Act does not give rise to a proportionate liability argument so far as I am aware.
[83]
Applicant's response
As to the submission made by the Respondents that the Applicants' approach to the matter reflects an approach to litigation of the type criticised by the High Court in Expense Reduction, the Applicants say that this overlooks the nature of the relevant conduct in the present proceedings and understates its seriousness. The Applicants say that this is not a case (as was the case in Expense Reduction) of an administrative mistake that should have been quickly rectified, but instead led to protracted satellite proceedings and substantial costs. Rather, the Applicants say the present case concerns the fact and consequences of a breach of undertaking to the Court and a failure by the Respondents to disclose that breach; and other matters which the Applicants say the Respondents ought to have done in accordance with their duty to the Court and the administration of justice (and that the Respondent's failure to do so caused the Applicants to incur substantial wasted costs).
As to the Respondents' submission that the Applicants' approach to the present application cannot be reconciled with the usual expected procedure for such applications as stated in Lemoto, the Applicants accept that the procedure to be followed in determining applications for wasted costs must be fair (Lemoto at 92, per McColl JA) and as "simple and summary as fairness permits"; and that ordinarily "hearings should be measured in hours, and not in days or weeks". However, the Applicants say that appropriate steps were taken to minimise the disruption to the hearing caused by the logistical challenges that arose from the COVID-19 pandemic; and they argue that the hearing of the present application was otherwise drawn out by the Respondents having raised the "recent construction argument" for the first time on the eve of the hearing (which they say, as a matter of fairness, needed to be tested in cross-examination); and by the Respondents' "evasive and argumentative responses to that cross-examination in an attempt to tailor their evidence to fit their recent construction argument and to address the inconsistencies with that argument in their affidavit evidence".
As to the way in which the present application has been prosecuted, the Applicants say that the Respondents and their insurer have fought the present application with equal determination and with no expense spared; and note that the Respondents have not "held back" in their criticisms of the Applicants and their legal representatives in seeking to resist the application (referring by way of example to the criticisms levelled against the Applicant' legal representatives in respect of their drafting of the 21 February 2019 Orders).
[84]
Observations in relation to the application
As to the preceding, I here simply restate my observations that I do not accept that it was inappropriate for the Applicants to bring this application, although the criticism of the incurring of disproportionate costs in relation thereto is a different matter. Again, I am firmly of the view that, where there are serious concerns as here concerning aspects of the conduct of officers of the Court, it is incumbent on the Court to ensure that those concerns are ventilated and addressed. In that regard, I am of the view that the present application did, indeed, raise an important issue as to the professional and ethical obligations of the Respondents. Otherwise, again, I refer to my above observations.
[85]
Costs
The Applicants submit that the parties should be heard separately on the question of the costs of the application. In an effort to minimise ongoing costs it would be appropriate for this to be dealt with on the papers and I will make directions accordingly. If it be of assistance, I note that my tentative view is that it may be appropriate for each party to bear his or its own costs in circumstances where there has been a mixed outcome and emotions have run high. However, that is by no means a concluded view.
[86]
Conclusion
As noted above, I have concluded that the failure to disclose that Mr Corry was monitoring the Applicants' solicitors' review of the Dynamics Account amounted to serious incompetence or neglect of their professional and ethical obligations. Full allowance must be made for the exigencies of the litigious environment in which the Respondents were here acting and I have taken into account the level of experience the Respondents then had and the no doubt difficulties they experienced in dealing with Mr Corry (having regard to the tenor of his communications). However, and having regard to the observations of the High Court in a not wholly dissimilar situation in Expense Reduction, I consider that the conduct in question involves, to use the words quoted in Wentworth v Rogers (at [30]) from Lord Wright's speech in Myers v Elman (at 319), a failure on the part of the Respondents to fulfil their duty to aid in promoting in their own sphere the cause of justice.
I accept that this failure caused the Applicants to incur wasted costs in the period from 24 April 2019 to 5 June 2019 in seeking to determine the cause of the disruption that had been experienced to their access to the Dynamics Account. The purpose of the wasted costs jurisdiction is not to punish the legal practitioners but, rather, to protect and indemnify the party who has incurred the wasted costs; and in those circumstances I do not consider it appropriate to engage in a "cheese-paring" exercise in the quantification of those costs (see McColl JA in Kelly at [91]).
In the circumstances, I consider that the appropriate order is to require the Respondents to indemnify the Applicants for the costs incurred by them from 24 April 2019 to 5 June 2019. I note, in this regard, that Respondents have apologised for the breaches involved in the disclosure of the Password and I consider that the undoubted stress that the present application will have caused is likely to have a salutary impact on the Respondents' conduct in future.
I also consider it appropriate for the sum to be ordered as a lump sum costs order having regard to the principles considered in Hamod v State of New South Wales [2011] NSWCA 375 (Hamod) (at [813]-[820], per Beazley JA (as Her Excellency then was), with whom Giles and Whealy JJA agreed), to the discretion conferred by s 98(4)(c) of the Civil Procedure Act (and see also Harrison v Schipp (2002) 54 NSWLR 738; [2002] NSWCA 213 (Harrison v Schipp) at [21]-[22], per Giles JA).
[87]
Orders
For the above reasons I make the following orders:
1. Pursuant to s 99 and s 98(4)(c) of the Civil Procedure Act 2005 (NSW) order the Respondents to indemnify the Applicants for wasted costs in the fixed sum of $70,000, payable forthwith.
2. Direct the parties to file brief written submissions within 7 days on the question of costs, with a view to dealing with costs on the papers if possible.
[88]
DISCLAIMER - Every effort has been made to comply with suppression orders or statutory provisions prohibiting publication that may apply to this judgment or decision. The onus remains on any person using material in the judgment or decision to ensure that the intended use of that material does not breach any such order or provision. Further enquiries may be directed to the Registry of the Court or Tribunal in which it was generated.
Decision last updated: 17 December 2020
Parties
Applicant/Plaintiff:
NHB Enterprises Pty Ltd
Respondent/Defendant:
Corry
Legislation Cited (4)
Legal Profession Uniform Law Australian Solicitors' Conduct Rules 2015(NSW)
73 ALJR 306; [1999] HCA 3
Taylor v Johnson (1983) 151 CLR 422; [1983] HCA 5
Wentworth v Rogers [1999] NSWCA 403
Texts Cited: J D Heydon, Cross on Evidence (10th ed, 2015, LexisNexis Butterworths)
Practice Note SC Gen 5
Category: Costs
Parties: NHB Enterprises Pty Ltd (First Applicant)
Finn Pharmaceuticals Pty Ltd (Second Applicant)
George Gerges (First Respondent)
Christopher Athanassios (Second Respondent)
Representation: Counsel:
A T S Dawson SC with T B Senior (Applicants)
R A Dick SC with A R Zahra (Respondents)
Judgment
HER HONOUR: Before me for hearing over a succession of hearing dates this year was an application brought by NHB Enterprises Pty Ltd and Finn Pharmaceuticals Pty Ltd, to whom I will refer collectively as the Applicants, by notice of motion filed on 12 August 2019, for an order pursuant to s 99(2)(c) of the Civil Procedure Act 2005 (NSW) (Civil Procedure Act) for indemnity costs against two solicitors (Mr George Gerges, the First Respondent, and Mr Christopher Athanassios, the Second Respondent) (the Respondents) (an order colloquially known as a "wasted costs" order).
The Applicants are the plaintiffs in proceedings brought against the first defendant, Mr Alexander Stephen Corry, and others in which allegations of breach of confidentiality obligations and misuse of the Applicants' confidential information have been made. The Respondents are the solicitors acting for the second to fifth defendants in these proceedings (as I will explain shortly).
In the present application, the Applicants seek an order that the Respondents indemnify them in an amount to be determined by the Court for their costs incurred in the proceedings on and from one of three alternative dates: 22 March 2019 (that being the date shortly after the admitted (though inadvertent) breaches by the Respondents on 15 March 2019 of an undertaking given by them to the Court not to provide a particular password (the Password) to the defendants in the proceedings (the Undertaking)); 11 April 2019 (that being the date when the Respondents received an email that put them on notice that Mr Corry had access to a particular online platform referred to as the Dynamics Account and was using his access to monitor the Applicants' review of documents on that platform (access to the Dynamics Account following execution of a search order made in the substantive proceedings and did not disclose this to the Applicants or the Court); and 23 April 2019 (that being the time from which the Respondents investigated, incompetently it is said, and wrongly dismissed as unfounded, concerns that had been raised by the Applicants as to breach of the Undertaking and as to deletions or attempted deletions on the Dynamics Platform).
The Applicants say that the Respondents' conduct (as identified more particularly in the Points of Claim) amounted, if deliberate, to serious misconduct or, if inadvertent, to serious neglect or serious incompetence; and that, by reason thereof, the Applicants have incurred costs and/or have incurred costs improperly or without reasonable cause in circumstances where the Respondents are responsible therefor, thus enlivening the jurisdiction under s 99 of the Civil Procedure Act to make personal costs orders against the Respondents. Further, the Applicants seek a lump sum costs order, pursuant to s 98(4) of the Civil Procedure Act, in respect of those costs; and an order that the Respondents pay the Applicants' costs of and incidental to the present application.
It is submitted that the fact that the costs of the steps taken in investigating the cause of the disruption to the Dynamics Account (as set out in Mr Wallman's affidavit affirmed 12 August 2019 at [59]-[90], and the Wallman Costs Affidavit at 8) were wasted is borne out by the fact that those steps failed to elucidate what was ultimately uncovered by Mr Wallman's review of the Dynamics Platform once the settlement of the 2019 Proceeding as between the Applicants and the second to fifth defendants occurred (see Mr Wallman's affidavit affirmed 12 August 2019 at [11]-[12]).
The relevant principles governing the exercise of the power to make costs orders against legal practitioners were summarised by McColl JA in Lemoto (see at [92]) and by her Honour again in Kelly v Jowett (2009) 76 NSWLR 405; [2009] NSWCA 278 (Kelly) (see at [60]). They were considered more recently in Re Felicity (at [7]-[24] per Basten JA); Nadarajapillai v Naderasa (No 2) [2015] NSWCA 209 (Nadarajapillai) (at [11] per Emmett JA, McColl and Macfarlan JJA agreeing); and Newell; Muriniti v De Costi (2018) 97 NSWLR 398; [2018] NSWCA 49 (Newell) (at [76], per Beazley P, as Her Excellency then was).
Relevantly, those principles include: that the jurisdiction is to be exercised "with care and discretion and only in clear cases" (Lemoto at 92; Kelly at [60]; Newell at [76]); that, in considering whether to make a wasted costs order arising out of a lawyer's conduct of court proceedings, full allowance must be made for the exigencies of acting in that environment and only when, with all allowances made, a legal practitioner's conduct of court proceedings is quite plainly unjustifiable is it be appropriate to make such an order (Lemoto at 92; Ridehalgh at 236); that, as adverted to above, a legal practitioner against whom a claim for a costs order is made must have full and sufficient notice of the complaint and full and sufficient opportunity of answering it (Lemoto at 92); that, where a legal practitioner's ability to rebut the complaint is hampered by the duty of confidentiality to the client he or she should be given the benefit of the doubt and in such circumstances, and an order should not be made against a practitioner who is precluded by legal professional privilege from advancing his or her full answer to the complaint made against him or her without it being fair in all the circumstances fair to do so (Lemoto at 92); that, in exercising the jurisdiction, consideration is to be taken of the public interest reflected in the legislative provisions, namely, that litigants should not be financially prejudiced by the unjustifiable conduct of litigation by their, or their opponent's, lawyers (Lemoto at [91]; Kelly at [60]; and Ridehalgh at 226); and that the procedure to be followed in determining applications for wasted costs must be fair and "as simple and summary as fairness permits".
In Nadarajapillai, Emmett JA (with whom McColl and Macfarlan JJA agreed) said (at [11]):
11. Section 99 is described as applying where costs have been incurred "by the serious neglect, serious incompetence or serious misconduct of a legal practitioner", or "improperly, or without reasonable cause, in circumstances for which a legal practitioner is responsible". The (undefined) concepts in that subsection may be given meaning in the light of the discussion of the terms "improper", "unreasonable" and "negligent" in Ridehalgh v Horsefield [1994] Ch 205, as well as the principles collected in Lemoto v Able Technical Ltd [2005] NSWCA 153; 63 NSWLR 300. The power conferred in s 99 must also be understood in the context of the obligations contained in ss 56-60 of the Civil Procedure Act: for example, a solicitor must not, by his or her conduct, cause a party to breach the duty to assist the court to further the "overriding purpose", and the court may take into account a failure to do so in exercising a discretion with respect to costs.
[Citations omitted]
As noted in the above extract, the exercise of the power contained in s 99 of the Civil Procedure Act for the purpose of making an order against a legal practitioner in regard to wasted costs requires that there be regard to the provisions of ss 56-60 of the Civil Procedure Act. In particular, s 56(5) of the Civil Procedure Act requires the Court, in exercising a discretion with respect to costs, to take into account any failure to comply with the duty of a party or legal representative to assist the Court to further the overriding purpose of the just, quick and cheap resolution of the real issues in dispute (see Kelly at [57]-[59]).
It has been said that the decision to make an order under s 99(2) of the Civil Procedure Act against a practitioner requires a careful balancing of the public interest in maintaining and nurturing a legal profession which provides vigorous representation for litigants in court, uncompromised by fear of personal sanctions for failure; against the need to maintain and nurture the obligation to provide independent advice to litigants and to give proper weight to the public interest in the efficient administration of justice; and it is this latter element of the public interest which finds express recognition, in mandatory terms, in the overriding purpose provisions (Re Felicity at [14]).
The appropriate course in determining an application under s 99 of the Civil Procedure Act has been described as follows: first, to identify where costs have been incurred by a party as a result of any improper, unreasonable or negligent act or omission on the part of any legal or other representative (Re Felicity at [24]; adopting the approach taken in Ridehalgh at 232-233; and Newell at [71]); and, second, once a finding of conduct by a legal practitioner to engage the operation of s 99(1) of the Civil Procedure Act is made, to determine whether such conduct caused costs to be incurred that would not otherwise have been incurred but for that conduct (Newell at [71]).
As the Applicants here emphasise, the phrases used in s 99(1)(a) and (b) of the Civil Procedure Act do not constitute discrete and independent concepts; nor are they to be treated as terms of art. Further, the term "serious misconduct' should not be construed by reference to the term "unsatisfactory professional conduct" (see Re Felicity at [24]). This is relevant in the present context where there was debate as to whether there was a breach of some professional conduct rule (the Applicants emphasising that this is not a prerequisite to a finding that there has been conduct of the kind that enlivens 99 of the Civil Procedure Act).
As to what is meant by the adjectives "improper" and "unreasonable" in this context, reference may be made to Ridehalgh, where Bingham MR, as his Lordship then was, considered the equivalent provision in the Supreme Court Act 1981 (UK) and (delivering the judgment of the Court) stated (in a passage cited with approval in Re Felicity (at [24]) and Wentworth v Rogers [1999] NSWCA 403 (Wentworth v Rogers) at [32]-[35]) at 232-233 that:
"Improper" means what it has been understood to mean in this context for at least half a century. The adjective ... covers any significant breach of a substantial duty imposed by a relevant code of professional conduct. But it is not in our judgment limited to that. Conduct which would be regarded as improper according to the consensus of professional (including judicial) opinion can be fairly stigmatised as such whether or not it violates the letter of a professional code.
"Unreasonable" ... aptly describes conduct which is vexatious, designed to harass the other side rather than advance the resolution of the case, and it makes no difference that the conduct is the product of excessive zeal and not improper motive. But conduct cannot be described as unreasonable simply because it leads in the event to an unsuccessful result or because other more cautious legal representatives would have acted differently. The acid test is whether the conduct permits of a reasonable explanation. If so, the course adopted may be regarded as optimistic and as reflecting on a practitioner's judgment, but it is not unreasonable.
In Wentworth v Rogers, the Court of Appeal (at [27]-[30]) also cited with approval the following passages from the judgments of Viscount Maugham and Lord Wright in Myers v Elman [1940] AC 282 (Myers v Elman) as to the meaning of the word "misconduct" in an application for personal costs against a solicitor. At [27], [29], their Honours quoted what was said by Viscount Maugham at 289 and 292, namely that:
In my opinion the jurisdiction as to costs is quite different. Misconduct or default or negligence in the course of the proceedings is in some cases sufficient to justify an order [for costs against the solicitor]. The primary object of the Court is not to punish the solicitor, but to protect the client who has suffered and to indemnify the party who has been injured. Order LXV s.II, of the Rules of the Supreme Court provides the necessary machinery where the person injured is the client of the solicitor. It is a rule supplementary to the summary jurisdiction of the Court. It is not limited to misconduct or default, but expressly extends to costs incurred improperly or without reasonable cause, or which have proved fruitless by reason of undue delay in proceeding under a judgment or order. The jurisdiction to order the solicitor to pay costs to the opposite party is exercised on similar grounds. The principle will be found, clearly stated in Halsbury's Laws of England, 2nd ed., vol. XXXI p.271, where a number of authorities are cited. It will be found that many of these authorities depend, in cases where the order as to costs has been made, on the negligence or mistake of the solicitor and in that sense only on his misconduct in the proceedings. Some of the cases are those where the solicitor has instituted an action without proper authority, and it may be that they can be supported on the ground that in such cases the solicitor has warranted that he had the authority of his client to act for him in the litigation; but it must be observed that that is not the ground stated by the Court and I think they rest on the jurisdiction of the Court over its officers.
…
But, although in the view I take it is not necessary to show that Mr Elman has been guilty of conduct which would justify the punishment of striking him off the rolls or of suspending him from practice, I entirely agree with the contention that the jurisdiction in question ought to be exercised only when there has been established a serious dereliction of duty as a solicitor either by himself or by his clerks.
At [30], their Honours quoted the following from Lord Wright (at 318-9):
The cases of the exercise of this jurisdiction [to order costs against solicitors] to be found in the reports are numerous and show how the Courts were guided by their opinion as to the character of the conduct complained of. The underlying principle is that the Court has a right and a duty to supervise the conduct of its solicitors, and visit with penalties any conduct of a solicitor which is of such a nature as to tend to defeat justice in the very cause in which he is engaged professionally, as was said by Abinger CB in Stephens v Hill (1842) 10 M & W 28. The matter complained of need not be criminal. It need not involve peculation or dishonesty. A mere mistake or error of judgment is not generally sufficient, but a gross neglect or inaccuracy in a matter which it is a solicitor's duty to ascertain with accuracy may suffice. Thus, a solicitor may be held bound in certain events to satisfy himself that he has a retainer to act, or as to the accuracy of an affidavit which his client swears. It is impossible to enumerate the various contingencies which may call into operation the exercise of this jurisdiction. It need not involve personal obliquity. The term professional misconduct has often been used to describe the ground on which the Court acts. It would perhaps be more accurate to describe it as conduct which involves a failure on the part of a solicitor to fulfil his duty to aid in promoting in his own sphere the cause of justice.
[Emphasis added]
I note also what was said in Newell at [76]; Ridehalgh at 229; Re Bendeich (No 2) (1994) 53 FCR 422 at 427 per Drummond J; Deputy Commissioner of Taxation v Levick [1999] FCA 1580 at [11] per Hill J, the Full Federal Court approving the principles stated therein in Levick v Commissioner of Taxation (2000) 102 FCR 155; [2000] FCA 674 at [44] per Wilcox, Burchett and Tamberlin JJ; Gitsham, Edwards & Jensen v Suncorp Metway Insurance Ltd [2002] QCA 416 at [8] per White J, Davies and Williams JJA agreeing; Orchard v South Eastern Electricity Board [1987] QB 565 (Orchard) at 572 per Donaldson MR; [1987] 1 All ER 95.
It is accepted by the Applicants that, where findings are sought of such a serious nature that they could expose the legal practitioner to a penalty in the form of disciplinary action, the Briginshaw standard applies (Briginshaw v Briginshaw (1938) 60 CLR 336; [1938] HCA 34 (Briginshaw) at 362, per Dixon J, as his Honour then was; and see s 140 of the Evidence Act 1995 (NSW) (Evidence Act)), though the Applicants cavil with the proposition that this standard applies when considering issues as to causation, as suggested in the Respondents' submissions (see below).
The First Respondent's evidence was that he knew that Mr Corry's First Corry Email Account had "full access" to the Dynamics Platform as a global administrator account, describing it as "the be all and end all" (on 7/4/20 at T 100.5). As to the (later established) Second Corry Email Account, the First Respondent maintained that his understanding was that there was no impediment to the creation of the Second Corry Email Account with "full access" (on 7/4/20 at T 66.36-49). The First Respondent's evidence is that he knew of the existence of the Second Corry Email Account (on 7/4/20 at T 102.4-6); but did not know and did not enquire as to the level of access that Mr Corry had through the Second Corry Email Account (on 7/4/20 at T 102.8-12), or the level of access Mr Ghaly had through his account (on 7/4/20 at T 101.40-102.2). The First Respondent's evidence was that Mr Ghaly's access was also that of global administrator (on 7/4/20 at T 100.23).
Relevantly, the Applicants point out that the First Respondent conceded in cross-examination that he could have used any of the First Corry Email Account, the Second Corry Email Account or the Ghaly account to conduct the privilege review, as each had the same global administrator access to the Dynamics Platform (on 7/4/20 at T 103.1-10).
At the time of the search, the login name for Mr Corry to have access both to the Dynamics Account and to his personal Microsoft Business 365 Account was the First Corry Email Address. It is relevant to note that the Dynamics Account to which Mr Corry was able to gain access through that login name was not a personal account as such; but, rather, an account or platform to which a number of other users had access (albeit with different levels of access). With hindsight, it is apparent that this was not necessarily understood at the time of the search (or for some time after) by some or all of the persons involved.
The evidence given by various of the key players as to their understanding of the Dynamics Account was as follows.
Mr Wallman has deposed that, generally speaking, the Dynamics Account includes the following types of documents: records of formulas of medications, and sales records and financial records (see Mr Wallman's affidavit affirmed 7 May 2019). His understanding is that access to the Dynamics Account is via user accounts (so, for example, Mr Corry's two email accounts both had access), and he has deposed to a list of users which shows who has access (i.e., other employees). Mr Wallman has deposed that what can be changed on the system depends on user status; as noted above, the Corry accounts had global administrator status (as, it now seems, also did Mr Ghaly's account). It also appears that a notification function can be set up to provide notifications of what documents have been accessed and/or modified in the Dynamics Account, such as the notifications sent to the Second Corry Email Account of access to the Dynamics Account by a user gaining access through the First Corry Email Account (to which I refer in more detail in due course) (see Mr Wallman's affidavit affirmed12 August 2019 at [55]).
The First Respondent has deposed that his understanding of the Dynamics Account was that it was an online based software which allowed users to access emails, business records, pricing, customer orders, formulas, and other document management options from a central location ([13] of his affidavit sworn 10 January 2020).
The Second Respondent has deposed to his understanding being that the reference in the Undertaking to the Microsoft 365 Dynamics Account was a reference "to both of the online accounts referred to on page 5 of the independent expert's report" (at [13] of his affidavit sworn 10 January 2020) (see below as to the Independent Computer Expert's report dated 21 February 2019). The Second Respondent has deposed that his understanding was that these accounts allowed access to electronic documents stored on a cloud-based platform through use of the "alex@nexgenpharma" username (i.e., the First Corry Email Account and a password) (see at [13] of his affidavit sworn 10 January 2020).
