How should digital evidence be handled in sexual assault investigations?

• A. Modify timestamps to align with witness statements
• B. Preserve data by blocking writes, collect and preserve devices, obtain appropriate warrants, maintain chain-of-custody, document timeline.
• C. Copy data and post online for public review
• D. Ignore device data if privacy concerns exist

Answer: (B)

Digital evidence in sexual assault investigations must be treated as potentially crucial, requiring careful preservation and legality from the start. The best approach is to preserve data exactly as it exists: block writes to prevent any alteration, collect and preserve the devices or storage media, obtain the appropriate warrants before seizing or accessing data, maintain a clear chain-of-custody showing every transfer and handling, and document a precise timeline that ties the digital evidence to the investigation. This sequence protects the integrity of the data, ensures the seizure is lawful, and establishes authenticity for court, while also providing a clear, traceable narrative of what happened.

Modifying timestamps would distort the evidence and undermine trust in the data’s authenticity. Posting data publicly would raise privacy concerns and threaten admissibility and safety. Ignoring device data ignores a potentially critical source of information that could corroborate or challenge testimonies and other evidence. The responsible approach is to keep the digital evidence intact, legally obtained, and properly documented so it can meaningfully contribute to the investigation and any ensuing proceedings.