Page 1

COLLECTION PROTOCOL S · A GUIDE FOR UK LAWYERS Preparing a Forensic Collection Protocol The Written Plan That Makes a Collection Defensible Before It Begins COMPUTER FORENSICS LAB DISCOVERY. UK

§ ABOUT THE AUTHOR PREPARED BY COMPUTER FORENSICS LAB E-DISCOVERY TEAM ACPO / NPCC DIGITAL EVIDENCE PRINCIPLES PROTOCOL DRAFTING & EXECUTION CPR PART 35 EXPERT REPORT S FULL CHAIN-OF-CUSTODY DOCUMENTATION

§ CONTENTS In this guide 01 Executive summary 02 The problem in plain English: collections without plans 03 What a protocol is, and when one is needed 04 The anatomy: section by section 05 Scope: custodians, sources, date ranges, method per source 06 Exclusions, privilege and personal data 07 Execution: sequence, roles, verification and custody 08 Contingencies and escalation triggers 09 Agreed and court-ordered protocols 10 Worked examples 11 Common mistakes and technical limitations 12 Questions to ask · Suggested wording 13 Checklist and red flags · When to involve a digital forensic expert 14 Frequently asked questions 15 Glossary · References · Disclaimer · How a specialist laboratory can assist

§ 01 · ORIENTATION Executive summary THE HEADLINE POINT: WRITETHECOLLECTIONDOWNBEFOREITHAPPENS

§ 02 · FIRST PRINCIPLES The problem in plain English: collections without plans

§ 03 · DEFINITION What a protocol is, and when one is needed