Chain of Custody in Workers' Compensation Surveillance
An insurer hires a Hawaii-licensed private detective agency to surveil a workers' compensation claimant who says a back injury prevents lifting more than 10 pounds. Over three days, investigator Ryan shoots 412 photos and 38 minutes of video on a personal phone. Each night he transfers files to a laptop, renames them by date, trims 'boring' segments from the video, and uploads the edited clips to a shared cloud folder. The phone's clock was set to California time, two hours behind Hawaii, so the file timestamps do not match the report. On day four, a different employee uses the same phone for a domestic case and factory-resets it. Ryan's report states the claimant 'lifted an 80-pound bag repeatedly'; the best clip shows a 50-pound bag lifted twice. The insurer asks Ryan to prepare a declaration authenticating the footage.
1. Identify the evidence-handling failures and explain how each affects admissibility and weight under Hawaii evidence principles.
Read the worked answer
Key failures: (1) no original preservation - the phone was the original recording device and was factory-reset; (2) editing the video before making a hash or forensic copy; (3) renaming files without a log tying original filenames, device, and times to the copies; (4) uploading only edited clips to the cloud; (5) uncorrected clock error; (6) using the same device for another case without isolating evidence. Under Hawaii evidence principles, authentication requires a witness with knowledge that the item is what it purports to be, and the best-evidence rule favors the original or a reliable duplicate. A party can authenticate a video, but gaps in custody and editing go to weight and may support exclusion or a limiting instruction. The factory reset is serious because the opposing side can argue the original was destroyed in bad faith. The time offset must be documented with device settings and comparison to a reliable clock. The agency should treat the edited clips as demonstrative or working copies, not originals, and explain every alteration.
2. Rewrite the report's key factual statement and describe the corrective steps Ryan must take before signing a declaration.
Read the worked answer
Instead of 'lifted an 80-pound bag repeatedly,' the report should say: 'On [date], at approximately [time] Hawaii time, the subject was observed lifting a bag that appeared to be the 50-pound bag shown in the video. He lifted it twice. The bag was not weighed by the investigator, and the weight is an estimate based on labeling visible in the clip. The device clock was set to Pacific time, so file timestamps are two hours earlier than Hawaii time; the report times have been corrected using [method].' Before signing a declaration, Ryan should review the original and working copies, prepare a chain-of-custody log, document the phone reset and who did it, check whether cloud version history or backups preserve earlier files, and give the insurer both the edited and unedited clips with a clear index. If the original cannot be recovered, the declaration must disclose that, not imply the clips are complete. The agency should also correct the earlier report in writing.
3. What should the agency do about the factory-reset phone and the cloud folder?
Read the worked answer
The factory-reset phone and the cloud folder should be preserved as they are and turned over to counsel. The agency should not try to 'clean up' the cloud folder, delete duplicates, or re-enact the download. It should capture screenshots and metadata of the cloud folder, preserve version history if available, and document the identity of the employee who reset the phone and when. The phone should be isolated and not used again. If litigation is reasonably anticipated, counsel should issue a litigation hold and consider a forensic examiner to determine whether any original files remain. The insurer should be told immediately that the original device was reset and that the available clips are edited copies. The agency should revise its procedures: dedicated evidence device, immediate hash and write-once copy, time-sync log, no editing of originals, and a chain-of-custody form. Concealing the reset or presenting the clips as originals would be an ethical and discovery violation.