In evidence was an affidavit sworn by Mr Corry on 26 March 2019 (for other purposes connected with this proceeding) in which Mr Corry has deposed that the Dynamics Account is a "customised customer relationship management and business process management system". He there deposed that "[t]he way we have built the system is unique because it allows us to run our entire business with one system in one location that is accessible anywhere where there is an internet connection" (see at [7] of his affidavit sworn 26 March 2019, p 166 of Ex 1).
Some of the Dynamics Account's features that Mr Corry describes (at [8]-[16] of his affidavit sworn 26 March 2019) are as follows. First, that the system has a sales order process that is web based and integrated to the entire Dynamics system (i.e., if a customer places an order on the NexGen Pharma website, the order is immediately available for the company to see the order has been places and commence manufacturing, resulting in the company needing manually to input less data. Second, that the system has a "unique quality management system" that supplements the normal quality management processes of a compounding pharmacy. It automates the data entry, capture and analysis processes and allows electronic comparison of test results. Mr Corry describes quality management as being the process of a new product being tested, the test results being recorded and then comparing the results across multiple tests before the product is able to be sold.
Another of the defendants, Mr Singh, has deposed (in an affidavit that was required to be filed when the dispute over access to the Dynamics Account erupted in May 2019) to his understanding that "Microsoft Dynamics 365 is a web-based platform used as a customer relationship management tool that integrates with other software, such as Xero, and also integrates with Microsoft applications including (but not limited to) Microsoft Excel, and Microsoft Outlook", and that Medicina "has an account with Microsoft Dynamics 365" (see his affidavit affirmed 24 May 2019; Ex 1).
The confusion that seems to have permeated much of the debate about the respective accounts arises in my opinion from the fact that, unfortunately, it is not always clear whether reference is being made to the Microsoft 365 Business Account (or Office Account) comprised of the facility through which individual users at Medicina have their own individual email accounts; or to the Microsoft 365 Dynamics Account, by which I mean the account described above (which was a "live" platform, to which a number of users had access through their respective individual login names and with their individual passwords).
The Respondents in submissions drew an analogy with the way in which Microsoft "Outlook" operates (a matter of which I was implicitly invited to take judicial note). A similar analogy drawn from personal experience might be by reference to a shared drive on a computer system to which a number of users are permitted access in order to edit documents (say, for example, written submissions or court judgments), access to which would ordinarily be through a user's personal user ID and password, but where the documents on that shared drive would be the same whoever had access thereto; and amendments or deletions made by one user (assuming all users had equal access rights) would mean that the document when next accessed by another user would be the changed document (whereas one would assume that each user's office email account would differ in content and other email account users would ordinarily (or not necessarily) have access thereto).
As I understand it (and I sought to confirm this understanding more than once in the course of submissions), provision of one user's password enabling access to the Dynamics Account would not preserve the integrity of the documents on that account as at any particular point in time if there were other users whose access to the Dynamics Account through their own passwords enabled them separately to alter or delete documents on the Dynamics Platform; and therein lies the problem. There is an obvious tension between the Medicina business being able to continue to operate the Dynamics Platform (at least insofar as that involved altering documents, such as formulas or customer orders, on the system), and the preservation of the documents on the system frozen as at a particular point in time (at least until the downloading of the Dynamics Account was complete, assuming, which was not in fact the case, that the imaged version proved to be intelligible).
The tension between those two propositions is evident in the heated debate between the parties on the present application as to the significance (or otherwise) of the fact that the Applicants did not seek an injunction to restrain the continued use of the Dynamics Account or platform. The Applicants maintain (as must be the case from a practical perspective if the underlying premise is correct) that an injunction was not necessary because the provision of "all passwords" to the Microsoft 365 Dynamics Account meant that the defendants were effectively "locked out" of the system until such time as the passwords were returned to them. However, that is the case only if one operates on the assumption that "all" passwords were in fact provided, and there was only ever one access point (or password or "key", however that may be described) to the Dynamics Account (or at least only one password with user rights that permitted alteration or deletion of material on the Dynamics Account). The Respondents' position on the present application is that they were aware at all times that that was not the case.
I do not here consider the merits of those complaints, nor am I in a position to make any findings in relation thereto (and I note that the contempt proceedings have been heard and judgment is reserved). However, I note the allegations that have been made because they place in context the suspicions obviously harboured by the Applicants in relation to the matters that led to the present application; and because the Applicants say that the Respondents' knowledge of those earlier events made it incumbent on them to act with care when communicating about passwords and the like.
The Independent Computer Expert's report dated 21 February 2019 included a list "of evidence items located on each of the hard disk drives", and set out "Evidence ID numbers" which it was said were "unique identifiers" applied in accordance with her firm's evidence management procedures. Relevantly, that Evidence ID list included a number of items described as "Microsoft Office 365 Emails" each with a different user name and a different access ID (one of which was Mr Corry's alex@nexgenpharma login). The last item on the list (to which, tellingly in my opinion, no access ID was appended) was "Microsoft Office Dynamics".
The Independent Solicitor (as required by the Search Order) prepared a report dated 21 February 2019, following the execution of the Search Order, in which he noted (at [91]) that during the search Mr Corry (and Mr Ghaly) had at all times been compliant with any of his or the Independent Computer Expert's requests. At [84], when dealing with how the computers and "cloud accounts" were to be searched, the Independent Solicitor noted (in a paragraph which was emphasised in the course of submissions on the present application) that:
84. Any Microsoft 365 accounts (being email and Dynamics Accounts) would be downloaded offsite. Mr Corry provided his username and password to allow Ms Balit to change the password to ensure that these accounts were not tampered with until all downloads were completed by Klein & Co.
[Emphasis added]
Pausing here, what seems to me to be abundantly clear (albeit, I accept, with the benefit of hindsight) is that provision of Mr Corry's username and password could not have ensured that the Dynamics Account was not "tampered with" if (as the Respondents say they always understood) there were other users who had access to the Dynamics Account and could alter or delete documents on the system. However, the Respondents say, in effect, that what was to be preserved under this regime was not the Dynamics Account (as such), but simply Mr Corry's password (that enabled access by the Independent Computer Expert to both the email account and the Dynamics Account, so that those accounts could be downloaded without tampering). (I consider below the issues raised as to the proper construction of the relevant orders.)
Annexure "H" to the Independent Solicitor's report was a copy of a handwritten list of the documents and items taken from Medicina's premises. The list was signed by each of Mr Wallman, the Independent Solicitor, and Mr Corry. Item 4 in that list was:
Control of Alex Corry email acct (Microsoft Office 365)
against which item appear the words:
- eg all Nexgen [Medicina] staff emails
- + Dynamics
A line pointing towards the words appearing against item 4 has the annotation "privilege claim", which is consistent with the Independent Computer Expert's report that indicates that Mr Corry had raised a claim of privilege. The potential claim for privilege explains the need for the defendants' solicitors first to review the seized documents over which it was considered that a privilege claim might be made, before the Applicants' solicitors reviewed those documents. Also the note against item 4 indicates, in my opinion, an understanding that Mr Corry's email account (accessed via the alex@nexgen.pharma login) gave access both to all the emails of Medicina staff (not just his own), as well as the Dynamics Account. The Respondents accept this. However, the Respondents place weight on the description "control of Alex Corry email acct" (as opposed to, say, "control of Medicina's Dynamics Account").
The Applicants say that, far from supporting the Respondent's recent construction argument, the description at item 4 of Annexure H to the Independent Solicitor's report, and the note to which the Respondents refer, are consistent with the explanation provided in the Independent Solicitor's report at [84] and the report of the Independent Computer Expert about using Mr Corry's login to take control of the Dynamics Platform.
I consider (from the notes to item 4 as extracted above) that it must have been understood at the time, at least by those practitioners who signed the document, that "control" of Mr Corry's Microsoft Office 365 email account (the First Corry Email Account) would permit access not only to all the staff members' individual email accounts but also to the Dynamics Account (and it is clear from the Independent Computer Expert's Report that the access provided to that Microsoft Office 365 email account was via the alex@nexgen.pharma login).
In her report, the Independent Computer Expert recorded, inter alia, that Mr Corry had objected to the Independent Computer Expert seizing all of the computers, including the file server and the computer used to operate Medicina's telephone system, on the grounds that he needed those for the continued operation of the business. The Independent Computer Expert recorded Mr Wallman's instructions that: he did not require any of the computers from Medicina's premises; he required the Independent Computer Expert to search the file server for relevant documents; and he required the Independent Computer Expert to obtain control of the "business Microsoft 365 account (emails) and the Microsoft Dynamics Account".
As noted above, the Independent Computer Expert's Report records that on the following day when Mr Corry requested access, the Independent Computer Expert advised Mr Corry that her instructions were that he would not have access until she had downloaded the contents of those online accounts from Klein & Co's offices (see below). From this it would seem that, whatever access it might have been thought that other users would have in their personal office email accounts, Mr Wallman at least seems to have assumed that denying Mr Corry use of his password would mean "control" was obtained of the Dynamics Account; and those were the instructions given to the Independent Computer Expert.
The Independent Computer Expert's report also attached as Appendix "D" the same list that the Independent Solicitor had included as Annexure "H" to his report.
Pausing here, the Respondents say that there is no suggestion that any member of the search party was prevented from searching materials on the execution of the Search Order, or from requesting relevant assistance from Mr Corry or others; and that the reports of the Independent Solicitor and the Independent Computer Expert establish that they were not impeded in any such way. (That submission does not, of course, take into account the alleged removal of devices from Medicina's business premises in advance of the search, but that is another issue and not of relevance to the current proceeding; other than that it again no doubt serves to fuel the suspicion by the Applicants of Mr Corry's conduct.)
The Respondents say that it is unsurprising (given that there were only two defendants at that time - Mr Corry and Medicina) that the focus of the enquiry was on Mr Corry's login to the Microsoft Office 365 Business Account (and the Dynamics Account). (The Applicants complain that there is no evidence that this was the "focus", and that it is no more than surmise on the Respondents' part.) The Respondents say that Mr Corry was asked to provide that login and password details; that that is what he provided; and that there is no evidence of any request for any other logins or passwords. (The Applicants say, in effect, that the fact that no further password was requested is not to the point; since the orders referred to "all passwords".)
It is also noted by the Respondents that the login and password to the First Corry Email Account (i.e., the alex@nexgenpharma login) provided by Mr Corry enabled the Independent Computer Expert to begin "interrogating" and downloading the Dynamics Account, which revealed many additional users and login details.
The Respondents point to Mr Ghaly's affidavit of 27 May 2019 in which he refers to having access to the Dynamics Account via his own separate login "Rimon@nexgenpharma", and that he used that login to access the Dynamics Account on a daily basis to perform his work for Medicina. They point out that Mr Wallman's own evidence establishes that he was later able to "interrogate" the Dynamics Account to ascertain that other users had access to the Dynamics Account with a different login and password to Mr Corry, namely that there were thirty-eight "active users"; (and he obtained the details as to the name, contact telephone number and levels of access of each of those users). Mr Wallman's evidence about the list of email accounts on pages 8-10 of the Independent Computer Expert's Report is that his understanding was that it was no more than a list of email accounts that had been imaged or captured. The Applicants say that the matters Mr Wallman was able to identify on his review did not disclose to him that there were multiple passwords to the Dynamics Platform.
The Respondents say that it may be concluded that such information as Mr Wallman was later able to identify about the Dynamics Account must have been available to (and was probably known by) the Independent Computer Expert as early as 20 February 2019. It is submitted that the failure of the Applicants to call any evidence from the Independent Computer Expert to the contrary strengthens that "inherently probable" conclusion. (Pausing here, I do not accept the proposition put for the Respondents that the Independent Computer Expert was plainly a witness in the Applicants' camp. That is contrary to the very notion of an independent expert appointed by the Court to conduct such searches and report thereon.) The Applicants say that the Independent Computer Expert was proceeding on the same basis as everyone else, namely that there was one password to the Dynamics Platform.
The Respondents argue that no issue was raised by the Independent Computer Expert, Mr Wallman, or the Applicants about other users or logins at the time (because they say, as adverted to above, that the Applicants' focus and interest was in investigating what Mr Corry had done and in securing his personal password until a download of the Dynamics Account had been completed); and that using Mr Corry's personal login was "plainly the safest way to ensure access to all of his files". They argue that the evidence adduced by the Applicants on the present application demonstrates that personal folders and files relating to Mr Corry were accessed by the Applicants using his login, reference in particular being made to Ex B, p 152, which records access to a file described as:
https://medicinapty- my.sharepoint.com/personal/alex_nexgenpharma_com_au/Documents/Alex@Medicina Pty/QuickNotes.one
Reference is also made to other pages of Ex B which record access by the Applicants to Mr Corry's personal folders or files (which the Respondents say highlights the Applicants' interest in such material) (namely, Ex B pp 153-158, 160-161, 163, 165, 168, 178, 183, 187, 192, 198, 200-203, 207, 210, 217 and 221).
The Respondents say that there is no evidence to demonstrate that such personal files of Mr Corry could have been accessed using another user's login and password; and that the Applicants made no effort to address that. The Applicants say that this is wrong. They note that Mr Corry's access through both the First Corry Email Account and the Second Corry Email Account was that of global administrator and that, as Mr Gerges said in cross-examination, this was the highest level of access to the Dynamics Platform (on 7/4/20 at T 100.4 and T 102.47). As noted above, the evidence is that Mr Ghaly's access was also that of global administrator (on 7/4/20 at T 100.23).
The Respondents say (and appear to invite judicial notice to be taken of this) that common experience would suggest that another personal login would not be able to access the personal files and information of a different user with a different login, particularly in the case of a senior executive and director such as Mr Corry (though, pausing here, I query how this submission squares with the evidence to the effect that Mr Corry was not the only person with global administrator access - Mr Ghaly also apparently having global administrator access as noted above).
In any event, the thrust of the Respondents' submission in this regard is that there were sound reasons for the Applicants to require, and be interested in, Mr Corry's login to ensure that they could access all of Mr Corry's files. (What that does not explain is the access to the Dynamics Account itself.)
The Applicants accept that access to the Dynamics Platform was facilitated through Mr Corry's login, but it is said that there is no evidence that the Applicants, the Independent Solicitor, or the Independent Computer Expert were focused on securing his personal password, as opposed to the Password to the Dynamics Platform itself for the purpose of completing the download.
The Respondents say that the Applicants knew that Medicina continued to conduct its business; and that the Dynamics Account was a "critically important system" used to conduct that business (which they say was plainly the reason the Applicants wished to download the data maintained on the Dynamics Account). (The Applicants say that there is no evidence of the Applicants knowing those matters.) As adverted to above, the Respondents place much emphasis on the fact that the Applicants never applied for an injunction restraining Medicina or its officers or employees from trading; and never sought to restrain all users of the Dynamics Account from accessing or using it. (That, however, begs the question as to what the Applicants understood "control" of Mr Corry's email account or login details would do - which is what has led in my opinion to most, but not all, of the present problems.)
The Respondents say that, if the Applicants required passwords associated with logins used by other users of Medicina's Dynamics Account, or orders restraining any access to the Dynamics Account by anyone, then that was a matter that could easily have been the subject of the Court's orders and/or the subject of request or submissions at subsequent directions hearings before Kunc J. Again, it seems to me that this illustrates the apparent misapprehension (at least on the part of the Applicants) as to whether "control" of Mr Corry's password meant control of the Dynamics Account as such, in the sense that the Dynamics Account would be preserved unchanged until the download was complete. Any such misapprehension on the part of the Applicants would, however, only be of relevance insofar as the Respondents were or should have been aware of this at the relevant time(s), as I explain in due course.
The orders made on that occasion also included that Mr Corry and Medicina were to have first access to the hard copy documents removed from the premises until 9:00am on 25 February 2019, such access to occur at the offices of the Independent Solicitor, and in the presence of a legal representative of the defendants or the Independent Solicitor (or his representative) (order 9); and that Mr Corry and Medicina were to have first access to any electronic documents removed from the premises until 5:00pm on 1 March 2019, on the same terms set out in order 9 (order 11). Any claim for privilege over any document inspected in accordance with order 9 was to be notified to the Applicants by 9:00am on 27 February 2019 and supported by affidavit evidence (order 10); and any claim for privilege over any document inspected in accordance with order 11 was to be notified to the Applicants by 9:00am on 8 March 2019, supported by affidavit evidence (order 12).
There was, thus, a (seemingly comprehensive) regime for inspection of the documents by Mr Corry and Medicina (under appropriate supervision) for the purpose of enabling any claims for privilege to be made before the Applicants had access to the material.
In cross-examination on the present application, the Second Respondent gave the following evidence as to a discussion outside Court on 21 February 2019 in relation to the Medicina business continuing to trade (on 5/5/20 at T 45.40ff):
A. -- we also had a conversation outside of Court and we were very clear that the business had to continue trading. When we were negotiating these orders we had a very clear conversation that the business had to continue trading. We accepted that the devices will remain in the custody of the independent computer - the independent solicitor.
Q. Right.
A. We accepted that proposition and there was an order entered into to that effect, but the platform was required to conduct the business.
Q. Right. And your concern at the time was, wasn't it, that if the custody of the platform was given to the independent computer expert or the independent solicitor, that is, that the defendants were locked out, your concern was that they would not be able to use it for the ordinary operation of Medicina's business; correct?
A. The platform, yes.
Q. Yes. And you're saying what you wanted to ensure was that the business could keep trading?
A. Yes.
Q. Right. But you didn't raise that with the Court, did you?
A. Well, I understood our discussion I believe on 21 February was clear that there was no injunction on the business stopping the business from trading.
Q. But your view was, wasn't it, Mr Athanassios, that if the password that Mr Corry had provided during the execution of the search order was taken by the independent computer expert and changed, that none of the defendants would have access to Dynamics?
A. No, that wasn't my view. That was one access point.
Q. All right.
A. One access point.
[Emphasis added]
Pausing here, the suggestion that the Second Respondent understood at the time (i.e., on 21 February 2019) that the orders made on 21 February 2019 only to relate to "one access point" to the Dynamics Account is, in my view, difficult to square with the proposition that "control" of Mr Corry's email account would preserve the integrity of the Dynamics Account. In other words, if it was always open to other users to have access to the Dynamics Account and to delete or amend material on that account; and that they could do so before the download was complete; then it seems nonsense to suggest that the material was in any relevant sense being preserved. However, I consider this, and the import of the reference to "all passwords", in due course when considering the submissions made by the respective parties as to the meaning of the orders made by Kunc J.
In response, the Applicants note that no explanation is offered as to why that conversation outside of court was not put to Mr Wallman in cross-examination (despite the submission at [72] that he likely witnessed the conversation), or why Counsel for Medicina (Mr Mirzai) whom the Second Respondent claimed was present (on 5/5/20 at T 51.28-32) was not called by the Respondents.
At 8:32pm on 21 February 2019, Mr Wallman emailed the Independent Computer Expert and the Independent Solicitor asking whether the requisite "passwords" had been provided, and the Independent Computer Expert replied (copying the Independent Solicitor and others) at 8:41pm stating that the "password" had been provided and that she could confirm that "it works". The Respondents say that this is consistent with the construction of the 21 February 2019 Orders for which they contend; and that it cannot be reconciled with the construction "belatedly" contended for by the Applicants that there was only ever one access key.
It is not clear on the evidence, but it seems likely that the attached email to which reference was made in the Second Respondent's 26 February 2019 (10:16am email) was an email sent by a solicitor from the Independent Solicitor's office at 6:27pm on 25 February 2019 in which it was said:
Further to my email below [which appears to be an email sent on 22 February 2019 at 5:03pm], the ICE [Independent Computer Expert] anticipates that the Dynamics download will be completed tomorrow, and will provide us with another update tomorrow morning.
Those communications again appear to proceed on the assumption that Mr Corry would not have access to the Dynamics Account until the download had been completed.
On 26 February 2019 at 2:46pm, the Independent Solicitor's office sent an email to the Second Respondent and others including HWLE and Mr Corry (the email being sent to two email addresses for Mr Corry - the alex@nexgenpharma email address and the legal_ac@nexgenpharma address), stating:
Hard Drives from the ICE
The ICE has successfully completed imaging each of the electronic devices and is currently in the process of making a copy of each of the hard drives …
Microsoft Dynamics
The ICE anticipates that the Microsoft Dynamics download will be completed this afternoon.
The Respondents argue that the Applicants (via their solicitors) and the Independent Computer Expert and Independent Solicitor plainly appreciated that Mr Corry was using another email account from the above emails (because of the email addresses from which the above emails were sent) (a proposition that is, with respect, self-evident). They point out that the Applicants made no enquiry as to the nature of Mr Corry's access to the Dynamics Account (a matter that they say would have been simple enough for the Independent Computer Expert to determine). That last proposition may be accepted, but it does not in my opinion necessarily assist the Respondents, since whether or not the Applicants (through their solicitors) could have discovered the issue at an earlier stage is not to the point (unless it is somehow said to go to causation in respect of the alleged wasted costs).
The Respondents point out that Mr Wallman's email to the Independent Computer Expert was copied to Mr Corry (rather than Mr Corry being told about the content of that email by the Second Respondent). What they draw from this seems to be that the Applicants were therefore aware of the existence of the legal_ac@nexgenpharma email account from at least 26 February 2019 (which the Applicants do not dispute), but insofar as the Respondents point to the fact that the legal_ac@nexgenpharma account was one of the "aliases" of the Second Corry Email Account; and that the Second Corry Email Account was a "global administrator" account with broad access to the Dynamics Account (see Points of Defence at 35 and (d)); the Applicants' evidence is that they were not aware of those matters until much later in the chronology of events.
The Applicants allege that, by virtue of the above communications, the Second Respondent knew that Mr Corry wished urgently to have his access to the First Corry Email Account and the Dynamics Account restored and made available to him for his use; but that the 21 February 2019 Orders prevented that (see Points of Claim at [21]). The Respondents admit that they were aware that Mr Corry wanted to regain access to the First Corry Email Account, but otherwise do not admit those allegations (see Points of Defence at [21]). As to whether the Second Respondent knew or understood that the First Corry Email Account was the only email account through which Mr Corry could obtain access to the Dynamics Account (the First Corry Email Account being the login name to the Dynamics Account), that is a different issue.
The Applicants say that they were not aware of the Second Corry Email Account at the time they became aware of the legal_ac@nexgenpharma account on or about 25 February 2019; and were not aware at that time that the Second Corry Email Account was an alias of the legal_ac@nexgenpharma. Accordingly, the Applicants say that they did not appreciate, at that time, that Mr Corry was using the Second Corry Email Account. Mr Wallman gave evidence in cross-examination as to why he did not undertake any investigations in February 2019 as to whether Mr Corry could access the Dynamics Platform through the legal_ac@nexgenpharma account. The Applicants say that there was no suggestion that Mr Wallman was not telling the truth, and that his evidence should be accepted.
The Applicants note that the Respondents' evidence was that they became aware of the legal_ac@nexgenpharma account in February 2019 (T 69.46; Mr Athanassios' affidavit sworn 10 January 2020 at [177]), and they submit that the fact that Mr Corry was using another @nexgenphamra email account did not put them (or anyone else) on notice that Mr Corry had engaged in any inappropriate conduct. The Applicants point out that the Respondents do not explain how they can then maintain that knowledge of the legal_ac@nexgenpharma account should have prompted enquiries as to Mr Corry's level of access to the Dynamics Platform.
(Although in their submissions the Respondents say that this email was not tendered, it was admitted as part of the email chain comprising Ex D.)
