Page 1

CHAIN OF CUSTODY · A GUIDE FOR UK LAWYERS Digital Chain of Custody: A Practical Guide for Lawyers Continuity, Transfer Records and the Documentation That Survives Court COMPUTER FORENSICS LAB E-DISCOVERY. UK

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM ACPO / NPCC DIGITAL EVIDENCE PRINCIPLES FULL CHAIN-OF-CUSTODY DOCUMENTATION CPR PART 35 EXPERT REPORT S COURT-EXPERIENCED EXPERT WITNESSES

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: the question every exhibit must answer 03 The two strands: physical and logical custody 04 The custody lifecycle, stage by stage 05 Sample records: the forms that do the work 06 Weak versus defensible: the same events, two files 07 What breaks a chain, and what a break actually costs 08 Worked examples 09 Common mistakes and technical limitations 10 Questions to ask · Suggested wording 11 Checklist and red flags · When to involve a digital forensic expert 12 Frequently asked questions 13 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: CONTINUITYISPROVEN, NEVERPRESUMED

§ 02 · FIRST PRINCIPLES The problem in plain English: the question every exhibit must answer

§ 03 · THETWOSTRANDS The two strands: physical and logical custody