How to Preserve Evidence - Internet Safety
Last updated | 06/05/2011
All those involved in the protection of children and young people should be aware of the value of digital evidence contained on computers, mobile phones and other media (this includes media used by the victim as well as any suspect). If there is a suspicion that such equipment might be of evidential value the following procedures should be adopted:
- Prevent further use of the computer or other equipment
- Prevent access to the computer, or other equipment or associated media
- Do not disconnect the power unless there is a reason to believe that the computer is carrying out a task that would delete any evidence. In which case remove the power lead from the rear of the computer, do not shut the computer down in the normal manner and do not switch off at the wall, (both these actions may cause files to be deleted).
- Do not allow anyone (no matter how computer literate they may be) to interrogate the computer. This should only be done by Tayside Police. Initial contact should be made with the local police office who will follow police operational procedures. The evidential value of the data will then be preserved.