The Respondents say that the evidence given by the Second Respondent in relation to the 27 February 2019 email (concerning prohibitions on access to the Dynamics Account - see at T 87.32ff) is consistent with the construction of the relevant Orders for which they contend (see below) and demonstrates that the Second Respondent's understanding at all material times was that the focus of the orders was the Dynamics Account "as accessed through Mr Corry's login" via the First Corry Email Account; and that Mr Corry's insistence on regaining access to that login "was because that login was apparently also of importance to him".
Pausing here, it does not appear to be suggested that if Mr Corry, as it transpires he clearly did, was able to have access at all relevant times to the Dynamics Account, what he would have seen on that account would have been any different from what he could have seen using the First Corry Email Account login; in other words I do not understand that Mr Corry's access relevantly differed (or at least it did not differ once the Second Corry Email Account was set up with "global administrator" access). Therefore, the suggestion that the Respondents thought there was some significance to Mr Corry having access through one login rather another is hard to understand. Moreover, even if the Second Respondent did have that understanding, it beggars belief that - faced with Mr Corry's agitated requests for access - the response would not have been to the effect "what is the problem, since you can already have access to the Dynamics Account through other accounts", as the Applicants here contend.)
It appears that at some time on 27 or 28 February 2019, Mr Corry created a second email account with a different login name (this time referable to "alexcorry@nexgenpharma") (to which I will refer, consistent with the Points of Claim and the submissions of the Applicants, as the Second Corry Email Account). The Points of Claim place this as occurring on 28 February 2019 (see at [22]; and see Mr Wallman's affidavit affirmed 12 August 2019 at [34]); however, in Mr Wallman's affidavit affirmed 7 May 2019 this is placed as occurring on 27 February 2019 - see at [48]-[50]). Little, if anything, turns on whether it was set up on 27 February 2019 or 28 February 2019. The Applicants say that this was Mr Corry's reaction to learning that he would not be given access to the Password (which was the means of access via the First Corry Email Account). As noted above, the Second Corry Email Account also had the "global administrator" level functionality (which allowed Mr Corry to access all of the functions within the "Dynamics 365 Platform").
One of the complaints here made by the Applicants is that the existence of the Second Corry Email Account was not disclosed to them (or the Court) when the Respondents learnt of its existence.
The Applicants say that, in substance, what the Second Respondent was there proposing was that the custody of the material seized upon execution of the Search Order be transferred from the Independent Solicitor to the Respondents, with the same restrictions and protections in place, so as to facilitate the review of the information for privileged material (and the Applicants point to the Second Respondent's acceptance of this in cross-examination at T 133.27-42).
On 13 March 2019, the Second Respondent swore an affidavit in support of an application related to the defendants' privilege review, which included the following (see Ex 2):
Microsoft Dynamics Account
33. I still do not have the password to the Microsoft Dynamics Account and the Second defendant [Medicina] requires access to this account.
34. The solicitors for the Plaintiffs were notified that we require access to the Microsoft Dynamics Account in the 1 March 2019 Letter.
35. Depending on when the password to the Microsoft Dynamics Account is provided to us, the Second Defendant may need to request further time to consider the contents of the Microsoft Dynamics Account.
The Applicants emphasise that this was the evidentiary basis on which the Respondents asked the Court to permit them custody of the devices and the Dynamics Platform; and they contend that it was misleading.
The Respondents say that the affidavit sworn 13 March 2019 by the Second Respondent was not to the effect that the Respondents had no access to the Dynamics Account at all; nor that there was only one password or "key". Rather, they say that, in circumstances where the Independent Computer Expert had only ever requested and been provided with Mr Corry's password, and where only that password had been changed, the affidavit was directed to "that singular login and password".
I have difficulty with this submission. The statement that the Second Respondent did not have "the password to the Microsoft Dynamics Account" (my emphasis) conveys to me that there was only one such password (and at the very least surely conveys to the reader that the Second Respondent believed at the time that there was only one password that provided access to the Microsoft Dynamics Account). The assertion that the second defendant (Medicina) required access to the Microsoft Dynamics Account is not qualified. It clearly conveys that Medicina (without access to the Password) did not have access to "the Microsoft Dynamics Account".
If, as is now said to be the case, Medicina (and, in particular, Mr Corry) always had access to the Microsoft Dynamics Account (albeit through other users' email accounts), then there is a compelling argument that this statement is misleading by omission (and in Mr Corry's case it is demonstrably incorrect; in that he did have access to the Microsoft Dynamics Account at that stage through the Second Corry Email Account). In saying this, I do not find (see my discussion of these issues later in these reasons) that the affidavit was knowingly misleading, but that is because I consider the most likely explanation to be that the Second Respondent did not have a clear understanding of how access to the Dynamics Account was available and did not understand the operation of the orders to be as now contended (although that is not what the Respondents would now have me believe). The Respondents, however, maintain that the focus at this stage was on the privilege review; and that what was being reviewed was the platform as accessed by Mr Corry's unique login and password.
The orders proposed by the Applicants on that occasion were handed up to his Honour, including what became the Undertaking (see order 4). The agreed orders put in place, in effect, the changes to the inspection regime that had been proposed by the Second Respondent (namely, that possession, custody and control of the devices and the Dynamics Platform was handed over from the Independent Solicitor to the Respondents; and it was agreed that privileged material would be removed from the devices and the Dynamics Platform so that, once that had occurred, the Applicants could have access to the devices and the Dynamics Platform for the purpose of gathering evidence for the proceedings).
The Applicants say that the 14 March 2019 Orders provided for the following protections: the devices were to be retained by the Respondents and not returned to the defendants without further order (order 1(a)); once the Independent Computer Expert had provided the password to the Dynamics Platform to the Respondents, they undertook not to change that password or provide that password to any of the defendants until further order (orders 3-4); first access to the devices and the Dynamics Platform was to occur up until 5pm on 21 March 2019, but only at the office of the Respondents and in the presence of a legal representative of the defendants but not otherwise (orders 1(b) and 5(a)); and documents over which privilege was claimed, whether on the devices or on the Dynamics Platform, were to be removed onto a USB to be preserved and stored, and the claim was to be supported by affidavit evidence (orders 1(b)(ii), 5(b) and 7). Finally, it is noted that the 14 March 2019 Orders contemplated that the Applicants would have access to the devices and the Dynamics Platform from 5pm on 21 March 2019. The proceeding was stood over to 21 March 2019.
The Respondents maintain that the reference to "the password to the Dynamics Account" in Mr Athanassios' affidavit sworn 13 March 2019 and in the 14 March 2019 Orders (read with the wording that appears in the Independent Solicitor's report, the Independent Computer Expert's report, and the 21 February 2019 Orders) was a reference to the password to the First Corry Email Account only (see 17/7/20 at T 62.5).
As adverted to above, the Respondents say that it was appropriate for the privilege review to examine precisely the same documents that had been copied or imaged by the Independent Computer Expert (via Mr Corry's login). They refer to the First Respondent's evidence in cross-examination to that effect (including his knowledge that some of the accounts were limited access accounts).
Pausing here, I can well accept that if the privilege review then being, or to be, undertaken was of a snapshot of the Dynamics Account or its contents imaged (i.e., frozen) at a particular time, this would make sense. However, the difficulty I have with this submission is that, by the time of the 14 March 2019 Orders, what was contemplated (and this was at the Respondents' suggestion) was a privilege review conducted of the "live" Dynamics Platform. If (as was emphasised throughout the submissions on this application) this was a "live" platform the contents of which could be (and apparently were) changed regularly in the operation of the business, then it makes little or no sense for it to be suggested that the privilege review was to be of precisely the same account as that accessible through the First Corry Email Account.
Thus, while I accept that at the outset (when the privilege review was to be conducted on the imaged version of the data as downloaded by the Independent Computer Expert) the issue as to the "live" nature of the platform would not arise (provided there was no further interference with the downloading of the Dynamics Account as had occurred when the password was changed - most likely by Mr Corry); once it was proposed that the privilege review take place by way of an electronic review of a live platform that the Respondents now seem to say was constantly open to change, then that same logic does not hold good. Therein lies the difficulty with what transpired in this case. It is not apparent to me that the Applicants were aware of this when their consent was given to the change to the privilege review (even accepting that there was reference made at the time to the business of the company still continuing).
Whether it could be said that the Respondents had any obligation to enlighten the Applicants on this issue depends in my opinion on whether it was (or, when one comes to consider the question of incompetence, should have been) apparent to them that the Applicants were labouring under a misapprehension at that stage (for the reasons that I discuss later in these reasons).
Relevantly, the 14 March 2019 Orders, made by consent, included that:
3. The Independent Computer Expert is to provide the solicitors for the defendants with the password or any variation to the password in respect of the Microsoft 365 Dynamics Account.
4. The solicitors for the defendants undertake to the Court:
(a) Not to change or otherwise vary the passwords in respect of the Microsoft 365 Dynamics Account; and
(b) Not to provide the password to the Microsoft 365 Dynamics Account to any of the defendants, until further order of the Court.
[Emphasis added]
5. The defendants have first access to the Dynamics 365 Account on the same terms as set out in order 1(a) [namely, at the offices of the solicitors for Medicina and in the presence of a legal representative of the defendants].
The Respondents admit that the orders included the Undertaking (Points of Defence at [24]). However, they say that orders 3 and 4 of the 14 March 2019 Orders imposed obligations on the Respondents not to change the password associated with the First Corry Email Account login (even though the plural is used in order 4(a)); or to provide that password to any of the defendants until further order.
By the time of the 14 March 2019 directions hearing, the Independent Computer Expert had completed the download of the Dynamics Account and had copied or prepared images of all other seized devices. The Respondents say that it appears that no further difficulty was encountered by the Independent Computer Expert while downloading or copying (though it is not apparent what they say turns on this). The Respondents further say that nothing was said by anyone (during the period from 21 February 2019 to 14 March 2019) about any need for passwords associated with other users or logins (and as adverted to above they say that the privilege review was underway and it was appropriate to adopt the same approach to access to the Dynamics Account that the Independent Computer Expert had).
The Respondents maintain that, consistent with their construction of the 21 February 2019 orders, orders 3 and 4 made on 14 March 2019 were concerned only with the password associated with Mr Corry's login via the First Corry Email Account. Insofar as the Applicants submit that the orders made on 14 March 2019 only make sense if the parties' understanding was that there was only one "key" to the Dynamics Account, the Respondents say that this submission: relies on a finding that the parties had such an understanding (in circumstances where the Respondents say that this is was "plainly contrary" to the facts since the Respondents say that the evidence establishes that there was always more than one "key"); requires the Court to reject the Respondents' evidence as to their understanding (which is said to be supported by numerous contemporaneous facts); suffers from the difficulty that Mr Wallman did not give evidence that he believed there was only ever one "key"; is based on an unproven premise that access to the Dynamics Account via the login of another user would open up the Dynamics Account in precisely the same way that Mr Corry's login via the First Corry Email Account would open up the Dynamics Account; and that, in any event, Mr Corry's password unlocked more than just the Dynamics Account, it also unlocked Mr Corry's First Email Account.
The Respondents say that, as at 14 March 2019, the Applicants were, or should have been, well aware, that there were many other logins that enabled access to Medicina's Dynamics Platform. They note that the Independent Computer Expert's report dated 21 February 2019, which was provided to the Applicants on that date, set out all of these email accounts at pp 8-10 (and that Mr Wallman readily located them when he accessed the platform on 23 April 2019). It is said by the Respondents that the evidence does not establish that another login would be identical to Mr Corry's login, or would allow for the viewing of the same files and data arranged in the same way; and, in the absence of such a finding, it is said that preserving the Dynamics Account as accessed by Mr Corry's login was therefore of utility.
Pausing here, both sides point to the lack of evidence from the other as to the nature of global administrator status and the varying levels of access to the Dynamics Account. The Respondents' own evidence of their understanding in this regard emerged only relatively late in the proceeding and largely through their evidence in cross-examination. Leaving aside the question of in whose power it was to produce such evidence, the difficulty is that it left considerable room for confusion (not least on my part) as to the terminology being deployed by the parties.
It is not disputed that the First Respondent's email (the Breach Email) constituted a breach of the Undertaking because, by including the preceding email chain which contained the Password Email, it provided the Password to Mr Corry (and the other defendants).
At 5:10pm on 15 March 2019, Mr Corry sent an email to the First Respondent, replying to the Breach Email, which included the preceding email chain (including the Breach Email and the Password Email), setting out a list of passwords for three electronic devices. Mr Corry's email was copied to his solicitor.
At 7:18pm on 15 March 2019, the Second Respondent sent an email to the directors of Medicina, including Mr Corry at the legal_ac@nexgenpharma address (copied to the First Respondent), forwarding again the Breach Email and the Password Email, and seeking a response (a Further Breach Email).
At 7:33pm on 15 March 2019, Mr Corry sent an email to the Second Respondent, forwarding to him the email Mr Corry had sent to the First Respondent and to his solicitor at 5:10pm with the passwords for the three electronic devices (and including the preceding email chain).
At 10:25pm on 15 March 2019, the Second Respondent sent an email to Mr Corry, responding to the above email and thanking him for his message. The Second Respondent's email included the preceding email chain.
The Second Respondent sent an urgent email (at 12:42am on 24 April 2019) to Mr Corry, Mr Singh, Mr Goradia and Mr Ghaly, copied to the First Respondent, in which he forwarded the letter from HWLE and sought urgent instructions. The email stated:
It appears:
(a) The Plaintiffs' access to the Microsoft 365 Dynamics Account has been limited in that files to which they previously had access … are now disabled. Is this correct?
(b) Moreover, the Plaintiffs have become aware that Alex and Medicina have attempted to (unsuccessfully) delete or destroy the records of a number of documents which … evidence the deliberate and calculated use and/or exploitation of our clients' business records to carry on Medicina's business. Is anyone able to provide insight into this allegation? Is this correct or has there been any attempt of this purported conduct?
Separately, can you please confirm that no one has access to the new password for the Microsoft 365 Dynamics Account? Our office was not supposed to provide this new password to the First Defendant and the Second Defendant (ie. Employee, officer, director or representative) …
[Emphasis as per original]
I consider in due course the submissions made by the Applicants as to what should be drawn from the wording of this email (in particular, the suggestion that the Respondents became aware that night, contrary to their evidence, that there had been a breach of the Undertaking and were seeking to conceal it).
The Respondents say that they then checked the sent items in their electronic mailboxes to confirm they had not sent the Password (though neither believed he had done so); and the Second Respondent spoke to the relevant employees of Miller & Prince and to Mr Ghaly (and he believed also Mr Singh and Goradia) concerning the issue (see Mr Athanassios' affidavit sworn 10 January 2020 at [137]-[143]; and Mr Gerges' affidavit sworn 10 January 2020 at [83]-[87]).
The Respondents say that they sought instructions in writing from Mr Ghaly, Mr Singh and Mr Goradia about the allegations in that letter, and that they telephoned Mr Corry and Mr Ghaly (as director and officer, respectively, of Medicina) to seek instructions. They were satisfied from those discussions and the enquiries previously made that the matters raised by HWLE had been sufficiently investigated, and that no-one from Miller & Prince had sent the Password to the defendants. It is noted that their response (by letter of 24 April 2019 to HWLE) to the 23 April 2019 letter, and a subsequent letter of 30 April 2019, was settled by Counsel.
The response from Mr Corry to the email sent from the Second Respondent on 24 April 2019, rather than addressing the request for confirmation as to access to the new password, was (unhelpfully) to go onto the offensive, so to speak. Mr Corry sent an email to the Second Respondent at 5:27am on 24 April 2019, stating that:
They need to specify what they claim they had access to and what they now don't.
I do not believe anyone has altered anything beyond the usual daily trade. [Emphasis added - I note that this implicitly concedes that alterations may have been made to the Dynamics Account documents]
Also Microsoft does regular updates and has been doing updates.
I think it's bullshit because we asked for access.
Anyway audit log exist and we have notifications and they have been accessing material over the course of the break.
At 5:32am that same morning, Mr Corry sent a further email to the Second Respondent providing details of regular updates performed by Microsoft.
At 7:59am that morning, Mr Corry sent another email to the first and Second Respondents and to the other directors, which attached a number of documents, in which he said, among other things:
DATA DELETION
5. The only deletion that has occurred was a system effected deletion created by a system user (Microsoft potentially). We have an open ticket with Microsoft chasing this a similar error approximately 12 months ago.
…
7. These records, were however, manually re-entered within a period of 24 hours. It is unlikely it would have substantially effected the result they are claiming. We need more information. [emphasis as per original]
…
SUMMARY
8. It is coincidental that we requested access, and what appears to be a rushed letter is put on. … However, in order to [sic] adequately respond at the very least we need clarification of:
a. What they claim they can no longer access?
b. What they claim was deleted
9. Ideally, I would personally like to see a request for further information to come by way of affidavit from Nicholas Bova. …
The above email is what the Applicants refer to as the "bulk deletion" email. The Respondents say that when the above email is read in its entirety and considered in the context of Mr Corry's vehement denials in his own solicitor's letter to HWLE on 24 April 2019, as well as the other investigations and instructions provided to the Respondents, they were not alerted to any inappropriate deletions or other conduct, and were under no obligation to disclose anything in that regard. It is noted that HWLE's letter dated 23 April 2019 confirmed that the deletions (if there were any) were unsuccessful. The Applicants in response point to the irony of the Respondents placing weight on the veracity of Mr Corry's denials in light of what they already knew of his previous conduct. (The Respondents' response to this appears to be to the effect that past behavior is not a reliable indicator of future performance - a somewhat "blue sky" approach one might think.)
The Respondents say that when they received the correspondence from HWLE on 23 April 2019 (and the subsequent correspondence on 29 April 2019, as to which see below), they seriously and urgently sought instructions and carried out investigations. They say that the steps taken by them in the circumstances were reasonable and appropriate, and did not alert them to any breach of the Undertaking or any "nefarious activity" by others. Accordingly, they say (which would seem to me to be axiomatic, assuming of course that the premise of lack of knowledge is correct) they were under no obligation at that time to disclose to the Court or to the Applicants that which they did not know.
The First and Second Respondents have deposed to having discussions in the morning of 24 April 2019 about the letter from HWLE (see Mr Athanassios' affidavit sworn 10 January 2020 at [137]-[142]; and Mr Gerges' affidavit sworn 10 January 2020 at [83]-[86]). Relevantly, the Second Respondent has deposed that the First Respondent said that he had not given the Password to any of the defendants but that he would check his emails immediately to confirm the position, and that the First Respondent then confirmed to him that he had not sent the Password. The Second Respondent has deposed that he also spoke to Miller & Prince employees and asked them to ensure that the Password had not been sent to the defendants; and that they confirmed to him that they had not sent the Password. The Second Respondent has further deposed that he also checked his own "sent" mail items and satisfied himself that he had not sent the Password to the defendants. The First Respondent similarly has deposed to a discussion with the Second Respondent in the morning of 24 April 2019 in which he says that he confirmed that no one from Miller & Prince had sent the Password to the defendants; and that he checked his emails and did not find any emails he had sent to the defendants containing the Password, and confirmed that to the First Respondent.
In particular, the Second Respondent says that he telephoned Mr Ghaly (and to the best of his recollection Mr Singh and Mr Goradia) at 1:14pm on 24 April 2019, and received confirmation from everyone on that call that they did not have access to the Dynamics Account and that they had not caused any interruption to the Dynamics Account (see Mr Athanassios' affidavit sworn 10 January 2020 at [143]).
At 2:46pm on the same day, Mr Corry sent an email to the Respondents attaching a Notification Alert and stating that this meant someone with access to the alex@nexgenpharma account (i.e., the First Corry Email Account) had accessed the system at 4:27am that morning, and that he had traced this back to a HWLE server address according to a reverse IP lookup (the 24 April Notifications Email).
At 2:51pm, the solicitor for Mr Corry sent a letter to HWLE (copied to Miler & Prince) responding that:
… In answer to the specific requests in your letter (adopting the numbering in your letter):
(i) our client has not, since the date of the search order, deleted or directed any other person to delete, any documents from the Microsoft 365 Dynamics Account;
(ii) our client has not changed, or directed any other person to change, the password to the Microsoft 365 Dynamics Account; and
(iii) our client has not limited, or directed any other person to limit, your clients' access to the Microsoft 365 Dynamics Account.
At 6:13pm that day, Miller & Prince responded to the HWLE letter (a response signed by the Second Respondent but settled by Counsel), seeking further particulars of the allegations that had been made.
Significantly, on 25 April 2019, following receipt of the 24 April Notifications Email (and after the allegations that the Applicants or their solicitors had had their access to the Dynamics Account interrupted - see on 7/4/20 at T 121.15), the First Respondent sent an email to Mr Corry, the other defendants and the Second Respondent in response at 12:45pm, in the following terms:
This is great news - we will wait until they allege it was Nexgen that made changes, and then use the below to discredit them.
Pausing here, the suggestion in cross-examination that there was no (or no potential) forensic advantage in the monitoring by Mr Corry of the Applicants' review of the Dynamics Platform is, in my opinion, simply not credible in light of the above commentary, which clearly contemplated that there could well be a forensic advantage by possession of the information in question. As will be explained in due course, it is this email (and the non-disclosure to the Applicants that Mr Corry was secretly monitoring their access to the Dynamics Account) that has led me to the conclusion that a wasted costs order should be made from at least 24 April 2019 (if not from 11 April 2019 when the Respondents first were on notice of the Notification Alerts).
By letter dated 29 April 2019 (sent at 8:19pm), HWLE responded to the request for further particulars of the allegations. That letter included the following:
4 …
(a) The Microsoft Outlook account of Alex Corry (the Corry Email Account) which is interlinked with Mr Corry's Microsoft Dynamics 365 account, has been accessed regularly (and as recently as today) and emails within the Corry Email Account have been manipulated. … Evidently, someone has deleted or attempted to delete over 3500 emails from the Corry Email Account. …
5 On any view, it is apparent that:
(a) the Corry Email Account has been accessed and manipulated;
(b) documents within the Microsoft Dynamics 365 account have been manipulated, destroyed or removed; and
(c) our clients' access to the documents within the Microsoft Dynamics 365 account has been limited.
6. The only inference our clients are able to draw from the above is that one or more of the Defendants has been provided with a password so as to access to the Corry Email Account together with the Microsoft Dynamics 365 account, in breach of the orders of 21 March 2019. It is not clear to our clients how someone could access the Corry Email Account or Microsoft Dynamics 365 account absent being provided with the password.
…
8. As such, we repeat the invitation for your clients to provide an explanation for the above. In this regard, our clients require an explanation from each of your clients to identify:
(a) which of the Defendants has had, or continues to have, access to the Email Account and/or the Microsoft Dynamics 365 Account and how such access was obtained; and
(b) what steps have been taken within the Microsoft Dynamics 365 account to either remove documents or disable access, when those steps were taken, and why those steps were taken.
…
As to the allegation made by HWLE in the 29 April 2019 letter that the manipulation, destruction, or removal of files had occurred using the First Corry Email Account, the Respondents point out that the Applicants now accept that Mr Corry had global administrator access to the Dynamics Account via the Second Corry Email Account (from at least 28 February 2019). It is noted in that regard that the Applicants' case is that Mr Corry gained access via the Second Corry Email Account rather than using the Password to the First Corry Email Account (see the transcript before Kunc J on 16 May 2019).
