Documenting the Incident
Creating a clear, accurate record that supports any subsequent investigation.
What to record
Document: the date and time the incident was reported, who reported it, what platform or app was involved, the usernames or account names visible, the nature of the content (describe without interpreting), who was present when the evidence was viewed, what actions were taken with the device, and the date and time of each action. Use the child's own words for any disclosure and distinguish clearly between fact and opinion.
Key takeaway
Record everything factually and chronologically — distinguish clearly between what you observed and what was reported to you.
The chain of evidence
The chain of evidence tracks who has handled the device or evidence at every stage. If a device is passed between several people without documentation, any evidence on it can be challenged. Record every handover: who passed it, who received it, when, and in what condition. If the device needs to be stored, keep it in a secure location with limited access and record who accesses it and when.
Key takeaway
Maintain a clear chain of evidence — record every person who handles the device and when they handled it.