WhatsApp
← Blog·Forensics & law·21/02/2026
UK police digital evidence backlog — stacked evidence bags with seized phones and laptops, clock, courthouse in distance.

The UK digital evidence backlog: what it means for defence teams.

Public reporting from HMICFRS, the National Audit Office and successive Forensic Science Regulator annual reports has confirmed what defence practitioners already knew: police digital forensic units are working through significant backlogs of devices awaiting examination, and the consequences reach into every stage of the criminal process. This guide sets out where the backlog actually bites, the disclosure and case-management points it creates, and the practical steps defence teams can take when the served forensic evidence is partial, late, or both.

The backlog is not a single number; it is the cumulative effect of rising device volume per case, expanding storage capacities, cloud-linked material that has to be sought separately, and constrained laboratory capacity. Its practical effect is that forensic examinations that would once have been complete before charge are now often served in tranches, and sometimes not until weeks before trial. That timing shapes what the defence can and cannot test, and it shapes the disclosure obligations that attach to the material once the examination is complete.

The practical effects

  • Charging decisions taken on partial forensic evidence, with the fuller extraction served later and sometimes with limited time for defence review.
  • Disclosure served in tranches — the initial extraction, then the full extraction, then the results of cloud or account acquisitions — each of which may open new lines of enquiry.
  • Bail conditions imposed on the strength of forensic material still to be produced, occasionally revised when the fuller extraction arrives.
  • Delays in charge-or-release decisions on retained devices, sometimes measured in months.
  • Unused-schedule material that has never been reviewed against the defence case, because the extraction was not completed until close to trial.

Where the disclosure points sit

StageQuestion worth askingWhy
Initial disclosureWhat extraction was actually performed on each device — logical, file-system, physical, cloud?The ceiling of what the report can say is set by the extraction depth.
Pre-trialWhen was the extraction performed, and by what version of tooling?Tool version affects what the extraction can and cannot recover; older extractions may miss material a re-run would produce.
Unused scheduleHas the unused material been reviewed against the pleaded defence?Backlog-era unused schedules frequently contain material favourable to the defence that has not been surfaced.
Cloud acquisitionHave linked cloud accounts been acquired, and if so, over what date range?Cloud material is often decisive and frequently acquired late, if at all.
Late-served evidenceIs the timing consistent with the defence's ability to test the material?Case-management directions can be sought where late service is prejudicial.

The gap between the extraction the police performed and the material the CPS chose to serve is often where the defence case sits. It is a disclosure question, not a technical one — but it is asked from a technical position.

What defence teams can do

  1. 01
    Commission independent examination early. Even a scoping opinion on the served exhibits, before the full extraction is available, sharpens the questions to ask at disclosure.
  2. 02
    Ask about the extraction, not only the served material. The section 8 CPIA duties bite on the underlying material, not on the produced exhibits.
  3. 03
    Preserve the client's own devices and accounts. They may support the alternative account, and they will not be preserved by anyone else.
  4. 04
    Frame targeted disclosure requests. Specific artefacts, specific date ranges, specific cloud sources — general 'all forensic material' requests get general refusals.
  5. 05
    Raise timing at case management. Where late service is prejudicial, an early application is far more effective than an eve-of-trial complaint.

Where independent forensic review earns its cost

In backlog-era cases, the independent examiner is often the person who first reads the underlying image with the defence case in mind. That review commonly identifies material the prosecution examiner did not surface — favourable messages in adjacent threads, deleted content the prosecution report did not consider, artefacts that support a benign explanation — and it does so in time for the material to be used.

Frequently asked questions

Can we insist on a fresh extraction if the police one is old?

You can raise it, and the court can direct it where the age of the extraction is material to the pleaded issues. The application is stronger when tied to specific recoverable material that a modern tool would reach.

Are we entitled to the underlying forensic image, or only the served exhibits?

The CPIA disclosure duties attach to the underlying material. The image itself is usually not served, but the defence can and does routinely receive it, on undertakings, for independent examination.

What happens when the extraction is served weeks before trial?

That is a case-management question. Depending on the volume and materiality, the remedies range from a short adjournment for defence review through to exclusion of late-served evidence under the court's case-management powers.

Does the backlog affect civil work too?

It does — police-held material sometimes matters in civil claims, and access can be slow. Where civil preservation is required, do not rely on police-held images being available when needed.

How early should we instruct on the defence side?

As soon as the extent of the forensic material is known. Waiting for full service risks losing the window in which independent examination can meaningfully affect the case.