At 11:55am on 30 April 2019, the Second Respondent sent an email to his clients seeking instructions in relation to the above. At approximately 1:01pm that day there was a telephone discussion between the Respondents, Mr Corry, and Mr Ghaly, following which the Second Respondent says he was satisfied that all reasonable investigation steps had been taken, and that no one from Miller & Prince had sent the Password to the defendants. (See Mr Athanassios' affidavit sworn 10 January 2020 at [152]-[155]; and Mr Gerges' affidavit sworn 10 January 2020 at [96]-[98]).
At 9:43pm on 30 April 2019, the First Respondent sent a letter from Miller & Prince to HWLE requesting further particulars of the allegations and stating:
With respect to paragraph 5 of Your Letter, your clients have accessed the information within the Corry Email Account. It may be the case that such material has been manipulated - whether inadvertently or otherwise - which would be a matter for your clients and those to whom your office has provided access.
…
With respect to paragraph 8 of Your Letter, we again confirm that our clients have not had access to the alex@nexgenpharma […] account as the password was changed by the independent computer expert and has not been provided to our clients since.
…
The assertion made in the last of the two paragraphs excerpted above turned out to be incorrect but it is not suggested that the First Respondent knew this at the time.
The Respondents say that the fact that Medicina was continuing to use the Dynamics Account to conduct its business was expressly raised during the directions hearing with no suggestion by the Applicants that this was not permitted by the 21 February 2019 Orders or the 14 March 2019 Orders, referring to the following (16/5/20 at T 5.7-8; 6.1-9):
MIRZAI: It is the second defendant's system. They're using the system to run their business. They haven't encountered any of these miraculous difficulties.
…
DAWSON: … The big gap in what Mr Mirzai said, it needs to be put on the table, is that there is no attempt by the second defendant whose platform this is, to explain what has happened, either in correspondence or otherwise. To say that the directors don't have day-to-day access is neither here nor there. To say that Mr Ghaly has access proves that they've got it and we don't. But to stay silent in respect of every other officer of NexGen, the second defendant, who are continuing to use this data base day-to-day, and your Honour remembers the affidavit that Mr Corry put on where he said this is how we run our business. …
The Respondents say that the above extracts from the transcript further support the construction of the 21 February 2019 Orders contended for by the Respondents, and amount to an admission by the Applicants that the orders did not: prevent Mr Corry creating the Second Corry Email Account; restrain Mr Corry from accessing the Dynamics Account; or restrain Medicina from conducting its business or accessing the Dynamics Account in the course of so doing.
Further, it is said that, during the 16 May 2019 directions hearing, Senior Counsel for the Applicants also confirmed that the First Corry Email Account was always intended to be the Applicants' "way in" to the Dynamics Account, and that this was an admission that the 21 February 2019 Orders: were directed to Mr Corry's login to the Dynamics Account via the First Corry Email Account; and did not require the Respondents or any of the defendants to the proceedings to disclose to the Applicants, the Independent Solicitor, or the Independent Computer Expert any other user login details or associated password connected with the Dynamics Account.
As to the Respondents' reliance on the above extract from the submissions made on behalf of the Applicants at the 16 May 2019 hearing, the Applicants say that, in context, the submission was directed to the Dynamics Platform rather than to Mr Corry's login. They say that the reference to "locking out" Mr Corry and the defendants only makes sense on that basis, and they note that the submission goes on to address the creation of the Second Corry Account being contrary to the purpose of the regime in place, namely to prevent access by the defendants to the Dynamics Platform.
Reliance is placed by the Respondents on the notation made by his Honour (which it is said further supports the construction of the 21 February 2019 Orders contended for by the Respondents) that:
The Court notes that this order 8 does not prevent:
(a) The creation by the Defendants of new documents within the Dynamics Account (which includes the duplication of an existing document to create a new document within the Dynamics Account); or
(b) The Defendants from accessing and viewing the Dynamics Account.
Pausing here, that notation does not suggest that the orders permitted any deletion or alteration of documents on the Dynamics Account (as had apparently been occurring throughout the period of up to then).
The Respondents say that the May Affidavits of Mr Ghaly, Mr Singh, and Mr Goradia were prepared on instructions and deny that they contained false statements or misleading omissions.
For the Respondents' part, criticism is correspondingly made of the Applicants' contentions (indeed, as adverted to above, it is said by the Respondents that the Applicants are here proffering a construction that was raised before, and rejected by, Kunc J on 16 May 2019); and that the Applicants' submissions are premised on a finding that there was only one access point to the Dynamics Platform (that being said to be a "belated" position for which the Applicants only "now contend").
The Applicants say that order 6 of the 21 February 2019 Orders (which I have already extracted) dealt specifically with the fact that the password to the Dynamics Platform had been changed, and assumed that the defendants were in a position to provide it; noting that it required that the defendants were to provide "all passwords to the Microsoft 365 Dynamics Account referred to on page 7 of the [Independent Computer Expert]'s Report"; and that orders 9-12 provided for first access to hard copy documents and electronic documents to facilitate any claim for privilege the defendants wished to make (noting that order 5 permitted the Applicants to have immediate access to anything over which no privilege was claimed).
The Applicants thus say that the regime was conditioned on first access on the inspection occurring at the office of the Independent Solicitor and there being a legal practitioner present (either representing the defendants or the Independent Solicitor himself or his representative), which prevented any of the defendants being left alone with the devices or the contents of the Dynamics Platform (i.e., that they could only have access if they were supervised by an officer of the Court).
The Applicants say that the Respondents have mischaracterised their submissions (insofar as the Respondents suggest that the Applicants' position is predicated on there being only one access point or one key to the Dynamics Platform). The Applicants say that their position is that: the parties and the Court were operating on the basis that there was only one password or key to the platform; and the access regime (and the conduct of the parties in the relevant period) was predicated on there being only one password to the Dynamics Platform. They contrast this with the Respondents' recent construction argument that there were multiple logins and passwords (multiple "keys") to the Dynamics Platform and that the parties were well aware of that fact.
The Applicants say (in response to the argument that they did not seek injunctive relief to restrain the defendants from accessing the Dynamics Platform) that there was no need for an injunction restraining the defendants from accessing the Dynamics Account because the parties all proceeded on the basis that there was only one password to the Dynamics Platform. It is noted that on the Respondents' case, the orders made only ever restricted access to the Dynamics Platform using Mr Corry's login and password (the First Corry Email Account); but not otherwise.
The Applicants say that there is no ambiguity in the wording of the 21 February 2019 Orders such that they would be construed against the Applicants in accordance with the contra proferentem rule or otherwise.
The Respondents contend that the Applicants' submissions as to construction cannot be reconciled with the express terms of the Orders and their proper construction, having regard to relevant circumstances at the time the orders were made; and that the Applicants' submissions are premised on a finding that there was only one access point or "key" to the Dynamics Account. (The Applicants cavil with this proposition). As to that second submission (with which the Applicants cavil in any event - see below), the Respondents say that, as the moving party seeking to establish that fact, the Applicants bore the onus of proving that there was only one access point to the Dynamics Account; and that the evidentiary onus lay particularly with the Applicants in circumstances where the relevant evidence was uniquely in their possession (having access to the Independent Computer Expert who interrogated the Dynamics Account), and where Mr Wallman had himself interrogated the system and was able to ascertain some thirty-eight users of the Dynamics Account and their levels of access. It is said that, despite having that advantage, the Applicants elected not to adduce any evidence to establish that there was only one access point or "key" as at 21 February 2019, or at any time, and that this allows the inference more readily to be drawn that no such evidence was available (the Respondents here invoking Ferrcom at 418-419, per Handley JA). In any event, the Respondents say that the evidence plainly demonstrates that there were other points of access (or "keys") to the Dynamics Account, including access by Mr Ghaly, who it is said had an unique login and (global) administrator access.
Pausing here, as to the submission that the Applicants were required and "elected not to adduce any evidence to establish that there was only one access point or 'key' as at 21 February 2019 or at any time", the Applicants say that there is no dispute that, as it transpired, other people had their own access point or unique login to the Dynamics Platform, but they say that the relevant question for determination is whether the parties knew that at the relevant time(s) in 2019 (and the Applicants maintain that the evidence makes plain they did not).
As to the proper construction of the Orders made on 21 February 2019, the Respondents say that the statements on p 7 of the Independent Computer Expert's report support the construction for which they contend (in particular, the references there to: the Independent Computer Expert being contacted by Mr Corry requesting access to "his" Microsoft Office 365 business account"; the instruction that the control of the "accounts" not be provided until the Independent Computer Expert had finished downloading the contents of "both online accounts" (which it is said can only have been a reference to the two accounts on p 5 of the report both of which were associated with Mr Corry's login); the instruction to commence downloading the "Microsoft Office Dynamics Account" (which it is said could only have been a reference to a download via Mr Corry's login and password); and to the fact that the "password" had been changed from the one Mr Banerji had been successfully using the previous day.
Thus, the Respondents say that order 6 was directed to passwords associated with the login already held by the Independent Computer Expert (being Mr Corry's login via the First Corry Email Account); and was concerned only with passwords (not with logins). It is noted that what needed to be "fixed" at that stage was that Mr Corry had apparently changed the password associated with "his" login. It is said that providing passwords associated with other logins would have been of no utility (without linking such additional passwords to Mr Corry's login).
The Respondents argue that if the Applicants had wished to include every login (by which, I interpose to note, the Respondents appear to mean every email account) that enabled access to the Dynamics Account and the associated passwords, that would have been a simple matter to incorporate into the drafting of order 6; but that it was not drafted that way (and they say that it was never submitted to his Honour that an order in such terms was required). It is said that such an order would only have been necessary to support an injunction restraining access by the defendants and their employees to the Dynamics Account; and they emphasise that no such injunction was ever sought.
It is submitted by the Respondents that the construction now contended for by the Applicants "is an attempt to distort the orders to support an entirely different claim for costs now brought against the Respondents in circumstances far removed from what the relevant parties contemplated" when the orders were made; and that this is a construction not consistent with the position later put to Kunc J by the Applicants on 16 May 2019, namely that:
…What we call the first Corry account was supposed to be our way into this platform. We got the password. We got the independent computer expert to change it. There were orders in place locking Mr Corry out of that and locking the defendants out of that account. We are the only ones that are supposed to be able to use that.
The Respondents submit that there is no ambiguity in the orders but that, even if there were, the order should be construed against the Applicants consistent with the contra proferentem rule.
The Respondents say that (applying the Briginshaw standard) there should be a finding that the 21 February 2019 Orders and 14 March 2019 Orders were concerned only with Mr Corry's login to the Dynamics Account via the First Corry Email Account, did not restrain any of the defendants (including Mr Corry) from continuing to access the Dynamics Account, and that there were, at all material times, persons other than Mr Corry who were accessing and using the Dynamics Account with unique logins and passwords; as well as a finding that the Respondents' state of mind at all material times was consistent with that; and that the Applicants and/or their solicitors knew or ought to have known that.
Pausing here, I accept that there was debate before Kunc J on 16 May 2019 (in the context of the complaints then made by the Applicants) as to the operation of the earlier orders, in which it was conceded that there was no order expressly prohibiting the ongoing conduct of the Medicina business. I see that as a different issue. The point of the Applicants' contention is that, as a practical matter, it was not necessary (and there may have been very sensible reasons not to do so) for them to seek injunctive relief of that kind if the provision of all passwords to the Dynamics Account had the effect that it would not be possible for the defendants to obtain access to that account (until downloading was complete). It is obvious that the focus at the time of the initial orders was to preserve the integrity of what was on the system at that time, pending completion of the download of the documents on the Dynamics Account (and the Independent Computer Expert's report makes it clear that the "control" of the account was for this purpose, not simply for the preservation of a "means of access").
Therefore, I do not accept that, properly construed, the relevant orders were restricted to one particular password (the password to the First Corry Email Account) or "means of access" to the Dynamics Account. I have concluded that the Orders required the provision of "all passwords" to the Dynamics Account; and that, had all those passwords been provided, the content of the Dynamics Platform would have been secured (albeit that for practical purposes this would necessarily have caused difficulty for the operation of the Medicina business in circumstances where no injunction to restrain the operation of that business had been sought).
However, ultimately, what seems to me more relevant for present purposes than the proper construction of the orders (since this is not a contempt application) is what the Respondents themselves understood the relevant orders to mean and what they appreciated (or what a reasonably competent solicitor in their position would have appreciated) the Applicants to have understood the orders to mean.
That is because, to my mind, the question of any incompetence or neglect (or otherwise) on the Respondents' part (and the degree of any such incompetence or neglect); or, for that matter, misconduct, turns on what the Respondents' understood, or should have understood, the agreed document preservation regime to comprise; and, to the extent that the Applicants were operating under a misunderstanding of the operation of that regime, whether the Respondents were or should have been aware of this, and if so whether it was incumbent on the Respondents (as officers of the Court and acting consistently with their professional and ethical responsibilities) to correct any such misunderstanding or misapprehension on the part of the Applicants as to the operation of that regime.
Before turning to that issue, it is relevant to consider the credibility of the Respondents.
As to the Second Respondent, criticism is made of his answers as to who his client was in relation to the Search Order (see at T 4.23-29; T 7.35-37); and to whom he was referring as his client in his conversation with the Independent Solicitor (T 9.43-48). The Applicants also criticise the fact that the Second Respondent did not inform the Independent Solicitor or the Applicants' solicitors of the fact that the Search Order had been compromised when the Second Respondent realised that Mr Ghaly knew about the Search Order from his conversations with him that morning, and knew that that was in breach of the Search Order (T 11.3- 8; T 11.50-13.38) (though I note that this is not conduct of which complaint is made in the Points of Claim as going to the wasted costs order here sought - and can only be now being relied upon as going to the Second Respondent's credit more generally).
The Applicants point to the denial by the Second Respondent that an inference could be drawn from Mr Corry's conduct in interrupting the Independent Computer Expert's download of the Dynamics Platform that there was information on the platform to which Medicina should not have access (T 38.19). It is submitted that that the answers given by the Second Respondent on this demonstrate his preparedness to lie (see at T 38.15-47), though the Second Respondent later said that that was the inference that was supported by Mr Corry's conduct (reference here also being made to the Second Respondent's own 27 February 2019 email to his client) (T 90.20-44).
Complaint is made that the Second Respondent was unwilling to answer questions about the requirement in the 21 February 2019 Orders that any review of the material by the defendants be under the supervision of a lawyer, without seeking to qualify his answer in some way by saying that requirement was "for the purpose of making a claim for privilege", and it is submitted that he refused to answer the question appropriately (see at T 62.33- 63.7).
The Applicants say that there was also inconsistency between the Second Respondent's affidavit sworn 10 January 2020 (at [183]-[184]) and his oral evidence that the existence of the legal_ac@nexgenpharma email address should have put the Applicants on notice of Mr Corry's ability to access the Dynamics Platform (T 105.35-39), noting that in his affidavit the Second Respondent had deposed that his own receipt of emails from that address did not tell him whether Mr Corry could access the Dynamics Platform (see at T 106.41-44). Reference is also made to the Second Respondent's evidence at T 107.1-15; T 107.19-108.21).
Next, the Applicants submit that the Second Respondent was disingenuous in his evidence that he did not understand the term "full access" (see at T 163.31-45; T 164.27). It is said that the Second Respondent gave inconsistent answers about his understanding of the level of Mr Corry's access to the Dynamics Platform as at 15 March 2019 (see at T 161.29-162.4; [33]-[35] of his 13 March 2019 affidavit; and T 162.12-163.18).
The Applicants say that the Second Respondent also gave unsatisfactory evidence in relation to his appearance before the Court on 27 March 2019 (which he had described at [112] of his affidavit sworn 10 January 2020 as taking a "neutral position" on behalf of Medicina in relation to Mr Corry's application regarding confidential information on the Dynamics Platform). The Applicants maintain that the position the Second Respondent took was not neutral, given that he had argued for a condition to be placed on Mr Bova (requiring him to fly to Australia to inspect the material at the Applicants' solicitors' office under their supervision) (T 165.29-168.30); and they point to the Second Respondent's evidence at T 168.35-169.15 as unsatisfactory in that regard.
The Applicants also say that the Respondents have made inconsistent submissions about when and whether Mr Corry could and should be believed, noting that (at [187] of their submissions) the Respondents suggest that it was appropriate for them to accept what Mr Corry said in his email of 24 April 2019 in relation to deletions (and suggest that there is an inconsistency in the Applicants' position that the Respondents should not have accepted what he said while maintaining that it was appropriate for Mr Wallman to accept what he said about not being able to access the Dynamics Platform), but that in the Respondents' closing submissions (at [173]; [203]; [207(a)(i)]) it is suggested that Mr Corry's claim in his 24 May 2019 affidavit that he had not used the Second Corry Email Account to disrupt the Applicants' access to the Dynamics Platform may be rejected. (The Applicants says that the Respondents make that latter submission because they do not wish to leave open the possibility that Mr Corry used the Password they had provided to him in breach of the Undertaking.) I do not propose here to enter into the debate as to the consistency or otherwise of the submissions put as to the reliability of Mr Corry's instructions.
The Respondents again say that they have acknowledged their inadvertent breach of the Undertaking and genuinely apologised to the Court for it, and that they have endeavoured to assist the Court in answering questions "over sustained and lengthy cross-examination over many days" (an approach which again it is said is not usually considered appropriate for a s 99 application, referring to Lemoto at 92, per McColl JA).
Thus the Applicants say that there is now in effect a conundrum for the Respondents: namely, that if the Respondents' construction is correct, then there was a breach of order 6 of the 21 February 2019 Orders and the Second Respondent misled the Independent Solicitor; but that, if, that is not the case (and the truth is that neither Respondent knew or believed, or had instructions, that there was any more than one password to the Dynamics Platform in February 2019 and up until 11 April 2019), then it follows that they have lied in their evidence to the Court on the present application as to their state of mind at the relevant time.
The Applicants say that, given the contents of the email of 27 February 2019 (and, in particular, the advice about, and recommendation to, seek an undertaking as to damages), the evidence both Respondents gave (that they believed at the time that the business of Medicina was continuing) cannot be true and must have been deliberately false (see, in the case of the First Respondent at T 89.27-34; and the Second Respondent at T 82.18-50).
The Applicants say that any suggestion that the reference to the Microsoft Dynamics Account in the relevant orders was to be understood as a reference only to Mr Corry's access to the platform (see T 134.31-135.10) because that was "the account subject to a search order" makes no sense in light of the terms of the Search Order.
Further, complaint is made that the Second Respondent's March 2019 affidavit did not disclose what the Respondents now say they knew at the time (namely that there were many other ways of accessing the Dynamics Platform). The Applicants say that [33]-[35] of the March 2019 affidavit clearly conveyed that, without the password referred to, the Respondents could not access the Dynamics Platform (cf the Second Respondent's evidence at T 141.16-24). It is said that, if the Respondents were capable of accessing the platform by means of other logins and passwords, or other "keys", then that is a matter which should have been disclosed. (The Respondents say, in response to this, that [33]-[35] of the March 2019 affidavit are consistent with the understanding that what was the subject of the inspection regime was the preservation of the means of access to the Dynamics Account via the First Corry Email Account - see 17/7/20 at T 62.1.)
The Applicants also maintain that, on the Respondents' construction of the Orders, any access by the defendants to the Dynamics Platform which was not supervised by a lawyer was a breach of the 14 March 2019 Orders.
Other matters raised by the Applicants as contrary both to the Respondents' construction of the relevant orders and to the proposition that the Respondents understood that there were multiple logins and multiple passwords to the Dynamics Platform, are that: there was nothing to suggest that the Applicants were aware of the Second Corry Email Account at the time it was created; nor that it was an "alias" of the legal_ac@nexgenpharma account; that Mr Corry's 26 March 2019 affidavit about the functionality and accessibility of the Dynamics Platform did not indicate to Mr Wallman that Mr Corry had access to the system at that point (T 86.24); and that the letters dated 23 and 29 April 2019 from the Applicants' solicitors in relation to the disruption to their access to the Dynamics Account made clear that the Applicants considered that the password must have been provided to someone as someone else must have had access to the Dynamics Platform; and yet the Respondents did not respond to the effect that in fact numerous people were able to access the Dynamics Platform (T 143.10-45).
Thus, the Applicants say that the evidence supports a finding that the Respondents understood the 21 February 2019 Orders and 14 March 2019 Orders to operate in the same way that the Applicants did (namely that, by quarantining the Password, they had effectively shut the defendants out from the Dynamics Account or platform).
Finally, it is said that the Respondents have not actually proven that the Dynamics Platform operated in the manner on which their construction argument depends, in that they have not adduced any evidence that established that there were multiple passwords to the platform. The Applicants say that, while Mr Ghaly's affidavits of 27 and 28 May 2019 refer to his login and to a number of staff who had logins to the Dynamics Platform, there is no mention of each staff member having his or her own password (and it is pointed out in this regard that the Second Respondent was present for the staff interviews conducted for the 28 May 2019 affidavit). Similarly, it is noted that Mr Corry in his affidavit of 24 May 2019 makes no mention of passwords; nor is there any mention of other logins or other passwords in any of the affidavit evidence filed by the Respondents on this application.
The Applicants say that the submissions made at the 16 May 2019 hearing did not constitute an "admission" that the orders did not restrain Mr Corry from accessing the Dynamics Platform, or restrain the Second Defendant from conducting its business, or accessing the Dynamics Platform in the course of doing so. Rather, it is said that they summarised the Applicants' understanding as at the date of the hearing as to what appeared to have occurred, including that Mr Corry had accessed the Dynamics Platform in breach of the regime put in place by the 21 February 2019 Orders and 14 March 2019 Orders, and that he had done so by setting up the Second Corry Email Account, thereby circumventing the regime of exclusive access established by the 21 February 2019 Orders and 14 March 2019 Orders by quarantining the Password.
The Applicants emphasise that, by the time of the 16 May 2019 hearing, the Respondents were well aware that that regime put in place by the 21 February 2019 Orders and 14 March 2019 Orders had been breached by Mr Corry and had failed to inform the Applicants or the Court that Mr Corry was accessing the Dynamics Platform via the Second Corry Email Account.
The Applicants say that the orders that were made at the 16 May 2019 hearing reflected the fact that: it had been made clear by the Respondents that access to the Dynamics Platform was occurring; orders needed to be made to deal with that access and in order to protect the Applicants' position; and such orders had not been needed before, as the parties understood the facts and the effect of the regime put in place by the 21 February 2019 Orders and 14 March 2019 Orders.
It is said that nothing that occurred at the 16 May 2016 hearing supports the Respondents' contention that the Applicants knew all along that the 21 February 2019 Orders and 14 March 2019 Orders did not prohibit Mr Corry from accessing the Dynamics Platform. Rather, it is said that the orders that were made on 16 May 2019 struck a compromise between the reality that access to the Dynamics Platform by the defendants was, as the Court was told, occurring in the operation of Medicina's business, and the need to ensure that the contents of the platform were preserved.
The Applicants say that it was on that basis that order 8 was made. They say that, on the basis of the parties' understanding that there was one Password to the Dynamics Platform, such an order had not been necessary; and that the notation to the orders reflected the reality, as by then known to the Applicants on 16 May 2019, that the defendants were accessing the platform in order to operate the business.
The Applicants say that, contrary to the Respondents' submissions (at [106]), order 8 and the notation do not support the construction of the 21 February 2019 orders contended for by the Respondents; but, rather, reflect the Applicants' understanding, as at 16 May 2019, that the defendants were accessing the Dynamics Platform and the Applicants' desire to ensure that the documents on that platform were preserved (by prohibiting the deletion of documents, but permitting the creation of new ones).
