The Missing Minutes
A retail chain hires you to investigate suspected internal theft at a warehouse. The loss prevention manager gives you 30 days of CCTV footage, an access-card log, and a list of six employees. You interview four employees over two days. Your notes are handwritten on a steno pad, sometimes with times and sometimes without, and you record two interviews on your phone without telling the employees. One employee, who is 17, admits taking merchandise worth about $600 and asks you not to tell his supervisor. On day 12 the client asks for a 'summary report' and says the footage can be deleted once you are done because storage is expensive.
1. Evaluate the evidence-handling and documentation problems in this investigation.
Read the worked answer
Several problems compound each other.
Notes. Undated, untimed handwritten notes are weak evidence. A professional file records date, time, location, persons present, questions asked, and answers given, ideally contemporaneously and in ink, with corrections initialled. Gaps invite challenges to reliability and credibility.
Recording without notice. Secretly recording interviews raises legal and ethical issues. You should know whether the recording is lawful in the circumstances and whether consent is required; regardless, the practice should be disclosed in your policy and handled consistently. An undisclosed recording that surfaces later can taint the whole investigation.
Minor employee. A 17-year-old is a minor. An admission obtained from a minor without appropriate safeguards, and a promise to keep it from the supervisor, is problematic. You should not make promises you cannot keep, and you should follow a policy for interviewing minors, including whether a parent or guardian or support person should be present.
Chain of custody. You have not described how the footage, logs, and any physical evidence were received, labelled, stored, or transferred. Without that record, the evidence's integrity is hard to establish.
2. The client wants the footage deleted and a short summary. What do you advise and why?
Read the worked answer
Advise against deletion and explain the risk.
Preservation. Evidence relevant to a potential theft, termination, or civil claim may need to be preserved. Deleting footage because storage is costly can be spoliation: destruction of evidence that may be required in litigation. It can lead to adverse inferences, sanctions, and damage to the client's position. The investigator should recommend a litigation hold, preserve the relevant footage (at minimum the segments covering the suspected events and a reasonable buffer), and document the preservation decision. If storage is a genuine constraint, recommend exporting the relevant clips and logs rather than retaining everything.
The report. A 'summary' is fine only if it is accurate and complete. It should identify sources, describe methodology, distinguish fact from inference, note the limitations (missing timestamps, undisclosed recordings, minor's admission), and avoid conclusions the evidence cannot support. Do not overstate the case to please the client. The report is a professional record that may be read by a regulator, a court, or an opposing party.
3. What should you do about the 17-year-old's admission and his request?
Read the worked answer
You should not have promised confidentiality you cannot guarantee. Correct the record promptly: tell the employee, in age-appropriate terms, that you cannot keep the admission from the employer, that the matter will be reported, and what happens next. Document that conversation.
Follow your policy for minors: consider whether a parent, guardian, or support person should be involved, and whether the interview should continue at all without one. The admission should be recorded accurately, with the circumstances (who was present, what was said, whether any inducement was offered). Do not use the youth's fear to extract more. Report the matter through the client's proper channel and preserve your notes.