Separate search, seizure, inaccessibility and shutdown
A device may be examined on site, physically taken, disconnected or rendered inaccessible. Premises may also be subject to a separately stated restriction. These are not interchangeable events, and the legal basis for each should be identified.
Section 33 addresses search-and-seizure authority. Section 35 regulates how the relevant powers are exercised, and section 36 addresses seized or inaccessible material and forensic-image procedures. The label “raid” does not answer which action occurred or what remedy fits it. [1]
Record the actual consequence: which equipment was taken, which services stopped, whether data remains accessible and whether any written sealing or other direction exists. Do not assume a complete legal shutdown merely because several computers have been removed.
Proportionality requires a factual explanation
Section 35 requires proportionate action and attention to legitimate operations, unrelated systems, integrity and secrecy. Its technical and last-resort seizure framework matters where evidence can be appropriately secured by less disruptive means. [1]
A persuasive request identifies the material relevant to the inquiry and explains the effect on unrelated services. It may propose a competent technical assessment of preservation or imaging alternatives. The investigator and court must still consider whether the proposal adequately protects the evidence.
“Taking this server will cost money” is an impact statement. “This server hosts separately identified unrelated services, and this documented method can preserve the relevant evidence” is a more useful proportionality submission. Neither automatically prevents seizure.
The forensic alternative must be genuine and technically adequate
A company should not assume that an ordinary backup is equivalent to a forensic image. The appropriate method depends on the systems, data, metadata, access controls and evidential purpose. A competent specialist may need to explain whether a proposed alternative is reliable and sufficient.
PECA’s focus on forensic integrity and chain of custody means that the method, person performing it and subsequent handling matter. Management should not alter a system to make it easier to release while the material is subject to investigation. [1]
Where physical seizure is considered necessary, document the stated reason where available and preserve the business’s factual explanation. Legal objections can be pursued without presenting an inadequate technical option as a guaranteed substitute.
Get the seizure record right
Section 36 provides for a list identifying what has been seized or rendered inaccessible, with relevant particulars including date and time. Request the copy due under the provision and check that the business can match the record to the actual items. [1]
Useful identifying information may include device descriptions, serial numbers where available and the system’s operational role. Record discrepancies and seek correction through the appropriate process. Do not sign a document as accurate when it contains a material description you know is wrong without raising the issue and obtaining advice.
The inventory supports both evidence integrity and later recovery applications. A vague description such as “computer items” can make it difficult to identify what is sought back or to distinguish company property from third-party equipment.
Forensic-image requests are not automatic hardware-release requests
Section 36 contains a procedure through which an owner or authorised agent can request a forensic image, subject to its conditions, costs and any lawful court restriction. An image can be important for continuity, but it is different from return of the original equipment. [1]
The provision’s seven-day language concerns the officer’s application to court where withholding the image is sought on the stated prejudice grounds. It should not be advertised as a universal rule that all computers or copies must be returned within seven days.
Identify the requester’s authority, data sought, business need and proposed handling arrangements. Where the material includes unrelated confidential client information, explain the protective measures rather than demanding indiscriminate access to everything.
Worked example: shared infrastructure
A hypothetical centre provides technical support for three unrelated clients. An inquiry concerns one campaign, but the relevant platform shares infrastructure with the other two. The business should produce a reliable system description, service separation and evidence of the operational consequences.
Counsel can then assess whether to request a less disruptive preservation method, access to defined business data or other targeted relief. The company must not secretly move or erase the investigated campaign to make the remaining services appear unrelated. [1]
This is a fact-sensitive exercise. Shared infrastructure can make separation technically difficult; the law does not guarantee that every proposed business-continuity arrangement is feasible.
Business continuity must respect the evidence and orders
Review contracts, client notifications, access permissions and the remaining system’s security. Rebuilding operations from lawful, unaffected resources may be possible, but must not breach a sealing, preservation or other direction or conceal evidence.
If equipment or data remains unavailable, choose a remedy suited to the stage and competent forum. Property-custody procedures and constitutional relief have different requirements. The application should explain ownership, relevance, preservation alternatives and the exact relief sought. [2] [3]
The central protection is proportionate process, not a promise that a registered business can never lose access to equipment. Clear records and a technically credible proposal give that protection practical meaning.
Legal assistance for this issue
Legal Bridge LLP can assess seizure documentation and prepare a targeted request or application where justified. Technical feasibility, investigation needs and the competent court’s discretion remain material.