The Respondents say that it does not follow from Mr Corry's requests for restoration of his access that there were no other user logins to the Dynamics Account. They contend that Mr Corry's concerns involved his request for access to his emails (and that it is inherently unlikely, and unproven, that another user's login would have given Mr Corry access to his emails).
The Respondents point out that there is no evidence as to any request for any additional passwords by the Independent Computer Expert pursuant to either order 3 or order 6, and they say that this is consistent with their construction of the orders (i.e., that the Independent Computer Expert neither expected nor needed anything further). I do not consider that this follows.
The Respondents say that it is common ground that Medicina had a significant number of employees engaged in the day-to-day conduct of the business, and that access to the Dynamics Account was via a password. They maintain that it is not tenable to suggest that anyone thought that Mr Corry was the only person who could access the Dynamics Account; or that every employee of the Medicina business was logging into the account every day using Mr Corry's unique login and password (which also gave access to Mr Corry's personal email account). The Respondents invoke in this regard (and appear to invite judicial notice here to be taken of) the common experience in organisations with multiple employees as to the allocation of separate logins and passwords to employees.
The Respondents note that Mr Wallman agreed that he could have made enquiries about such matters of the Independent Computer Expert but did not do so (his evidence being that even after he knew Mr Corry had a second email account he took comfort in Mr Corry having expressed frustration in his correspondence that his password associated with the First Corry Email Account was not being returned to him). It is also noted that Mr Wallman accepted that he could have asked the Independent Computer Expert in February 2019 about the access to the Dynamics Account associated with each of the emails listed in the Independent Computer Expert's report but that he did not do so even though there was no reason preventing him seeking that information; and that Mr Wallman accepted that if he had made inquiries of the Independent Computer Expert as to the level of access granted to other users of the Dynamics Account, it is likely that he would have learned of the sort of access that others (such as, for example, Mr Ghaly) had to the Dynamics Account. (I note that the Applicants in their reply submissions contest the relevance of the enquiries that Mr Wallman could have made and say that much of the matters of which the Court was invited to take judicial notice was not put to Mr Wallman.)
As to the submissions made by the Applicants as to their understanding of the orders (and the particular attacks made on their credit in that regard), the Respondents respond as follows.
First, as to the submission (at [62]-[66] of the Applicants' closing submissions) that the Respondents could not have believed that there were multiple logins to the Dynamics Account (and, if they had such a belief, they must have appreciated the defendants were in breach of order 6 made on 21 February 2019, and/or the Respondents must have misled the independent solicitor), the Respondents note that there is no pleaded allegation of misconduct, or breach, in relation to any alleged failure to disclose to the Applicants that there were multiple users of the Dynamics Account with different logins and passwords; and they maintain that it was reasonable for them to believe that there were multiple users of the Dynamics Account.
Second, as to the reference (at [68] of the Applicants' closing submissions) to the fact that Mr Corry was pressing for access to be restored to his emails and to the Dynamics Account between about 21 to 27 February 2019, and the submission that those communications demonstrate the Respondents were lying in their evidence that they understood there to be other means of accessing the Dynamics Account, the Respondents say that it is common ground that Mr Corry had one unique password that governed access both to his email account and to his login for the Dynamics Account using the First Corry Email Account (and, again, submit that it was the change of password preventing Mr Corry from accessing his emails, and that this was a matter of concern to him). It is said that it does not follow that that difficulty would be resolved by Mr Corry accessing the Dynamics Account via another user's login; that there is no evidence to suggest that would give Mr Corry access to his emails; and that the evidence (and common experience) is to the contrary.
Third, as to the submission (at [70]-[71] of the Applicant's closing submissions) in relation to the 27 February 2019 email from the Second Respondent to the directors of Medicina (including Mr Corry), the Respondents say that, to the extent this is directed to the issue of an undertaking as to damages, it does not diminish the Second Respondent's credibility. It is noted that the Second Respondent did not recommend that he be instructed to seek an undertaking as to damages, but merely raised this as a matter which might be required in connection with the Applicants' refusal to provide the password to Mr Corry's login, thereby continuing to lock Mr Corry out of his email account and his login to the Dynamics Account via the First Corry Email Account. It is submitted that, at that very early stage of the Second Respondent's retainer, it was appropriate to raise the question of an undertaking as to damages for consideration. Reference is made to the Second Respondent's evidence (at T 98.1-15) that, although there were multiple access points into the Dynamics Account, as at February 2019 he did not know precisely the level of access different people had.
Fourth, as to the submission (at [76] of the Applicants' closing submissions) that the Respondents "consciously lied" to the Court by asserting that their understanding as at February 2019 was that there were multiple logins to the Dynamics Account and that they did not believe that the access via Mr Corry's login using the First Corry Email Account was the only "key", the Respondents maintain that the evidence demonstrates that they had such an understanding and that it was reasonably held. It is said that there is no basis for a finding that the Respondents lied to the Court, particularly on the application of the Briginshaw standard.
Similarly, it is said that there is no basis for the Applicants' submission (at [78] of the Applicants' closing submissions) that "the advice about and recommendation to seek an undertaking as to damages", and the Respondents' evidence that they believed the Medicina business was continuing "simply cannot be true and must have been deliberately false". The Respondents again point out that the 27 February 2019 email did not recommend seeking an undertaking; rather, it sought instructions as to that issue. It is said that there is no real issue in the proceedings that the Medicina business continued to operate; and it is conceivable that the prevention of Mr Corry having access to his emails or the Dynamics Account being accessed via his login could present difficulties for Medicina (such that it was entirely appropriate to raise the issue as the Second Respondent did in the email).
Fifth, as to the criticism (at [84] of the Applicants' closing submissions) of the evidence given by the Second Respondent (at T 161-163) about his knowledge as to the level of access the Second Corry Email Account gave Mr Corry to the Dynamics Account, while the Respondents accept that this evidence was inconsistent, and that the Second Respondent changed his position from saying that the account gave Mr Corry full access to saying that he understood it gave him an unknown level of access, the Respondents say the change is readily explicable. They say it is apparent from what was said (at T 162.18-19) that the Second Respondent, in giving his initial answers, was making an assumption as to Mr Corry's level of access rather than giving evidence of the Second Respondent's actual knowledge. It is accepted that the Second Respondent ought not to have made an assumption in giving his evidence and, in that respect, it was unsatisfactory, but it is said that it explains why, under further scrutiny, the Second Respondent conceded (at T 163.43-54) that "I wasn't aware of what the level of access. He had access to the platform. I wasn't aware of what the sort of level he had, what sort of access he had".
In essence the position of the Respondents is that, even if there be any doubt as to those matters, it was reasonable for the Respondents to have conducted themselves on the basis that that was the effect of the orders; and to have assumed that the Applicants and their legal representatives were operating on the same basis. It is submitted that an examination of all of the evidence supports such a finding, and that it is not a recent invention as the Applicants here submit.
I think that there is no other explanation (absent conscious falsehood) that explains the confusion surrounding what was meant by the orders (confusion that I consider subsisted even through the present hearing). In other words, I consider that the Respondents, as is not perhaps uncommon, were seeking to portray the events that had occurred in the most favourable light to themselves but were not deliberately dishonest.
The Applicants say that the Breach Email and the Further Breach Emails are not just examples of the kinds of email mishaps that can occur in a busy legal practice (as the Respondents so characterise them); and that the circumstances required a particular level of care of the Respondents. It is emphasised that the Respondents had given the Undertaking not to do the very thing that they then did.
The Applicants submit that the fact that the Password Email was sent to the defendants as part of a chain of email correspondence does not excuse or take away the seriousness of the breaches of the Undertaking. In particular, they note that: the email chain in question commenced by reference to the 14 March 2019 Orders, which included the Undertaking, as set out in Mr Wallman's email of 1:00pm on 14 March 2019; the Breach Email was the eighth email in the chain and the recipients of the Password Email and the chain of emails that followed (until the Breach Email) were confined to the First and Second Respondents, Ms Suhle of Miller & Prince, and the solicitor for Mr Corry; and (contrary to the Respondents' assertion that there were "numerous topics of discussion throughout the email chain" - see Mr Gerges' affidavit at [60]), the only topic under discussion as part of the email chain was about the provision of passwords, either for the Dynamics Account or the devices.
The Applicants say that the First Respondent was clearly aware that he had received the Password from the Independent Computer Expert from the terms of the email he sent in response, which requested that the Independent Computer Expert "also confirm the passwords" for the devices. As to the Second Respondent's assertions that he was "copied into" an email from the First Respondent "forwarding a lengthy email chain" which he did not appreciate included the Password Email (see Mr Athanassios' affidavit at [14]), and that he did not send the Breach Email (at [15]), it is noted that: the Second Respondent was copied into each of the emails in the chain as they were sent and received; and that the Second Respondent himself separately sent emails to the defendants which forwarded the relevant email chain to them, including the Password Email (referring to Mr Athanassios' affidavit at [105]; [106]) (Further Breach Emails).
The Applicants contend that it is remarkable (given that the relevant email correspondence had been instigated by Miller & Prince for the purpose of obtaining the passwords pursuant to the 14 March 2019 Orders) that neither Respondent realised, upon sending the Breach Email and the Further Breach Emails, that the Password had been sent to the defendants in breach of the Undertaking.
Reliance is also placed on the Respondents' own evidence (as to what they would have done had they realised that the Undertaking had been breached), as indicating their acceptance of the seriousness of their breaches of the Undertaking (see Mr Gerges' affidavit at [64]; Mr Athanassios' affidavit at [109]).
It is submitted that the fact that the Password was embedded in the email chain was a detail which "was easily missed in the exigencies of a busy solicitor's practice where one does not always have the time to read (or the inclination to bill a client for) reading every long chain to every email, when the leading email appears to contain the salient information".
The Respondents also point out that, at 5:10pm on 15 March 2019, Mr Corry replied to the First Respondent's email, copying his own solicitor, Mr McKinnon, and providing passwords for three of the devices (that email chain also included the Independent Computer Expert's 12:03pm email with the Password to the First Corry Email Account). The Respondents point out that Mr McKinnon had given the same undertaking to the Court as the Respondents and, had he read the entire email chain, would presumably have realised that the Password had been provided to Mr Corry; yet he did not take any steps to alert anyone to this. The Respondents infer from this that Mr McKinnon also did not realise that there had been a breach of the Undertaking and they rely on this as providing a "useful barometer" when assessing the reasonableness of the Respondents' conduct.
Insofar as there was a Further Breach Email at 7:18pm by the Second Respondent re-sending the earlier email chain, the Respondents say that the further email cannot have had any additional causative effect (and note that the Second Respondent included his 7:18pm email in his affidavit sworn 10 January 2020; and has since apologised to the Court for his inadvertent oversight in sending it). As to the reliance placed by the Applicants on the fact that the First Respondent did not apologise to the Court prior to the preparation of his affidavit sworn 10 January 2020, and that the Second Respondent allegedly did not appreciate that he had himself breached the Undertaking by also sending an email on 15 March 2019, and did not apologise for that further breach in his affidavit of the same date; the Respondents say that those matters involve an assessment of negligence or incompetence not at the time of the relevant act but at the time of the hearing, with the benefit of hindsight and based on the giving (or absence) of an apology. It is submitted that there is no principled basis for such an assessment. It is said (and I accept) that the giving or absence of an apology has no bearing on whether the particular conduct associated with the breach was negligent or incompetence (although it may be relevant to any sanction imposed for the breach). Further, it is said that the Second Respondent was aware of his personal breach and volunteered the relevant email in his affidavit sworn 10 January 2020 and exhibit (in circumstances where it is said the Applicants were "apparently unaware of it").
The Respondents say that the screenshots of their computer monitors (copies of which are annexed to their affidavits) show that the email containing the Password was not immediately visible in the email chain. It is submitted that the account given by each of them that he did not "scroll down" and read the entire email chain, or appreciate that the Password was included when the email was sent, is both credible and probable. Reliance is placed on the steps taken by them to investigate the matter following the receipt of HWLE's letters of 23 and 29 April 2019 as supporting their account (on the basis that they say that those steps plainly would not have been taken if either of them knew that the Password had been disclosed on 15 March 2019).
It is thus submitted that the breaches were regrettable but wholly unintentional; that each breach was explicable, in circumstances where the 14 March 2019 Orders required all the computer devices to be accessed and reviewed by the Respondents with all privileged material identified and secured by 21 March 2019 (which was an extension of the date provided for under the 21 February 2019 Orders); and where the Applicants' legal representatives had complained to the Court at the hearing on 14 March 2019 that the defendants had been dilatory in progressing the privilege review. It is noted that the computer devices had been retrieved by the Respondents from the offices of the Independent Solicitor on the afternoon of 14 March 2019 following the making of the orders on that day, but could not be accessed using the passwords provided by the Independent Computer Expert as at 4:58pm on the evening of Friday 15 March 2019; and that, at the hearing on 14 March 2019, both Kunc J and Senior Counsel for the Applicants had referred to the privilege review taking place over the weekend of 16-17 March 2019.
The First Respondent's evidence is that he was concerned promptly to progress the privilege review. The Second Respondent, in his affidavit, referred to the short timeframe for the exercise, in circumstances where the review would be time consuming and would involve the reading of many thousands of electronic documents.
The Respondents say that emails are "the bane of the modern solicitor's life"; that the evidence is that the Respondents received hundreds of them; and that it was in those circumstances that the Respondents each missed the fact that the Password to Mr Corry's login was embedded "deep" in the email chain.
It is thus submitted that the sending of the Independent Computer Expert's 15 March email containing the passwords to the computer devices was consistent with compliance with [1] of the 14 March 2019 Orders; and that the inclusion of the earlier 15 March 2019 email from the Independent Computer Expert containing the Password was a mistake which occurred as part of the attempt by each Respondent to achieve this compliance with the Orders.
The Applicants submit that those investigations were "woefully inadequate"; and that the Respondents' failure to conduct a proper review of the relevant email communications (and their failure to identify the breaches of the Undertaking) was thus the product of serious incompetence and/or serious neglect on the Respondents' part.
However, the Applicants go further to submit that it is more likely than not that the Respondents became aware of their breach of the Undertaking on the night of 23 April 2019. They maintain that the "so-called" investigation was not an investigation at all. They say that if the evidence the Respondents gave was truthful, then the investigation was, at most, a cursory look at their emails with no care, and "none of the thoroughness and diligence that a concern that they had breached an undertaking to the Court demanded". It is said that both Respondents accepted in cross-examination that what they had done was, on any view, insufficient - reference being made by way of example to the First Respondent's evidence at T 144.37; T 144.50; T 145.27; and T 194.26-27.
Indeed, the argument of the Applicants goes so far as to contend that the nature of the "investigation" as described by the Respondents was so inadequate that it is in fact a basis on which to conclude that the investigation did not occur and that the evidence the Respondents gave about it was concocted. It is said that the First Respondent's "unsatisfactory and contradictory evidence" about the conversation he said he had with the Second Respondent about the letter of 23 April 2019 points to that conclusion. The Applicants maintain that it is "simply incredible" that both Respondents: looked for an email that according to them they both knew did not exist (i.e., an email which they had sent in which they had typed the Password and provided it to the defendants); and did not find the Breach Email (or the Further Breach Emails) because they both failed to scroll down when reviewing their emails and only read the text visible in the viewing pane on their monitor.
Insofar as the evidence of each of the Respondents was that he knew that he had not himself prepared and sent an email in which he had typed the Password and sent it to the defendants, the Applicants say that this meant that the only possible way that the Password had been emailed to the defendants by the Respondents was through inadvertence; and therefore that the only email to which a proper investigation could be directed was an email which forwarded, or included, the Independent Computer Expert's email in which she had provided the Password to the Respondents. (The Applicants say that, to their discredit, neither Respondent accepted that proposition pointing to the First Respondent's evidence at T 145.50; T 146.7; and T 146.41 and to the Second Respondent's evidence at T 195.24; T 195.26-43.)
The Applicants further say that the evidence that each Respondent failed to "scroll down" (and for that reason did not locate the Breach Email) is "so absurd" that it cannot be accepted. It is submitted that it is inherently unlikely that both Respondents did exactly the same thing (or made the same omission), particularly as to something so basic as the search of an email. It is submitted that failing to scroll down through an email "when the only email one is rationally searching for is one forwarding or replying to an earlier email as part of a chain" guaranteed that the Breach Email would not be found.
The Applicants note that the First Respondent agreed in cross-examination that the screen shot of his computer was intended to reproduce the results of the "NHB" keyword search that he had conducted (T 150.41-44); that he accepted that if he had scrolled down in the reading frame of the highlighted email, being the Breach Email (T 151.15) he would have realised that he had breached the Undertaking (T 151.47-49); and that he accepted that one email that was brought up by the search, which was from the Independent Computer Expert, put him on notice that the email was from the Independent Computer Expert and might have been about the Password (T 157.15). It is submitted that, given the terms of the Further Breach Emails, it is impossible to accept that the First Respondent would not have scrolled down. It is noted that the email expressly referred to "passwords" to the devices, and invited the recipients' attention to "the email below and attachment". The Applicants say that the attachment was named "LB [Leanne Balit] site notes", which was plainly a document prepared by the Independent Computer Expert. It is said that it is not credible that someone looking for an email where the Password might inadvertently have been provided to the defendants (let alone a solicitor who was concerned that he had breached an undertaking to the Court) would not scroll down to look at the "the email below" to which he himself had directed attention. The Applicants say that the email in the screenshot immediately below the highlighted email in evidence is the email in which the First Respondent thanks the Independent Computer Expert for the provision of the Password. Again, it is submitted that it is incredible that the First Respondent would not have realised that that email was the email in which he had received the Password, and that that was the email he had forwarded in the very next email in the search results.
As to the Second Respondent it is noted that his evidence was that: when he conducted his search, he looked at each email in the viewing screen by clicking on the email using the arrow keys (T197.29-37); that the screenshot in evidence, which was one of the searches he performed at the time (T 193.5-13), in fact showed the email from the Independent Computer Expert containing the Password (T 197.50-T 198.2); that if he had clicked on the fourth email from the bottom of the emails shown on the screenshot (T 193.21-25) he would have seen the Password was provided by the Independent Computer Expert to his firm (T 198.7); and that each of the emails above that one was an email in the chain that followed and that if he had clicked on each of them, it would have disclosed to him that he and the First Respondent had sent the Password to the defendants; but that when he clicked on the First Respondent's email, he "saw nothing there" (T 198.14).
The Applicants say that, on the Second Respondent's own evidence, by clicking on each email in the screenshot and reading that which appeared in the viewing pane to the right, the Second Respondent saw each email in the chain individually, without the need to scroll, and that he therefore did not need to scroll down to appreciate that the First Respondent's email highlighted on the screenshot came at the end of that chain, and therefore forwarded the Password to the defendants in breach of the Undertaking. Thus, it is said that on his own evidence, it cannot be accepted that he did not find the Breach Email.
Further, it is noted that the Second Respondent did not produce a screenshot of the search he describes at [139] of his affidavit sworn 10 January 2020. In that paragraph, he describes searching on "NHB" and focusing on the emails he sent. It is said that on any view, that would have brought up the First Respondent's Breach Email and his own Further Breach Emails, and that it is not credible that, given the terms of those emails, the Second Respondent would not have "scrolled down". It is submitted that if, as the Second Respondent said at [139] of his affidavit sworn 10 January 2020, his "focus was on emails that I had prepared and sent to the defendants and whether any of them contained the password", then scrolling or keying down in the Further Breach Emails was unavoidable. It is said that whatever would have been shown by a screenshot of the search referred to at [139] of the Second Respondent's affidavit, the Respondents' decision to omit it from their evidence means that it could not have assisted them.
The Applicants say that another difficulty with the Respondents' case is that they did not adduce any evidence of what searches were performed by Ms Suhle and Ms Lam, their employees. The Second Respondent's evidence was that they told him that they had checked their sent items folder and that they did not send the Password to the defendants ([142] of his affidavit sworn 10 January 2020 but the Applicants complain that the Second Respondent gave no evidence of what searches they did (such as a screenshot), or if they located the Independent Computer Expert's email, the Breach Email, or the Further Breach Emails. Again, it is submitted that it may be assumed that that evidence could not have assisted the Respondents.
The Applicants say that the evidence of the "investigation", together with a consideration of the Second Respondent's email at 12:42am and the circumstances in which it was sent, points strongly to a conclusion that the Second Respondent did in fact ascertain on the night of 23 April 2019 that the Undertaking had been breached; that the Respondents decided to conceal it, and that the so-called investigation on the morning of 24 April 2019 did not in fact take place. In particular, emphasis is placed on the wording of the email sent at 12:42am that night (see above) and it is submitted that the emphasis that the Second Respondent there gave to the word "not", only makes sense on the basis that the Respondents' firm had already provided the Password (something that the Second Respondent denied - see T 192.6-17). Complaint is made in this context that in their correspondence of 24 and 30 April 2019, the Respondents sought to blame the Applicants for the issues about which they had expressed concern (and threatened action against the Applicants).
In any event the Applicants say that, even if the conduct was not deliberate, there can be still no question that the Respondents' "investigation" and consequential failure to disclose their breaches of the Undertaking, were the product of serious neglect or serious incompetence or both.
The second complaint in this context relates to the "False Assertion" (as defined in the Points of Claim) in the letter of 24 April 2019 that no one from Miller & Prince had provided the Password to the defendants.
The Applicants note that Mr Corry's email sent earlier on 24 April 2019 made clear that there had been "bulk" deletion of records from the Dynamics Account (albeit that Mr Corry asserted that those records had been manually re-entered). The Applicants say that this establishes the allegations made at [50] of the Points of Claim, including the allegation concerning the False Assertion (Points of Defence at [50]). The Applicants maintain that, in the circumstances, the Respondents' investigations and the making of the False Assertion were seriously incompetent.
The Applicants also say that, on receipt by the Respondents of the letter of 29 April 2019 (repeating the Applicants' request for an explanation as to why their access to the Dynamics Account had been disrupted), it was incumbent on the Respondents to conduct a further investigation into the matters raised therein (Points of Claim at [57]).
The Applicants say that although the Respondents say that they did undertake a further investigation (Points of Defence at [57]), the extent of that further investigation appears to have been that: the Second Respondent sent an email to the defendants on 30 April 2019, to which he received a response by email from the third and fourth defendants (Mr Singh and Mr Goradia); and that the Respondents had a telephone conversation with Mr Corry (referring to Mr Athanassios' affidavit at [152]-[155] and Mr Gerges' affidavit at [96]-[97]). It is noted that the substance of the Respondents' conversation with Mr Corry has not been disclosed, and that legal professional privilege has been claimed over the emails between the Second Respondent and the defendants.
The Applicants' position is that those steps did not constitute, and provide no evidentiary foundation for the conclusion that there was, a further investigation (let alone one that was competent). The Applicants say that the Respondents' "so-called" further investigation, their failure to identify the breaches of the Undertaking and the repetition of the False Assertion were again seriously incompetent or the product of serious neglect.
It is noted that the Respondents' response to the letter of 29 April 2019 was to send a letter on 30 April 2019 which sought to attribute responsibility for the issues raised by the solicitors for the Applicants to the Applicants themselves, and which repeated the False Assertion (see Points of Claim at [60]). The Applicants say that this establishes the allegations made at [60] of the Points of Claim, including that the Respondents repeated the False Assertion (cf the Points of Defence at [60]).
