Page 1
CCTVEVIDENCE · A GUIDE FOR UK LAWYERS CCTV Evidence Recorders, Retention Loops and the Footage That Overwrites Itself While You Draft the Letter COMPUTER FORENSICS LAB
§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM CLOCK & TIMELINE VERIFICATION CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION
§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: evidence on a countdown 03 The recording estate: DVRs, NVRs, cloud cameras and doorbells 04 The preservation race: stopping the overwrite 05 Export and collection: keeping footage evidential 06 Clocks, synchronisation and the timeline 07 Authenticity, enhancement and interpretation 08 Source architecture: where else the evidence lives 09 Worked examples 10 Common mistakes and technical limitations 11 Questions to ask · Suggested wording 12 Checklist and red flags · When to involve a digital forensic expert 13 Frequently asked questions 14 Glossary · References · Disclaimer · How a specialist laboratory can assist
§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: CCTVISWONORLOSTINTHEFIRSTWEEK: PRESERVEBEFORE THELOOP, EXPORTNATIVELY, VERIFYTHECLOCK
§ 02 · FIRST PRINCIPLES The problem in plain English: evidence on a countdown
§ 03 · THEESTATE The recording estate: DVRs, NVRs, cloud cameras and doorbells
Page 2
§ 04 · THERACE The preservation race: stopping the overwrite
§ 05 · GETTINGITOUTINTACT Export and collection: keeping footage evidential
§ 06 · TIME Clocks, synchronisation and the timeline
§ 07 · REAL, CLEAR, ANDFAIRLYREAD Authenticity, enhancement and interpretation 35 and the standing fairness rule.
§ 08 · THEWIDERMAP Source architecture: where else the evidence lives EVIDENCE CENSUS EXPORTS / PRIMARY CLOUD LOGS & DELETED / RECORDER LAYER PERIPHERY RECOVERABLE OTHER PRIOR CAMERAS COPIES
§ 09 · IN THE WILD Worked examples EXAMPLE1 · THECENSUSTHATBEATTHELOOP EXAMPLE2 · THEGAPTHATHADASERVICETICKET EXAMPLE3 · THECLIPWITHTWOENCODINGLIVES
Page 3
§ 10 · WHEREITGOESWRONG Common mistakes and technical limitations Common mistakes Technical limitations
§ 11 · INTERROGATORIES & DRAFTING AIDS Questions to ask · Suggested wording Ask your client Ask your opponent Ask your e Discovery / forensic provider SUGGESTED WORDING · CCTVLIMBFORTHEPRESER VAT I ON LETTER
§ 12 · QUICK CONTROL Checklist and red flags · When to involve a digital forensic expert The CCTV checklist Red flags When to involve a digital forensic expert
§ 13 · COMMON QUESTIONS Frequently asked questions How long do businesses actually keep CCTV? The footage has already been overwritten. Any hope? Is a phone recording of the CCTV monitor admissible? The other side says our clip is a deepfake. Now what? Can we enhance the footage to read the number plate? Do we have to redact other people before disclosing footage?
§ 14 · REFERENCE Glossary Sources and authoritative references DISCLAIMER
§ HOW A SPECIALIST LABORATORY CAN ASSIST Working with Computer Forensics Lab Speak to a forensic examiner, not a salesperson. INSTRUCTTHELAB NEWENQUIRIESEMAILE - DISCOVERY
Cite as: Joseph Naghdi, CCTV Evidence, Computer Forensics Lab, https://e-discovery.uk/library/cctv-evidence/pdf.