Good Practice Guide for Computer-Based Electronic Evidence

The guidelines in this document relate to:

Personnel attending crime scenes or making initial contact with a victim/witness/suspect: Securing, seizing and transporting equipment from search scenes with a view to recovering computer-based electronic evidence, as well as in the identification of the information needed to investigate a high-tech crime.

Investigators: Planning and management by investigators of the identification, presentation and storage of computer-based electronic evidence.

Evidence recovery staff: Recovery and reproduction of seized computer-based electronic evidence by personnel who are trained to carry out the function and have relevant training to give evidence in court of their actions.  Persons who have not received the appropriate training and are unable to comply with the principles, must not carry out this category of activity.

External consulting witnesses: The selection and management of persons who may be required to assist in the recovery, identification and interpretation of computer-based electronic evidence.