Insofar as the Applicants criticise the way in which the electronic mailboxes were checked, the Respondents say this is a criticism made with the benefit of hindsight and requiring a standard of perfection. It is submitted that reading the entirety of every email would have been unduly time consuming and burdensome, particularly in circumstances where the Respondents genuinely believed they had not sent the Password (a matter which they say must be accepted given the Applicants' concession that the Password was sent inadvertently).
As to the criticism made of the First Respondent for not scrolling down the highlighted email, the First Respondent said that he understood that that email was concerned with the passwords to the electronic devices and the attached handwritten document that had been sent by the Independent Computer Expert with passwords previously provided by Mr Corry for those devices, and he did not believe the email (ten printed pages plus an attachment) contained the password to Mr Corry's login to the Dynamics Account. As to the criticism of the Second Respondent that he had not "clicked" on the email from the First Respondent at 4:.05pm, the Respondents say this would only have disclosed the First Respondent asking the Independent Computer Expert for passwords to the seized electronic devices; and would not have pointed to any inadvertent disclosure of the Mr Corry's Dynamics Account Password to him.
As to the allegation made by HWLE in the 29 April 2019 letter that the manipulation, destruction or removal of files had occurred using the First Corry Email Account, the Respondents say that the evidence does not establish that (and they point out that the Applicants now accept that Mr Corry had administrator access to the Dynamics Account via the Second Corry Email Account from at least 28 February 2019). It is noted in that regard that the Applicants' case is that Mr Corry gained access via the Second Corry Email Account rather than using the Password to the First Corry Email Account (see the transcript before Kunc J on 16 May 2019).
The Respondents say that they sought instructions in writing from Mr Ghaly, Mr Singh, and Mr Goradia about the allegations in that letter, and that they telephoned Mr Corry and Mr Ghaly (as director and officer, respectively, of Medicina) to seek instructions; and that they were satisfied from those discussions and the enquiries previously made that the matters raised by HWLE had been sufficiently investigated and that no-one from Miller & Prince had sent the Password to the defendants. It is noted that their response (by letter of 30 April 2019 to HWLE) was settled by Counsel, as was their response to the 23 April 2019 letter.
The Respondents say that they gave serious and immediate attention to the allegations raised in the letter of 23 April 2019; and acted appropriately and with urgency in relation thereto. The Respondents say that it is irrational and implausible to suggest that they would have done so if they had become aware of their breach of the Undertaking on the night of 23 April 2019 and decided to conceal it (i.e., that they would have carried out a fake investigation). The Respondents say that the Applicants' submission necessarily implies that the Respondents have deliberately lied in their evidence to the Court and committed perjury. They say that there is no basis for such a serious finding, particularly to the required Briginshaw standard.
The Respondents concede that a more thorough checking of their emails may have identified that the Password had been inadvertently disclosed to Mr Corry on 15 March 2019 (I interpose here to say that this seems unarguable), but they say that the adequacy of those searches cannot be viewed with the benefit of hindsight. They emphasise that they genuinely believed they had not sent the Password to Mr Corry; and so they did not know the form in which it had in fact been sent. It is said that they searched their emails in an efficient and expedient manner, focusing on the head emails rather than entire email chains; that they did so at a busy time and in circumstances where they each had extensive and regular email traffic; and that they arranged for employees to also check their emails. It is said that their approach was reasonable, and that the failure to pick up the password "deep in an email chain" cannot be characterised as seriously incompetent or the product of serious neglect.
As to the letter of 24 April 2019 from Miller & Prince to HWLE, the Respondents emphasise that the denial that any employee of Miller & Prince had breached any order of the Court was their genuine belief at all times up until 18 July 2019 when they were informed of the inadvertent disclosure of the password in the letter of that date from HWLE.
Where evidence is contested or contradicted, the inherent improbability of testimony given may be used as evidence against the credibility of the witness and, in some circumstances, as proof of the contrary conclusion (see J D Heydon, Cross on Evidence (10th ed, 2015, LexisNexis Butterworths) at [17600]). However, while demeanour may be used as part of the process of assessment of the evidence, it will not overcome any "incontrovertible facts". One tool for assessing the improbability of evidence in a civil context is to consider the "inherent commercial probabilities" of the circumstances (Effem Foods Pty Limited v Lake Cumbeline Pty Limited [1999] HCA 15 at [16], per Gleeson CJ, Gaudron, Kirby and Hayne JJ).
In the present context, I do not accept that it is "inherently improbable" or "incredible" that the Respondents did not realise that the Breach Email and the Further Breach Emails contained the Password in a chain of emails when they searched their email accounts. I can quite accept that the investigation was inadequate (and in that sense) incompetent; but I do not accept that the evidence establishes that, contrary to their evidence, the Respondents were aware prior to 18 July 2019 that the Password had in fact been provided to the defendants. Nor am I persuaded that the failure to discover the breach at the time amounted to "serious" incompetence. Again, while I accept that the further investigation carried out after the 29 April 2019 Letter was also inadequate, I do not consider it to amount to serious incompetence.
Insofar as the Respondents allege that the Independent Computer Expert's report indicated that there were multiple users with access to "Microsoft Office 365" (by which I understand the Respondents to be referring to the Microsoft 365 accounts in general - both the business (or email) accounts and the Dynamics Account), the Applicants say that, while the Applicants were aware of the legal_ac@nexgenpharma email account from at least 26 February 2019, they were not aware of the Second Corry Email Account at that time, nor that it was an "alias" of the legal_ac@nexgenpharma account. In any event, they say that those matters do not excuse the Respondents' failure to disclose what they knew from Mr Corry's monitoring and reporting of the Applicant's access to the Dynamics Account.
The Applicants further contend that the Respondents' failure to inform them, when they became aware on 11 April 2019 that Mr Corry was secretly monitoring the Applicants as they reviewed the contents of the Dynamics Platform, considered alone, was at least the product of serious neglect of that obligation, or serious incompetence. They go further to submit that it is open to conclude that the Respondents recognised the significance of the Notification Alerts, and decided to conceal from the Applicants (and the Court) what they revealed about Mr Corry's use of his access to the Dynamics Platform.
The Applicants say that, whatever conversation the Respondents may have had about the Notification Alerts on 24 April 2020, it cannot have been in the terms to which they depose, for at least two reasons. First, because the conversation each of the Respondents describes is predicated on both Respondents having received the first Notification Alert (and they say there is no evidence that the First Respondent received it); and, second, because the terms of the conversation to which each Respondent deposes are at odds with the contemporaneous circumstances.
As to the first of those reasons, the Applicants point out that the copy of the first Notification Alert that the First Respondent deposes he received (Mr Gerges' affidavit of 10 January 2020 at [68]) by email from Mr Corry on 11 April 2019 does not disclose that the First Respondent was a recipient of the email. The Applicants note that, despite the evidence in cross-examination by the First Respondent that the Second Respondent forwarded it to him (T 115.30-39), the First Respondent did not include a statement to that effect in his affidavit (T 116.7); nor did he exhibited a copy of that forwarded Notification Alert to that affidavit (T 115.42). In cross examination, the First Respondent could not specify the time that he had received the forwarded Notification Alert (T 116.13 and T 116.16); and ultimately he said that "potentially, yes" the Second Respondent had forwarded him a copy of the Notification Alert (T 116.29 and T 117.40), and that he did not look at the exhibit to his affidavit before swearing it (T 116.39 and T 116.42) because he was under time pressure to finalise it (T 116.44 and T 117.2). The First Respondent accepted that no subsequent emails from the Second Respondent forwarding further Notification Alerts were included in the exhibit (T 117.37), but his evidence was that the Second Respondent had "potentially" forwarded the further Notification Alerts to him (T 118.45); and then said that he could not recall if all of the Notification Alerts had been forwarded to him, or if he had seen them on the Second Respondent's computer, or in printed form (T 118.48). (See also the evidence at T 120.6; T 131.16-46; and the First Respondent's assertion that he was sure that he had spoken to the Second Respondent in the terms described in [70] of his affidavit (T 120.11).) The Applicants contend that it should be inferred that those documents do not exist; and that the First Respondent was not giving truthful evidence. (I do not draw any such inference.)
The Applicants also say that the Second Respondent's evidence does not assist the First Respondent (referring to the Second Respondent's evidence at T 170.39-171.20; T 171.32), and say that the Second Respondent did not actually have a memory of calling the First Respondent into his office at all (T 171.50) (cf his evidence at T 171.20); and was giving his evidence based only on general practice (T 171.40-50).
The Applicants therefore say it is not clear how the First Respondent came to know of the first Notification Alert; or whether he in fact did know of it. It is submitted that, if the First Respondent did not see the first Notification Alert he could not have had the conversation to which both Respondents depose; and that no reliance can be placed on the Respondents' evidence about 11 April 2019 and how they dealt with the first Notification Alert. It is noted that the later Notification Alerts which are in evidence were also not (on their face) sent to the First Respondent; and that the Second Respondent gave no evidence of forwarding the later Notification Alerts (deposing at [116] of his 10 January affidavit that he took no action in relation to the later Notification Alerts, and saying in cross-examination that he "just filed them" and "had no regard to them" - see at T 172.17-25; T176.22-38). It is submitted that this evidence makes untenable the First Respondent's evidence that he went through the same thought process for each of the later Notification Alerts when he received them, just as he had for the first Notification Alert (T 110.21-29).
As to the second of the reasons put forward for not accepting the Respondents' evidence as to their conversation about the Notification Alertss, it is said that, according to both Respondents, it was the First Respondent who decided and directed that no action needed to be taken in relation to the first Notification Alert, based upon a conclusion that it was nothing more than an expression of frustration by Mr Corry following the confidential information application made by Mr Corry. However, the Applicants point out that, according to the Respondents' evidence, it was the Second Respondent, not the First Respondent, who had carriage of the issue on behalf of the Medicina (T 170.38). They say that it follows that: if the basis for not taking any action in relation to the first Notification Alert was knowledge of, and involvement in, the application by Mr Corry seeking orders protecting information he claimed was confidential, then the Second Respondent was the relevant decision-maker given that he had carriage of that matter for the second defendant; and not the First Respondent who had no involvement in that issue.
Further, it is said that the conversation makes no sense in the order of events in the Respondents' own evidence. It is said that the effect of the Second Respondent's evidence was that he had formed the view upon reading the first Notification Alert that it was generated by Mr Corry's concern about confidential information. The Second Respondent's evidence was that the first time he understood that the Notification Alerts were about Mr Corry's confidentiality concerns was when Mr Corry said "they are accessing this"; and that "this is outside the search parameters they are accessing this" (T 174.24). The Second Respondent accepted, when taken to a copy of the first 11 April 2019 Notification Alert (T 174.39), that it was in the first Notification Alert that Mr Corry had raised those concerns (T 175.29). The Applicants say that it follows that the Second Respondent read the first Notification Alert and formed this conclusion (which was entirely his own thinking -T 174.3) before he had the (claimed) conversation with the First Respondent (and that the Second Respondent confirmed in evidence before saying he could not recall specifically what he had read before talking to the First Respondent - see at T 175.35-40; T 176.3-15).
Thus, the Applicants maintain that the Second Respondent's evidence in his 10 January affidavit (at [115]) that he had a conversation with the First Respondent (in which he had asked the First Respondent what Mr Corry "was on about", and said that he did not understand "what this is") is inconsistent with the evidence that he knew at the time he received the 11 April 2019 Notification Alert that what Mr Corry "was on about" was his confidentiality concerns (see at T 172.29-174.16). It is said that the Second Respondent knew that at the time because he had been dealing with those concerns because the message from Mr Corry that accompanied the Notification Alert expressed concern that the Applicants were accessing material beyond the "search parameters" (i.e., into areas that were confidential); and in the circumstances, it would have been nonsensical for the Second Respondent to have asked the First Respondent what Mr Corry "was on about", or to say that he did not understand the Notification Alert, and for the Second Respondent to have told him that it was "not important" and not to worry about it without any discussion.
Further it is noted that part of the Second Respondent's evidence included that the First Respondent only saw the first Notification Alert when called into the Second Respondent's office to look at the email on the screen. It is said that this makes untenable the First Respondent's evidence that, before his conversation with the Second Respondent, he had "looked at [the Notification Alert], thought about it, considered it, put it in the context of the confidential information argument and dismissed it as something that needed to be attended to" (T 114.43-46); and that the First and Second Respondents' accounts cannot stand together.
The Applicants submit that the result of these inconsistencies and contradictions in the Respondents' evidence is that, whatever in fact occurred, the Respondents have not told the truth about what occurred in relation to the Notification Alerts; and that this evidences a consciousness of guilt on the part of the Respondents.
The Applicants maintain that the above evidence establishes at least three matters: first, that the Second Respondent received the Notification Alerts; second, that the Second Respondent knew that this indicated that Mr Corry was impermissibly monitoring the Applicants' review of the Dynamics Platform; and, third, that the Second Respondent decided not to tell the Applicants despite knowing that for Mr Corry to do so (and to continue to do so) was inappropriate.
It is submitted that this is sufficient for a finding of serious misconduct on the part of the Second Respondent; and that it is appropriate that the same finding be made against the First Respondent. The Applicants (although inviting me to disbelieve the Respondents' account as to the First Respondent's knowledge of the first Notification Alert) say that both Respondents insist that the First Respondent came to know of at least the first Notification Alert. It is submitted that, on the assumption that he did, the First Respondent obviously appreciated that it showed that Mr Corry had "somehow set up an alert to monitor the plaintiffs' access to [the] material [on the Dynamics Platform]" but was unaware how he had been "able to set up that alert within the Microsoft Dynamics 365 platform" (see [69] and [71] of his 10 January affidavit). Similarly, it is said that the First Respondent appreciated that Mr Corry was using his access to the Dynamics Platform to monitor what the Applicants or their representatives were looking at in the platform (T 176.40-48). Thus, it is said by the Applicants that the First Respondent is in the same position as the Second Respondent and has engaged in the same misconduct.
The Applicants say that the justifications proffered by the Respondents for their lack of concern that Mr Corry was using his access to the Dynamics Platform in this way (namely, that whatever the Applicants or their representatives found on the platform that was useful for their case would have be disclosed to the Respondents in any event in the affidavits that the Applicants would have had to file, and that it was not necessary to inform the Applicants or to direct Mr Corry to cease so using his access as his conduct was not in breach of any orders) (T 185.46-186.14) should be rejected.
The position of the Applicants is that it was inappropriate for Mr Corry to be monitoring the Applicants' review of the Dynamics Platform (see the evidence of the Second Respondent in this regard at T 177.13-45; T 178.27; T 178.43). It is said that although the Respondents did not accept that this provided any forensic advantage to the defendants and did not concede that it was inappropriate (T 179.10-33; T 179.32-33; cf T 179.46) (and see also at T 182.35-36; T 188.27-29; T 183.39; T 184.2; T 184.12; T 184.35; T 110.40-111.10), ultimately they did concede that neither would feel comfortable about such monitoring (see T 184.46; T 185.4-5; T 185.31; T 112.16; T 113.24). Neither, however, accepted any need or obligation to inform the Applicants what was happening (see, for example, T 185.46-186.2; T 186.8).
The Applicants maintain that the failure of the Respondents to inform them that their review of the Dynamics Platform was being monitored amounted to serious misconduct. The Applicants say that the Respondents' made a deliberate decision not to inform the Applicants that they were being inappropriately monitored by Mr Corry, and that this deprived the Applicants of the opportunity to cease their review of the Dynamics Platform (and the incurring of the costs of that review), and to take steps to ensure the confidential review with the protection of legal professional privilege to which they were entitled, could take place. The Applicants say that, even if it not be concluded that there was a deliberate decision to conceal Mr Corry's conduct from the Applicants (i.e., if for example, that the Respondents simply did not appreciate the need to inform the Applicants and for that reason did not do so), the Respondents' conduct amounts to serious neglect of their obligations and serious incompetence on their part.
Further, it is submitted that the refusal of both Respondents to acknowledge the forensic advantage the Notification Alerts gave them is damaging to their credit. It is submitted that the fact that they did (and do) appreciate that forensic advantage is borne out by: the First Respondent's reaction to the Notification Alert the Respondents received on 24 April 2019 and the Second Respondent's insistence in his evidence that the Respondents had not used the Notification Alerts for the preparation of their clients' case or pleadings (T 186.25-27) (the denial of exploitation of a forensic advantage amounting, to an implicit acceptance that there is such an advantage).
The Applicants also take issue with the denial in cross-examination by the First Respondent that the 24 April Notification Alert email referred to the "Bova Compounding Alert Policy" (T 122.19; T 126.12); and that the First Respondent knew that Mr Corry had used that alert to make himself aware of the access to the Dynamics Platform by the Applicants' solicitors (T 122.45). They maintain that this is not credible, having regard to the following: that the subject line of the email was "Fwd: Notification for the alert 'Bova Compounding Alert Policy'"; that the email from Mr Corry stated "below is a notification"; and that the previous Notification Alerts sent by Mr Corry were all described as notifications. Reference is made to the First Respondent's evidence at T 127.38; T 128.22 and T 128.39 in this regard. Similarly, it is noted that the Second Respondent did not recall whether, at the time he read the email on or about 24 April 2019, it had occurred to him that the First Respondent had seen a significant forensic advantage in knowing about the Applicants' access to the Dynamics Platform (T 187.21) but refused to accept that the Notification Alert provided any kind of forensic advantage (T 188.20).
The Applicants say that there can be no doubt about the forensic advantage the Notification Alerts offered the Respondents and their clients. They say that the Respondents' refusal to accept the existence of that forensic advantage, particularly in light of the terms of the First Respondent's reaction to the 24 April Notification Alert email, displays a consciousness of that advantage and the need to have disclosed to the Applicants that they were being watched.
Third, that even if the Applicants' solicitors did not appreciate in February 2019 (when Mr Corry started using his new email address), or upon the receipt of Mr Corry's 26 March 2019 affidavit, that the new email account granted Mr Corry access to the Dynamics Account, or that he had access in some other way, it is said that this was a matter which could have been (and later was) able to be readily ascertained (as Mr Wallman's own investigations revealed when he himself interrogated the Dynamics Account). It is submitted that the Respondents, "acting for opposing parties being sued in hard fought litigation", cannot have engaged in serious misconduct and the like by not telling the opposing party what that party ought to have known or could have readily ascertained. It is said that this must particularly be so where the Applicants had engaged a specialist expert in the Independent Computer Expert who was interrogating the Dynamics Account and could have identified easily all users, including the status of the Second Corry Email Account, at any time.
The Respondents say that the Applicants' solicitors, the Respondents, the Independent Solicitor, and the Independent Computer Expert all learned of the existence of the Second Corry Email Account at about the same time (from as early as 25 February 2019), and that it raised no concerns with any of them. It is said to be common ground (though I note that the Applicants dispute the time at which they became aware of this) that the legal_ac@nexgenpharma email is an alias of the Second Corry Email Account.
Against that background, the Respondents say that the allegation that the Respondents engaged in serious misconduct by not informing the Respondents that Mr Corry had set up, and was using, the Second Corry Email Account should be rejected. The Respondents say that Mr Corry was not prohibited from setting up a new email account, that everybody knew about it, and that "nobody seemed to care". Consequently, it is said that there is no substance to the allegation, and no consequence flows from it in any event.
The Respondents say that the notice of motion that was then filed by the Applicants on 10 May 2019 demonstrates that the Applicants were well aware that the Dynamics Account could be accessed by users other than Mr Corry and was in regular use (pointing to the orders that were sought in that notice of motion). The Respondents say that the relief there sought by the Applicants demonstrates the Applicants' awareness that people other than Mr Corry were regularly accessing the Dynamics Account in the conduct of the Medicina business, and that different users must have different logins (or "keys"). It is said that the request for the identity of the person who accessed or manipulated documents (proposed order 1(b)) implicitly acknowledges that different users have different logins (and that if that were not the case, it would be impossible to gather such information). Further, the Respondents say that the relief that was sought confirmed that neither Mr Corry nor any other defendant was ever restrained from accessing or using the Dynamics Account (noting that the proposed order 6 expressly provided for their continued ability to access and use the Dynamics Account, with a new restriction sought to limit the deletion, movement, transfer or editing of documents). It is said that the relief sought confirms that the orders never operated as some sort of injunction.
The Respondents also point to the letter of 15 May 2019 from Mr Corry's solicitor to HWLE (see chronology above) which conveyed Mr Corry's position in relation to a number of matters, including relevantly that he had used the Dynamics Account on a near daily basis during the period from 19 February 2019 to 16 May 2019 "in the ordinary course of his role as a director and pharmacist" of Medicina; that Mr Corry did not know what documents have been deleted from the Dynamics Account, if any, and could not answer this request (and that in the normal course of Mr Corry's role he might be required to edit documents to ensure that medication is prepared in accordance with the written instructions of veterinarians and doctors); that he was not aware of the cause of the access being disabled (and not admitting that it had been disabled) "to the Dynamics Account, Sharepoint or in any way said to have occurred"; and that he did not know why documents were not accessible (not admitting that there were any that were no longer accessible) or what emails had been deleted (if any). The Respondents point out that this letter also advised that Mr Corry created the Second Corry Email Account on or about 27 February 2019 so that Mr Corry could perform his role as a pharmacist and director of Medicina; and also to set up an email address to communicate with his lawyers.
The Respondents further point to what was said at the hearing before Kunc J on 16 May 2019 (to which I have referred above), including that their Counsel informed his Honour that the system was being used to run Medicina's business and they had not encountered any difficulties, and Mr Corry's Counsel informed his Honour that his understanding was that the Dynamics Account "is being used". It is noted that both Counsel (for Medicina and for Mr Corry) told the Court they had taken instructions. The Respondents say that the independent enquiries and the instructions provided to Counsel more readily allow the conclusion that the enquiries made by the Respondents were appropriate and that they were unaware of inappropriate conduct on the part of Mr Corry or Medicina.
Finally, the Respondents also point to the steps taken following the making of the 16 May 2019 orders (as referred to earlier), and to the affidavit that Mr Corry affirmed on 24 May 2019, with the assistance of his solicitor (and without the assistance or involvement of the Respondents) in which Mr Corry deposes to various matters including that: he set up the Second Corry Email Account on 28 February 2019; the Second Corry Email Account could be accessed by using either of two email addresses to log-in (the alexcorry@nexgenpharma address or the legal_ac@nexgenpharma address); the Second Corry Email Account was set up so he could secure legal representation; and, since 4 March 2019, he had retained Mr McKinnon and Mr Sykes of counsel and he used the account to communicate with them; the Second Corry Email Account was used to continue operating in his role as a director and pharmacist of Medicina; the Second Corry Email Account enabled Mr Corry to access the Dynamics Account and had "Global Administrator" access allowing access to all of the functions within the Dynamics Account necessary for the day-to-day management of the business; and he had not used the Second Corry Email Account to delete, remove or change the content or location of documents contained in the Dynamics Account or to restrict the Applicants' access to the Dynamics Account.
Turning then to the allegation that the Respondents were obliged, as officers of the Court, on and from 11 April 2019 to disclose to the Applicants and the Court that Mr Corry had access to the Dynamics Account and was monitoring the Applicants' access to the Dynamics Account (Points of Claim 36-(e) at [105]), the Respondents note that this case depends entirely on the email Notification Alerts sent by Mr Corry.
