Investigation Methods and Evidence Handling
This domain tests how to investigate proportionately, lawfully and evidentially. The exam looks for a structured investigation plan, correct evidence handling, and awareness of the legal limits on a private insurer.
Investigation model
- Triage, investigate, resolve. Define scope, authority, budget and proportionality before starting.
- Authority comes from the policy terms, the claim contract and data-protection law, not from police powers.
Evidence types and handling
- Documentary, physical, digital, witness and expert evidence.
- Chain of custody, exhibit numbering, contemporaneous notes, secure storage, forensic imaging and hashing of digital material.
- Sources: CUE, MID, MIAFTR, the Insurance Fraud Register, Companies House, Land Registry, open-source intelligence.
Legal limits
- Regulation of Investigatory Powers Act 2000 for directed surveillance and covert human intelligence sources; Human Rights Act 1998 Article 8 privacy.
- Data Protection Act 2018 and Computer Misuse Act 1990; PACE 1984 powers belong to the police, not insurers.
- No fishing expeditions, no unlawful pretexting, no harassment.
Worked example
A claimant submits a photograph of storm damage. Metadata shows the image was created before the alleged storm. Preserve the original device and file, hash the image, record the chain of custody, and arrange forensic examination before editing or converting anything.
Traps
- Unlawful or disproportionate surveillance.
- Losing metadata by copying or editing files.
- Failing to retain and disclose material that undermines the insurer's case.