Preserve the complete conversation
A single image may omit prior messages, a date, or sender identity. Preserve the device, export the conversation where possible, and document the account, number, and time.
Authenticity and identity
The court may examine who wrote the message, whether the file was altered, and how it was preserved. A forwarded message or image without its source may be disputed. Backups and corroborating information should also be retained.
Recording a conversation
A recording by a participant should be distinguished from listening to the conversation of others. Before making or using a recording, its legality and privacy consequences should be examined.
Context, not an isolated sentence
Meaning depends on the sequence, relationship, and other documents. An emoji, abbreviation, or answer to an earlier question may alter interpretation. Present the necessary excerpt without concealing its context.
Preservation after a dispute begins
Do not delete, edit, or reconstruct communications. When a dispute develops, preserve devices, backups, email, and relevant files and prevent automatic deletion.
Concluding point
The strongest digital evidence is preserved in its original form with complete identity, date, and context.
Principal legal sources
- Evidence Ordinance [New Version], 5731-1971.
- Wiretapping Law, 5739-1979.
- Protection of Privacy Law, 5741-1981.