The Respondents say that there is no issue that Mr Corry received various Notification Alerts in the form of emails sent to the Second Corry Email Account alerting him to the access of files by someone using his login associated with the First Corry Email Account (see Ex B, pp 141-254). They point out that on 11 April 2019, Mr Corry first emailed a Notification Alert to his solicitor (Mr McKinnon) and the Second Respondent. The Respondents note that the Applicants make no claim against Mr McKinnon (who did not disclose that matter to the Applicants), and do not allege that he had some obligation to disclose the fact of the Notification Alerts or that Mr Corry had some access to the Dynamics Account. The Respondents again rely on this as indicating the reasonableness of the Respondents' similar approach at the time.
In relation to the 11 April 2019 email from Mr Corry, the Respondents point, first, to Mr Corry's explanation that the Notification Alert was not in relation to the access of a file on the Dynamics Account (as alleged by the Applicants), but instead the access was of "a file listed on SharePoint which is a document server". It is noted that Mr Corry's complaint in the email was that the Dynamics Account and SharePoint were different things and the orders made by the Court related only to the Dynamics Account. The Respondents say that the hyperlink to the file identified in the email included a reference to "sharepoint.com/Shared Documents", which it is said indicated that the relevant file was in a Shared Documents folder on SharePoint. The First Respondent did not know whether SharePoint was part of the Dynamics Platform. It is noted that the Applicants have not adduced any evidence to explain the difference between those platforms or systems. Hence, it is said that it cannot be concluded from the Notification Alert that the Respondents had any knowledge or understanding that Mr Corry was monitoring any access by the Applicants of the Dynamics Account.
Second, the Respondents note that the Notification Alertcontains no information as to when it was set up or by whom. It is said that, although the Notification Alert was emailed to the Second Corry Email Account, on its face the Notification Alert does not disclose that Mr Corry himself set up any alert. Also, it is said that the Notification Alert simply identifies that the file was accessed, without more.
It is said that the receipt of those emails did not inform the Respondents that Mr Corry had established a new means of access to the Dynamics Account, or how any alerts generating those emails from the system had been established. It is said that, even if the Respondents had examined the hyperlinks associated with each of the Notification Alerts (and the evidence is they did not), they reveal very little (and the Applicants did not put into evidence the actual files). It is said that the descriptions for many of the files indicate that the documents are unremarkable, including profile pictures of Mr Corry or his personal files or company manuals.
The Respondents emphasise that they paid no attention to the Notification Alert emails sent to them. The First Respondent explained (at [68]-[73] of his affidavit) that he did not pay particular attention to the emails, particularly in circumstances where Miller & Prince did not act for Mr Corry, and Medicina had not provided any instructions to take any action in relation to confidential information or any concerns Mr Corry may have had about the Plaintiffs' access. The First Respondent's evidence is that he did not know how the alert had been set up or what that involved and took no action in relation to those emails. The Second Respondent also explained (at [114]-[119] of his affidavit) that he did not pay much attention to the emails. The Second Respondent's evidence is that he did not know that Mr Corry had generated the emails or what form of access to the Dynamics Account was required to generate them; that when the first of the emails arrived, he queried it with the First Respondent who told him it was not important and not to worry about it; and that he then acted accordingly.
The Respondents say that the email Notification Alerts were of no significance; and that even if the form of the Notification Alerts allowed the Respondents to identify that a particular file that had been accessed, that was useless information. Reference is made to the following exchanges in the First Respondent's cross-examination (at T 111.44-112.11):
Q. Did you not think it was troubling that one of the defendants was not just using Dynamics for the purpose of the ongoing business of Medicina, but was actually using it to spy on the plaintiffs gathering evidence for their case?
A. Well, using the word "spy" is a bit strong, but to address that, the plaintiffs, as in any litigation, are the ones that put their evidence first. To the extent that the defendants were concerned about what the plaintiffs were looking at, the defendants being our clients, they weren't concerned for two reasons.
One, any document that's contained in the online platform is to the knowledge of the defendants. They know what's in their business.
The plaintiffs would have prepared evidence and put to us in evidence form documents with which they would have seen to be important, which we would have addressed at that point in time. To, to, to know about it in advance is not an advantage. It's not hindering the plaintiffs in any way, it's not in breach of any of the Court's orders, it's not a matter that I've had to do anything about or disclose to anybody. The time, the time for service of evidence had not yet come. If the plaintiffs were to deem these particular documents of importance, they would have put them in evidence.
and (at T 112.11-34):
Q. What I'm suggesting to you is that it would be wholly inappropriate for the other side's solicitor or the other side's client to stand over your shoulder watching you go through documents on the screen and seeing which ones you regard as you significant for the case, and which one you don't. Do you not agree with that?
A. Inappropriate, it would be uncomfortable. But that's, that's not what's happened here, this is, this is electronic. No one's standing over your shoulder. The, the presumptions that our client had, which I also shared is that every document contained on the platform was going to be viewed by the plaintiff, to leave no stone unturned.
Q. Sure.
A. And so if every document is going to be looked at, what benefit do I get from knowing that you looked at a particular document versus the other? With this notification, this notification was one notification. Presumably, he would have received thousands of them, and they were all - every time you guys clicked on a, on a bone there would have been a notification, I, I can't tell you that, but what I can say is I didn't, I didn't regard it as an advantage or spying or, or any of that, because like I said, the time for evidence was coming, and you guys would formulate your evidence in a proper form, handed it over and we can take a look and then take instructions on the documents that were contained in evidence and whether or not we need to address it in a particular fashion.
The Respondents say that the "spying" (or peering over one's shoulder) analogy is inapt when what occurred was simply receipt of the Notification Alert emails which recorded only that certain documents had been accessed. It is said that this "revealed nothing of the excitement or boredom of the person who accessed the document or whether they took a note or remarked that the file was irrelevant or unhelpful"; did not disclose the seniority of the person who had accessed the filed; and was "entirely useless" information and was treated by the Respondents as such.
The Respondents argue that in the usual course of discovery (before it was conducted electronically) a solicitor would physically inspect documents at the offices of the solicitor for the other party and identify copies of documents that were to be provided. It is said that this would alert the other side to the documents that were of interest but that none of that involved any inappropriate "spying" or "looking over the shoulder" of the inspecting solicitor; and that it presented no forensic advantage or disadvantage because it was assumed (as it was by the Respondents) that all of the discovery would be inspected in any event. (Senior Counsel for the Applicants contest that this was the "usual course", by reference to his own previous practice in this regard. Suffice it to note that it seems to me that anecdotal accounts from both sides of the bar table on how solicitors did, or did not, in the past conduct discovery is not particularly helpful, and this is not a matter of which judicial notice can properly be taken, not least because of the potential for discovery practices to have differed widely amongst practitioners.)
Insofar as the Applicants invite a finding that the Respondents recognised the significance of the Notification Alerts and decided to conceal from the Applicants (and the Court) what they revealed about Mr Corry's use of his access to the Dynamics Account, the Respondents say the following.
First, as to the fact that the copy of the first Notification Alert email in evidence shows that it was sent to the Second Respondent and not to the First Respondent, the Respondents point to their evidence that they worked very closely in adjoining offices, regularly spoke, and also viewed emails on each other's computer screens. It is said that there are a number of ways in which the Notification Alert emails could have been viewed by the First Respondent, and that it is not material that he did not have a clear recollection of precisely how or when he read the first 11 April 2019 Notification Alert, or that he did not include any other internally forwarded emails or printed copies in his exhibit. It is emphasised (again, anecdotally I assume) that most solicitors would send and receive thousands of emails; and that what is significant is that the First Respondent did not depart from his clear and consistent evidence that he had seen the Notification Alert and had the conversation with the Second Respondent to which he deposes in his affidavit (of which conversation the Second Respondent gave a similar and consistent account). As to the Applicants' submissions that there was no tender of an email Notification alertsent directly to the First Respondent, the Respondents say this is incorrect (pointing to Ex B, p 209 and p 279, which comprise two different Notification Alert emails sent directly to the First Respondent on 24 April 2019). It is said that those emails also support the First Respondent's account that he believed he received the emails.
Second, the Respondents say that the differences between their evidence in this regard are inconsequential and minimal and do not support the submission that they have lied to the Court, so evidencing a consciousness of guilt. It is said that none of the matters relied upon by the Applicants in this context supports the rejection of the Respondents' evidence about the Notification Alerts, or the findings contended for by the Applicants. Pausing here, I accept the submissions made by the Respondents that no finding of a consciousness of guilt should here be made.
In relation to whether there was any obligation on the part of the Respondents to disclose them, the Respondents say that: the Notification Alerts revealed nothing of interest or utility; the Notification Alerts did not establish that Mr Corry had wrongly accessed the Dynamics Account; and that the Notification Alerts were concerned with SharePoint rather than the Dynamics Account in any event. Thus, they say there was no call for the Respondents to report the Notification Alert emails to the Applicants or to the Court. Further, the Respondents say that the email Notification Alerts sent by Mr Corry were privileged communications, and it would be neither appropriate nor permissible for the Respondents to disclose such documents to the opposing party or the Court.
Accordingly, it is said that there is no basis for a finding that the Respondents engaged in any serious misconduct, neglect or incompetence by not making any such disclosures.
As to the submissions made by the Respondents on their relevant duties and obligations as legal practitioners (see the Respondents' closing submissions at [15], [43], [124], [153]-[155], [188]-[189], [202]), the Applicants say that those submissions invite an erroneous approach to the exercise of the s 99 of the Civil Procedure Act jurisdiction; and, in any event, the Applicants maintain that the Respondents are in breach of specific obligations owed both to the Court and to the Applicants.
In that regard, the Applicants contend that the wasted costs jurisdiction is concerned with empowering the Court to make costs orders where there has been a failure by a solicitor to fulfil his or her duty to the Court; and, in turn, to the administration of justice (referring to Kelly at [61], per McColl JA). It is noted that exercise of the power in s 99 of the Civil Procedure Act requires explicit regard to the provisions of ss 56-60 of the Civil Procedure Act; and that s 56(5) of the Civil Procedure Act specifically requires the Court to take into account any failure to comply with the duty of a legal representative to assist the Court to further the overriding purpose in exercising a discretion with respect to costs (see Kelly at [57]-[59]) (I interpose here to note that while the Applicants say that this is a requirement of the provision, the provision itself expresses it as it being a matter the Court "may" take into account, which is also how it was expressed in Kelly); and that the relevant conduct referred to in s 99 of the Civil Procedure Act may include, but is not confined to, conduct constituting a breach of a particular rule or duty imposed by a code of professional conduct.
Reference is again made to the discussion of the operation of s 99 of the Civil Procedure Act in Re Felicity at [24], per Basten JA. It is submitted that that approach to the operation of s 99 of the Civil Procedure Act is consistent with the comments of the High Court in Expense Reduction Analysts Group Pty Ltd v Armstrong Strategic Management and Marketing Pty Limited (2013) 250 CLR 303; [2013] HCA 46 (Expense Reduction) that the professional obligations owed by solicitors and their proper conduct are not, or should not be, confined to relevant conduct rules. The Applicants note that at [65]-[66], the High Court in Expense Reduction said:
65. The position of solicitors who are in receipt of privileged documents has another dimension. Rule 31 of the Australian Solicitors' Conduct Rules, which were adopted by the Law Council of Australia, deals with the duty of a solicitor to return material, which is known or reasonably suspected to be confidential, where a solicitor is aware that its disclosure was inadvertent. It involves notifying the other solicitor of the disclosures and returning that material. The rule has been adopted in Queensland and South Australia and the Law Society of New South Wales presently proposes to adopt it.
66. Such a rule should not be necessary. In the not too distant past it was understood that acting in this way obviates unnecessary and costly interlocutory applications. It permits a prompt return to the status quo and thereby avoids complications which may arise in the making of orders for the rectification of the mistake and the return of documents.
[Citations omitted]
In the present proceeding, the Applicants' position is that: the Respondents' breach(es) of the Undertaking was (and were) not only a breach of an order of the Court and the duty imposed on them by r 6 of the Legal Profession Uniform Law Australian Solicitors' Conduct Rules 2015 (NSW) (Solicitors' Conduct Rules) to honour and ensure the effective performance of that Undertaking, but also of their duty to the Court in the administration of justice.
The Applicants say that the Respondents had a duty to the Court and in promoting the cause of justice to disclose: that they had breached the Undertaking; that Mr Corry was accessing the Dynamics Platform using the Second Corry Email Account contrary to the regime that had been put in place by the 21 February 2019 Orders and 14 March 2019 Orders; that Mr Corry was using his access to monitor the Applicants' review of the Dynamics Platform (in breach of the regime that had been put in place by the 21 February 2019 Orders and 14 March 2019 Orders; and in a way that provided them with an unfair advantage over the Applicants, who were unaware that their review of the Dynamics Platform for the purposes of the proceedings was being monitored); and that documents had been deleted from the Dynamics Platform.
It is submitted that the Respondents' ability, through Mr Corry's access to the Dynamics Platform, to monitor the Applicants' review was akin to the mistaken discovery of documents that occurred in Expense Reduction, and that the Respondents should have notified the Applicants, or at least prohibited the ability to monitor the Applicants' review so as to restore the status quo.
The Applicants say that the Respondents were under specific obligations in any event.
As to their discovery that Mr Corry was, despite the 21 February 2019 Orders and 14 March 2019 Orders, accessing the Dynamics Platform, the Applicants refer to r 19.11 of the Solicitors' Conduct Rules which imposes a positive duty on a solicitor to inform the court of any misapprehension by the court as to the effect of an order which the court is making, as soon as the solicitor becomes aware of the misapprehension.
The Applicants submit that, when making the 21 February 2019 Orders and 14 March 2019 Orders, the Court acted under the misapprehension that the Applicants and their solicitors were to have exclusive access to the Dynamics Platform for the purposes of the proceedings (or, in other words, that Mr Corry and the defendants would not have access to the platform for the duration of the proceedings). It is said that that misapprehension is apparent, inter alia, from the references to access during those hearings. It is contended that that was also the understanding of the Respondents, as is apparent from the 27 February 2019 email and the communications leading up to the 14 March 2019 Orders.
The Applicants say that once the Respondents became aware that, contrary to the intention of the orders, Mr Corry had obtained access to the Dynamics Platform though a separate login (the existence of which was not disclosed to the Court or the Applicants), the Respondents had an obligation under r 19.11 of the Solicitors' Conduct Rules to inform the Court that its orders were based on a misapprehension. It is said that compliance with r 19.11 of the Solicitors' Conduct Rules would have allowed the Court to make different orders that expressly prevented Mr Corry accessing the Dynamics Platform.
As to the Respondents' discovery that Mr Corry was using his access to the Dynamics Platform to monitor the Applicants' review of it, the Applicants say that even if the 21 February 2019 Orders and 14 March 2019 Orders did not preclude Mr Corry from retaining access to the Dynamics Platform, they unquestionably did not authorise him to use his (secret) login covertly to monitor the work product of the Applicants and their solicitors, or "harvest" electronic data that was inadvertently being disclosed by them, let alone forward that inadvertently disclosed material to the Respondents and to his solicitors. Nor, they say, did the orders authorise the Respondents to sit by and do nothing while Mr Corry engaged in that conduct.
The Applicants refer in this regard to r 31 of the Solicitors' Conduct Rules which imposes a positive and mandatory duty on a solicitor to notify an opponent of an inadvertent disclosure by the opponent of material known or reasonably suspected to be confidential. The duty is engaged where: "material" is disclosed to the solicitor; the material is disclosed by another solicitor or some other person; the solicitor "know[s] or reasonably suspect[s]" that the material is "confidential"; and the solicitor is aware that the disclosure was inadvertent.
The Applicants point out that the High Court has said that r 31 of the Solicitors' Conduct Rules "should not be necessary" (referring to what was said by in Expense Reduction per French CJ, Kiefel J (as her Honour then was), Bell, Gageler and Keane JJ agreeing, at [66]-[67]). Reference was there made (at [67]) to the importance of an approach which promotes conduct which will assist the court to facilitate the overriding purposes of the Civil Procedure Act; and to "professional, ethical obligations of legal practitioners supporting the objectives of the proper administration of justice".
In the present case, the Applicants say that, irrespective of whether Mr Corry was entitled to retain a separate login (and password) to the Dynamics Platform, the Respondents' duty under r 31 of the Solicitors' Conduct Rules was engaged for the following reasons.
First, that the information compiled by the Bova Compounding Alert Policy, as well as any documents recording that information, is "material" within the meaning of r 31 of the Solicitors' Conduct Rules. The Alert was an automatically generated alert which notified Mr Corry as to which documents in the Dynamics Platform had been reviewed by the Applicants' solicitors. The Applicants say that the information in the Notification Alerts was a record of, or a compilation of, electronic data retrieved from the database. In substance, they say that the Notification Alerts operated just as if Mr Corry had surreptitiously watched the Applicants and their solicitors carry out their review, or had eavesdropped on an private conversation between the Applicants and their solicitors disclosing which documents they had reviewed, or had obtained without authorisation a file note taken by the Applicants' solicitors as to which documents they had reviewed. The Applicants submit that the term "material" is broad enough to include the electronic data in the database recording which documents had been reviewed, the contents of the Notification Alerts themselves, and any subsequent records of the Notification Alerts including any emails from Mr Corry forwarding the Notification Alerts to the Respondents.
Second, that the material was disclosed to the Respondents directly by Mr Corry and indirectly by the Applicants and their solicitors. It is said that the document review by the Applicants and their solicitors left behind an electronic record which (inadvertently) disclosed to Mr Corry and ultimately the Respondents which particular documents they had looked at (and, perhaps more importantly, disclosed by inference which documents had not been looked at).
Third, that the Respondents knew, or would have reasonably suspected, that information as to which documents had been reviewed by the Applicants and their solicitors was confidential to the Applicants (in the sense that it was secret to, or private to, the Applicants). It is said that the information contained in the Notification Alerts recorded the work product of the Applicants and their solicitors. Neither the Applicants, nor their solicitors, were aware that Mr Corry had access to the Dynamics Platform, or had a created an alert that monitored their or their solicitors' work. The Applicants say that the Respondents also knew, or must have reasonably suspected, that Mr Corry had set up the Alert and obtained information from the Alert without the knowledge of the Applicants or their solicitors. In all of these circumstances, it is submitted that it should be inferred that the Respondents knew, or at the very least reasonably suspected, that the information obtained by the Alert in the Notifications was confidential to the Applicants.
Fourth, that the Respondents were clearly aware that the disclosure of information via the Notification Alerts was inadvertent. It is said that the Respondents were aware, at all material times, that Mr Corry had set up the Notification Alert (which the Respondents dispute) without the knowledge of the Applicants or their solicitors (which cannot surely be disputed); and that it necessarily follows that the disclosure by the Applicants and their solicitors of which documents they had reviewed (through leaving an electronic record which was harvested without their knowledge by Mr Corry) was inadvertent, not deliberate. The Applicants say that it is not to the point that communications between Mr Corry and his solicitor and the Respondent are privileged in the ordinary course. The Applicants dispute that communications from Mr Corry to the Respondents and/or his solicitor which forwarded the Notification Alerts were privileged, but they say that, even if those communications were prima facie privileged, r 31 of the Solicitors' Conduct Rules abrogates any such privilege in material which is known or reasonably suspected to be confidential to another person. Thus, it is said that in circumstances where the Respondents knew or reasonably believed the material to be confidential, and were aware that the disclosure was inadvertent, the question of privilege is irrelevant.
In these circumstances, the Applicants say that r 31 imposed the following mandatory obligations on the Respondents: not to use the material (r 31.1); to return, destroy or delete the material (as appropriate) immediately upon becoming aware that disclosure was inadvertent (r 31.1.1); to notify the other solicitor(s) of the disclosure and the steps taken to prevent inappropriate misuse of the material (r 31.1.2); and (if they had read part or all of the confidential material before becoming aware of its confidential status), to notify the other solicitor(s) immediately, and not read any more of the material (r 31.2); and to refuse to follow a client's instruction to read confidential material received in error (r 31.3).
The Applicants say that these obligations were obvious. They say that the Respondents knew that Mr Corry (a director of their client) had been monitoring the work of the Applicants and their solicitors in a way that was deliberate, covert, and without permission. It is said that the Respondents knew, or reasonably suspected, that information to be confidential to the Applicants. Therefore, it is said that the Respondents' professional and ethical obligations to support the objectives of the proper administration of justice required them: to disclose to the Applicants what Mr Corry had done; to destroy the material; not to read the material; and to advise what steps had been taken to prevent inappropriate misuse of the material. The complaint by the Applicants is that none of those steps was taken.
Finally, it is said that, contrary to the Respondents' closing submissions, the Respondents' duty to do or not to do the above things did not require the disclosure of any privileged communications with their clients and/or Mr Corry or his legal representatives (and they point out that neither Respondent offered this as a reason for not informing the Applicants of the fact that the Applicants were being monitored by Mr Corry). It is said that to so inform the Applicants did not require the disclosure of any privileged communication. The Applicants say that the Notification Alerts themselves were not privileged in Mr Corry's hands, and that his provision of them by email to Mr McKinnon and the Respondents did not cloak them, or the fact of the alert policy, in legal professional privilege. Further, it is said that informing the Applicants of the Notification Alerts did not require the Respondents to provide the Applicants with the emails they had received from Mr Corry if they were properly characterised as privileged communications.
It is abundantly clear (from the "great news" email in April 2019) that the Second Respondent considered that there was a forensic advantage to the defendants in Mr Corry's ability to review the Applicants' access to the Dynamics Account. Whatever the Respondents may reasonably have been able to assume by reference to the continuation of the defendants' business (in terms of the Applicants' understanding of the continuation by the defendants of access to the Dynamics Account), they cannot reasonably have assumed that the Applicants would have been aware of the Notification Alerts or what they represented - and the tenor of the "great news" email makes this clear.
In that regard, I do not consider that it matters as to what the particular Notification Alerts actually alerted the Respondents of; nor what use the Respondents made of them (in fact it appears that no use was made by the Respondents of those alerts). The relevant fact is, however, that the Respondents knew from 11 April 2019 that Mr Corry (whether he had set it up himself or not) was able to review the Applicants' access to the Dynamics Account; and knew by 24 April 2019 that this might be turned to the defendants' advantage.
It is relevant here to note the following parts of the Solicitors' Conduct Rules, to which reference was made in the course of submissions:
6 Undertakings
6.1 A solicitor who has given an undertaking in the course of legal practice must honour that undertaking and ensure the timely and effective performance of the undertaking, unless released by the recipient or by a court of competent jurisdiction.
6.2 A solicitor must not seek from another solicitor, or that solicitor's employee, associate, or agent, undertakings in respect of a matter, that would require the co-operation of a third party who is not party to the undertaking.
…
19 Frankness in court
19.1 A solicitor must not deceive or knowingly or recklessly mislead the court.
19.2 A solicitor must take all necessary steps to correct any misleading statement made by the solicitor to a court as soon as possible after the solicitor becomes aware that the statement was misleading.
19.3 A solicitor will not have made a misleading statement to a court simply by failing to correct an error in a statement made to the court by the opponent or any other person.
…
19.11 A solicitor must inform the court of any misapprehension by the court as to the effect of an order which the court is making, as soon as the solicitor becomes aware of the misapprehension.
…
31 Inadvertent disclosure
31.1 Unless otherwise permitted or compelled by law, a solicitor to whom material known or reasonably suspected to be confidential is disclosed by another solicitor, or by some other person and who is aware that the disclosure was inadvertent must not use the material and must:
31.1.1 return, destroy or delete the material (as appropriate) immediately upon becoming aware that disclosure was inadvertent, and
31.1.2 notify the other solicitor or the other person of the disclosure and the steps taken to prevent inappropriate misuse of the material.
