The volume of civil work involving digital evidence has quietly overtaken the criminal work that founded the discipline. Anywhere a factual dispute turns on what someone said, sent, moved or accessed, there is a device or an account that recorded it.
Where it shows up
- Commercial: fraud, IP theft, breach of restrictive covenants, disputed contracts formed by messaging.
- Employment: misconduct, exfiltration on exit, harassment allegations.
- Family: disclosure, coercive control, disputed communications between parents.
- Regulatory: SRA, FCA and ICO matters where preservation and disclosure are scrutinised.
The common thread
In each of these forums the value of the evidence rises or falls on how early it was preserved and how tightly the examination was scoped. Neither of those is a technical question. Both are legal ones.