31.2 A solicitor who reads part or all of the confidential material before becoming aware of its confidential status must:
31.2.1 notify the opposing solicitor or the other person immediately, and
31.2.2 not read any more of the material.
31.3 If a solicitor is instructed by a client to read confidential material received in error, the solicitor must refuse to do so.
Whether or not the analogy with Expense Reduction is wholly apt, it does point to the difficulty I have with the Respondents' conduct following their discovery of the Notification Alerts and the use that might be made of them.
The Respondents, through the Notification Alerts, were privy (whether or not they chose to use the information or to take up the forensic opportunity this presented) to what the Applicants' solicitors were reviewing on the Dynamics Account. They knew, or must have realised, that the Applicants' solicitors did not know about this (or otherwise the "great news" email would make no sense). The suggestion that anything the Applicants reviewed would be made known in due course does not answer the obvious risk that if Mr Corry realised that attention was being focussed on particular documents (and where he had access to the Dynamics Account), he might take steps to alter or delete ones of concern to him.
Whether or not analysed in terms of this being access to the Applicants' confidential work product (which the Applicants contend it was, thus bringing the matter more squarely within Expense Reduction), I consider it was not consistent with the Respondents' ethical obligations to do nothing (and to seek to keep up their sleeves, so to speak, the possibility of playing this as some kind of trump card in due course).
Insofar as the Respondents say that they could not have disclosed the Notification Alerts without breaching duties to their clients (or without disclosing privileged information of Mr Corry, who was not their client but was in a similar interest to their clients), that is not to my mind a satisfactory response.
If indeed the Respondents had considered that they were put in an ethical dilemma of that kind (and there is no suggestion that they turned their minds to this) then they surely had a number of options available to them, including: advising the defendants that they would not be able to continue to act unless they directed Mr Corry to cease use of the Notification Alerts or, unless this kind of access was disclosed to the Applicants; or, perhaps a less draconian measure, to approach the Law Society or an ethics committee for advice. There is no suggestion that they did so.
Although an imperfect analogy (as I readily acknowledge), I raised in oral submissions a concern that this might be akin to equitable fraud (i.e., cases where a party stands back and allows another to enter into or commit to obligations knowing that the party is mistaken as to the terms of those obligations - see, for example, the kind of conduct considered in Easyfind (NSW) Pty Ltd v Paterson (1987) 11 NSWLR 98 (Easyfind) and the cases dealing with sharp practice such as Riverlate Properties Ltd v Paul [1975] Ch 133; [1974] 2 All ER 656).
In Easyfind, Young J, as his Honour then was, considered the test set out in Taylor v Johnson (1983) 151 CLR 422; [1983] HCA 5 (Taylor v Johnson) as to the circumstances where a party who has entered into a written contract under a serious mistake about its contents in relation to a fundamental term will be entitled in equity to an order rescinding the contract (namely, where the other party is aware that circumstances exist which indicate that the first party is entering the contract under some serious mistake or misapprehension about either the content or subject matter of that term, and deliberately sets out to ensure that the first party does not become aware of the existence of his mistake or misapprehension), citing the High Court's observations at 433 (per Mason ACJ (as his Honour then was), Murphy and Deane JJ). His Honour said (at 107):
The whole tenor of Taylor's is that in addition to there being a mistake by one party known to the other party, there must be some reason in conscience why the contract should not be enforced.
[Emphasis added].
The focus is on whether it is against conscience that a party insist upon its legal rights in those circumstances. His Honour in Easyfind went on to say (at 108) that:
A litigant has a duty in conscience not to deliberately mislead a judicial officer. However, as far as I am aware it has never been held that there is a duty in conscience not to mislead a fellow legal practitioner with whom one is negotiating a settlement.
…
In the instant case it does not seem to me that the barrister either induced or deliberately cloaked the subject matter of the solicitor's mistake. Accordingly, it does not seem to me that this is a case where the order should be set aside for unilateral mistake.
Here, however, the situation is one where the solicitor knows that the other side is unaware of the monitoring by Mr Corry of the Applicants' review of the Dynamics Account and says nothing.
I am not persuaded that there was serious misconduct in what occurred because I do not consider that the Respondents adverted their minds to this issue but I have concluded (after much thought and conscious of the seriousness of such a finding) that there was a serious failure on their part to appreciate their professional and ethical obligations in this regard (and not far removed from the kind of situation considered in Expense Reduction where a solicitor is in possession of (there privileged) information that the solicitor has obtained inadvertently and should not retain).
It is noted that the First Respondent prepared, filed and served the May Affidavits and witnessed the affidavit of Mr Ghaly. It is said that the First Respondent did so in the knowledge that they contained false statements or misleading omissions as to the deletion of records in the Dynamics Account (Points of Claim at [69]); that such conduct misled the Applicants, the solicitors for the Applicants and the Court; and amounted to serious misconduct (Points of Claim at [70]).
The Applicants accept that at the time of the mediation and settlement of the 2019 Proceeding as between themselves and the second to fifth defendants on 4 June 2019, the Applicants already knew of the existence of the Second Corry Email Account, and that it was an active account on the Dynamics Account (see Points of Defence at 73). However, they say that they were not aware of the use or significance of that email account, and they say that they were unable to appreciate this until their access to the Dynamics Account commenced following the mediation (see Points of Claim at [73], Points of Defence at [73], and see Mr Wallman's affidavit of 16 August 2019 at [11]-[13], and his affidavit of 7 May 2019 at [46]-[49]).
In response to the Respondents' submissions dealing with Mr Corry's email of 24 April 2019 referring to the deletion of records (at [181]-[193]), the Applicants say that the reference to what the information meant or whether that information had been restored was beside the point because, on the Applicants' case, the very fact that the email referred to the deletion of data on the Dynamics Platform meant that it or its contents should have been disclosed. The Applicants say that the Respondents did not need to make an assessment or conclude that any "nefarious" deletion of documents had occurred (cf their submissions at [183]-[184]). The Applicants say that this was a matter which the Applicants should have been entitled to investigate having been provided with the information in the Notification Alert (which they say did not require disclosure of the communication between Mr Corry and the Respondents if privileged (cf the Respondents' submissions at [189]).
Insofar as (at [187]) the Respondents criticise the Applicants' submission that their acceptance and reliance on what had been said by Mr Corry in the 24 April 2019 was untenable in circumstances where they were both aware that he had tried to frustrate the search order; the Applicants say that the circumstances in which Mr Wallman drew comfort that Mr Corry was locked out of the Dynamics Platform (because of his complaints and demands for access) are entirely different to the circumstances in which Mr Corry provided the information in his email of 24 April 2019 to the Respondents.
The Applicants in reply submissions say that [33]-[35] of the Second Respondent's affidavit sworn on 13 March 2019 are consistent with the Applicants' case that the parties were working on the basis that there was one Password to the Dynamics Platform; and inconsistent with the recent construction argument (but that if the Second Respondent did hold a view consistent with that construction argument at the time he swore the affidavit, the contents were seriously misleading).
Similarly, it is said that if the Second Respondent was genuinely referring only to Mr Corry's login and password in [33]-[35] of his 13 March 2019 affidavit (as the Respondents contend at [90] of their submission), those paragraphs were equally as misleading. The Applicants say that those were matters that should have been immediately raised with the Court (referring to r 19.2 of the Solicitors' Conduct Rules which imposes an obligation on a solicitor "to take all necessary steps to correct any misleading statement made by the solicitor to a court as soon as possible after the solicitor becomes aware that the statement was misleading"). Further, it is noted that nowhere in the affidavits of the Respondents sworn in respect of the present application do they suggest that they were referring to Mr Corry's login in the 13 March 2019 affidavit; or that it was through that login that they intended to conduct the privilege review at the time.
In all of those circumstances, it is submitted that the 24 April 2019 letter from Miller & Prince (settled by Counsel) was reasonable and appropriate; and that the sending of that letter did not amount to serious incompetence or serious misconduct.
The Respondents say that, once again, they took steps to seek instructions and to satisfy themselves that there had not been any inappropriate conduct before responding to the 29 April allegations. They accept that the detail of those privileged discussions has not been disclosed in the evidence. They say that this is appropriate and that the Respondents must be given the benefit of any doubt (citing Orchard at 572, per Donaldson MR; Ridehalgh at 229, per Bingham MR on behalf of the Court; Lemoto at 92, per McColl JA; Newell at [76], per Beazley P, as Her Excellency then was). Again, they note that the letter of 30 April 2019 was settled by Counsel.
In those circumstances, the Respondents say that the submission that the conduct of the Respondents, following receipt of the letter of 29 April 2019 from HWLE, was seriously incompetent or the product of serious neglect is without substance and should be rejected.
As to the allegation that the affidavits prepared in May 2019 by Mr Ghaly, Mr Singh and Mr Goradia contained false statements or misleading omissions as to the deletion of records in the Dynamics Account, and that the Respondents' conduct in preparing those affidavits amounted to serious misconduct, the Respondents say that those affidavits were prepared on instructions and were based on the personal knowledge of the deponents. It is noted that the deponents to the affidavits have not been joined to this application and there is no allegation made that they perjured themselves in making their affidavits. The Respondents say that, for that reason alone, the assertion that the affidavits contained false statements should be rejected; but that, in any event, there is no basis for a finding that the Respondents assisted the deponents to make false or misleading statements in the affidavits.
The Respondents say that the May Affidavits plainly could not include references to the Notification Alert emails or Mr Corry's 24 April 2019 email as those were confidential and privileged communications. As to Mr Corry's own affidavit, they say that any criticism of that cannot be directed to the Respondents. It is submitted that there is no basis for any finding that the Respondents engaged in serious misconduct, neglect, or incompetence in connection Mr Corry's email about deletions, the preparation of the May Affidavits, or otherwise.
The Respondents also maintain that not disclosing Mr Corry's 24 April 2019 email to the Applicants could not have resulted in any wasted costs because, if the Applicants submit that Mr Corry could not be believed, then the Applicants would have paid no attention to Mr Corry's email. (Pausing here, I see a relevant difference between disbelieving Mr Corry's assertions and believing admissions made by him in relation to, say, deletions having been made; but in any event, the issue here is as to a failure to disclose that Mr Corry was monitoring the Applicants' review of the Dynamics Account and the evidence comfortably persuades me that if the Applicants had become aware of this they would have acted much earlier to re-list the matter and obtain appropriate orders.)
The Respondents complain that the Applicants have made no attempt in their submissions to explain the quantum of costs claimed, or to demonstrate that the costs are properly and reasonably claimable (assuming that the relevant alleged misconduct is established). The Respondents say that the Wallman Costs Affidavit does little more than summarise the costs incurred by the Applicants.
Relevantly, as to the period from 23 April 2019 to 5 June 2019, the Respondents say that they were not the cause of any costs being wasted by reason of Mr Corry causing any disruption to the Plaintiffs' access to the Dynamics Account, and that any investigation arising from Mr Corry's conduct was required in any event. Further, they say that the total costs incurred of $77,882 are excessive (including $37,425 of Senior Counsel's costs and $5,300 of junior counsel's costs) and involve many instances of overlapping work (pointing, by way of example, to entries for 29 April 2019 - see Ex C, p 16).
The Respondents say that satisfaction could not be reached (to the Briginshaw standard) that any costs were unnecessarily incurred or wasted "by the serious neglect, serious incompetence or serious misconduct" of the Respondents. Alternatively, it is said that even if it were found that the requirements of s 99 of the Civil Procedure Act are met and that the Respondents should be ordered to pay some component of the Applicants' costs, appropriate reductions should be made having regard to the causative conduct of others (including the Applicants and their own legal representatives), the lack of specificity, duplication and high hourly rates in the invoices, the $1 million settlement, and the disproportionality between the time and cost associated with this application for a claim for wasted costs of about $100,000.
The Applicants reiterate their position that, as a result of the Respondents' conduct, the Applicants: can now have no certainty that the contents of the Dynamics Platform accurately reflect the contents of the platform as at the date of the execution of the search order; and would otherwise have to conduct an entirely fresh review.
As noted earlier, the Respondents also argue that the alleged "wasted costs" in fact "contributed" to the Applicants achieving a settlement of $1 million, together with a five-year restraint of trade, within only a few months (the Applicants cavil with the premise of this submission). Further, they say there is an "overlap" between the Applicants' costs settled as part of the settlement entered into on 5 June 2019 and the costs claimed in this application (again, the Applicants cavil with the premise of this). Further, the Respondents point to the report prepared by a computer expert retained by the Respondents who had investigated the Applicants' difficulties accessing the Dynamics Account and concluded that no data had been lost.
The Respondents say that the Applicants (and their solicitors) knew at least the following matters prior to settling the proceedings with the second to fifth defendants in June 2019: that Mr Corry had created the Second Corry Email Account and Mr Corry's explanation for its creation and use; that Mr Corry had used the Dynamics Account or Platform, via the Second Corry Email Account, on a near daily basis; that there were multiple other logins/email accounts that enabled access to, and had been used to access, the Dynamics Account or Platform; and that the data contained in the Dynamics Account had been preserved by virtue of being downloaded by the Independent Computer Expert shortly after the execution of the Search Order in February 2019.
The Respondents say that, while acknowledging the seriousness of their breach of the Undertaking to the Court, their conduct "does not come close" to the serious neglect, serious incompetence, or serious misconduct required to enliven the jurisdiction under s 99 of the Civil Procedure Act; and that in those circumstances, the bringing of this extremely lengthy and costly application by the Applicants (and their criticisms of the Respondents, including allegations of deliberate misconduct and perjury) reflects an approach to litigation of the type criticised by the High Court in Expense Reduction (to which I refer in due course). The Respondents say that the approach adopted by the Applicants cannot be reconciled with the usual expected procedure for such applications, as stated in Lemoto at 92, per McColl JA (as referred to above). Pausing here, I should say that part of the difficulty that necessitated a number of hearing days may be attributable to technological issues associated with the current COVID-19 pandemic (although, that said, the Court did its best to accommodate those difficulties with extended sitting hours).
The Respondents here seemingly criticise the Applicants for: commencing a first set of proceedings in 2017, another set of proceedings in 2019, contempt proceedings against Mr Corry and Mr Ghaly, and this costs application against the Respondents. (Pausing here, it is difficult to see how the Applicants can properly be criticised for bringing the second set of proceedings arising out of alleged misuse of confidential information in circumstances where, as I understand it, the basis for those proceedings was a concern that - despite the settlement of the first set of proceedings and unbeknownst to the Applicants - the defendants retained some of the Applicants' confidential information. Nor, does it seem to me, that the Applicants can properly be criticised for bringing contempt proceedings - at least not without any finding that there was no reasonable basis for those proceedings to be brought.) Nevertheless, the Respondents say that the evidence demonstrates that the 2019 Proceeding and this application have been prosecuted by the Applicants "tirelessly and with no expense spared".
In the present case, I consider that the discretion is appropriate to be exercised, having regard to the scope and purpose of s 98(4)(c) of the Civil Procedure Act in circumstances where it seems likely that a costs assessment process will add to the already disproportionate level of costs that have no doubt already been incurred, and would be likely only further to protract the dispute between the parties; and where I consider it best to remove some of the apparent emotion from the dispute between the parties to the present application. I am satisfied that there is sufficient material before me to assess those costs and, given that I propose to order them on an indemnity basis, I consider that only a small discount for the exigencies of costs assessment should be applied. I will therefore fix the costs ordered to be indemnified at $70,000 and order that they be payable forthwith. I note in that regard that in Hamod it was said (at [819]) that in the exercise of the discretion the undertaking of a detailed examination of the kind appropriate on a formal costs assessment was not required (see Harrison v Schipp at [22], per Giles JA; Hadid v Lenfest Communications Inc [2000] FCA 628 at [35], per Lehane J; Auspine Ltd v Australian Newsprint Mills Ltd (1999) 93 FCR 1 at 5, per O'Loughlin J; [1999] FCA 673).
The Respondents admit breaches of the Undertaking (which I will outline further in due course) but say that they have now made full disclosure of the breaches; that they have apologised to the Court for the breaches; and that this should have been the end of the matter. They decry the conduct of the present application as being inconsistent with the admonition by McColl JA in Lemoto v Able Technical Pty Ltd (2005) 63 NSWLR 300; [2005] NSWCA 153 (Lemoto) at 92 that judges "must be astute to control what threatens to become a new and costly form of satellite litigation" (her Honour there citing Ridehalgh v Horsefield [1994] Ch 205 (Ridehalgh) at 238-239; [1994] 3 All ER 848, per Bingham MR, Rose and Waite LJJ); and criticise the Applicants for the disproportionate cost of the present application (culminating in a hearing over some six hearing days) to recover alleged "wasted costs" of about $100,000 - a matter they say is relevant to the exercise of the Court's jurisdiction having regard to ss 56-58 of the Civil Procedure Act, even if the discretion under s 99 of the Civil Procedure Act is enlivened.
At the outset, I should say that I do not accept that it was inappropriate for the Applicants to bring the present application (although the criticism of the incurring of disproportionate costs in relation thereto is a different matter); and I am firmly of the opinion that, where there are serious concerns as to aspects of the conduct of officers of the Court, it is incumbent on the Court, not least in the public interest of maintenance of the integrity of the rule of law, to ensure that those concerns be properly aired and addressed. In that regard, I am of the view that the present application raises an important issue as to the professional and ethical obligations of officers of this Court if those officers become aware, in the course of the proceedings, that one party to the proceedings (here, the director of the Respondents' client but who was also a party in his own right) has secretly put in place a system by which that person could monitor the opposite party's review of documents in the course of that party's preparation for the conduct of the proceedings.
Insofar as there is criticism of the Applicants' conduct of the proceedings, the Applicants' response (which is not without force) is that the "elongation" of the hearing was at least in part caused by the Respondents' "recent construction" argument in respect of orders made earlier in the proceedings, which argument they say was advanced for the first time by the Respondents' written submissions for this hearing. Both sides made strident criticisms of belated contentions being advanced by the other: the Applicants accusing the Respondents of recent invention as to the Respondents' understanding of orders made by Kunc J in February and March 2019; the Respondents accusing the Applicants of adopting the belated contention that the relevant orders were premised on there being "only one access point" to the Dynamics Account; and both sides vehemently denying the accusations made against them. It is unedifying to seek here to explore the extent to which those matters lengthened the hearing of the present application, although it will be necessary to address the respective contentions as to the proper construction of the orders; and the Respondents' understanding thereof at the relevant time(s). Suffice it here to note that I consider that a degree of criticism can fairly be levelled at both sides for the circumstances in which the length of the hearing expanded beyond the dates initially listed for it.
Turning to their response to the claim itself, broadly speaking the Respondents' say that it depends on a particular (they say incorrect) construction of orders that were made by Kunc J on 21 February 2019 and 14 March 2019, respectively (the 21 February 2019 Orders and the 14 March 2019 Orders), which construction they say was one that was raised by the Applicants before, and rejected by, Kunc J on 16 May 2019. The Respondents complain that the Applicants here seek inappropriately to cavil with the "findings" of Kunc J in relation to those orders. I interpose to note that it is not clear to me that his Honour made any "findings" as such on 16 May 2019, although I accept that there was debate on that occasion as to the scope of the earlier orders and his Honour made clear that he did not regard there as being in place any injunction to restrain the continued operation of the second defendant's business. For their part, the Applicants do not accept the Respondents' characterisation of the submissions made to Kunc J on 16 May 2019 (and, as adverted to above, they contend that the construction now advanced by the Applicants in respect of the orders is a recent construction and not one that was held by the Respondents at the relevant time(s)).
In any event, the position of the Respondents is that the 21 February 2019 Orders and the 14 March 2019 Orders did not preclude the defendants from accessing the "Dynamics Account" through any "login" or email account other than that which is referred to as the First Corry Email Account (see below); and that the respective orders were designed not to stop the defendants accessing the "live" system as such; but, rather, they were designed to "preserve the integrity of the access point that had been used to do the download [of the Dynamics Account]" (see 17/7/20 at T 39.20). In other words, the Respondents say that the references to the Microsoft 365 Dynamics Account in the relevant orders only ever meant the Microsoft 365 Dynamics Account "as able to be accessed and operated by Mr Corry's specific login, being his email address" (i.e., the Dynamics Account that was accessed via the First Corry Email Account - the alex@nexgenpharma email account) (see 17/7/20 at T 63.48). On that contention, the debate is thus as to whether what the orders were intended (and understood) to preserve was the integrity of a password (through which access to a live platform could be obtained) or the integrity of what was on that live platform at the time of execution of the search orders in question.
The Respondents further say that, even if the construction of the 21 February 2019 Orders and the 14 March 2019 Orders for which they here contend is wrong, it was reasonable for them to have acted on the basis that that was the proper construction to be placed on the said orders. That submission, of course, presupposes that this was indeed the construction the Respondents placed on the 21 February 2019 Orders and the 14 March 2019 Orders at the relevant times - a proposition with which, as noted above, the Applicants here cavil. Moreover, it begs the question of what the Respondents understood (or, when considering the question of their alleged serious incompetence, what reasonably competent solicitors in their position would have understood) of the basis on which the Applicants were proceeding in relation to the 21 February 2019 Orders and the 14 March 2019 Orders at the relevant times, by reference to the contemporaneous communications and events. That, too, is a matter in dispute between the parties.
As to the Applicants' claims of misconduct arising from alleged non- disclosure of information (in particular, non-disclosure of the fact that Mr Corry had access to the Dynamics Account and was reviewing, or being notified of, the documents that the Applicants were reviewing in the course of their inspection of the Dynamics Account), the Respondents say that the fact that they were aware from time to time that Mr Corry had accessed the Dynamics Platform or had commented on the Applicants' access to files is of no moment and does not reflect poorly on the Respondents or their professional conduct. The Respondents say that this complaint involves the novel proposition that solicitors acting for an opposing party in "hard-fought" (indeed at one point they describe this as "bitterly-fought") litigation (and where there is no suggestion of criminal conduct) have a duty to disclose the conduct of their client, or that of another party in a similar interest, to the other party, including when so doing may be contrary to the client's (or a related party's) interests and/or result in the disclosure of confidential and privileged communications. They maintain that there is no authority for such a proposition.
As to the claimed consequences of the impugned conduct, the Respondents say that there is no evidence demonstrating that any additional costs were caused by the breaches of the Undertaking or the other alleged misconduct; and that this alone is a sufficient basis to dispose of the present application. They point out that the legal representatives propounding the present application were involved in the drafting and implementation of the orders in question; and they say that the application depends on allegations that the Respondents ought to have disclosed matters to the Applicants' solicitors that the Applicants' solicitors either knew, ought to have known, or could readily have ascertained.
Finally, by way of introduction, I note that emotions appear to have run high on both sides in this matter. This is perhaps unsurprising given, on the one hand, the breaches of Undertaking and the manner in which the Respondents initially reacted to complaints made by the Applicants in relation thereto; and, on the other hand, the very serious allegations that are here now being made against the Respondents. As to the latter, it should be noted that the Applicants have not simply alleged serious misconduct, serious incompetence, and serious neglect on the part of the Respondents (allegations against officers of the Court that of themselves are serious enough); but they have also, in a number of instances, invited findings that the Respondents have deliberately concealed matters and have consciously lied in their evidence to the Court (allegations that are extremely serious indeed). However, with all due respect to both sides, it is most unfortunate that matters have come to this pass (not helped, I suspect, by the attitude that Mr Corry himself seems to have engendered, having regard to some of the email communications in evidence).