EGATSU-PI study materials
EGATSU-PI study resources

EGATSU-PI key terms

EGATSU-PI · Get comfortable with the vocabulary.

Chain of custody

A chronological written record showing every person who handled a piece of evidence, when, and for what purpose. Gaps or unsigned transfers weaken its credibility in court and can lead to exclusion.

Related: Case file, Spoliation
Locard's exchange principle

The forensic idea that every contact between two objects leaves a trace of one on the other. Investigators use it to justify careful collection of fibers, hairs, and digital traces at scenes.

Related: Chain of custody, Contemporaneous notes
Pretexting

Obtaining information by presenting a false identity or fabricated story. Licensed investigators may use ruses in some jurisdictions but cross legal lines when they impersonate officials or access financial records.

Related: Invasion of privacy, Trespass
Skip tracing

Locating a person whose current address or contact details are unknown, using public records, database searches, and interviews with associates. Investigators must stay within privacy and debt-collection rules while doing it.

Related: Public records, Driver's Privacy Protection Act
Static surveillance

Observing a fixed location such as a residence or workplace from a concealed position over an extended period. Success depends on choosing a vantage point that permits documentation without alerting the subject.

Related: Mobile surveillance, Counter-surveillance
Mobile surveillance

Following a subject who is moving, usually in a vehicle or on foot. Investigators use spacing, lane changes, and hand-offs between team members to avoid detection.

Related: Static surveillance, Counter-surveillance
Counter-surveillance

Techniques used to detect whether someone is watching or following you, such as route reversal, mirror checks, and sudden stops. Field investigators use it to protect an operation's secrecy.

Related: Mobile surveillance
GPS tracking device

An electronic unit attached to a vehicle to log its movements. Whether placement is lawful depends on consent, ownership of the vehicle, and jurisdiction-specific statutes governing tracking.

Related: Trespass, Invasion of privacy
Trespass

Entering or remaining on property without the owner's permission or legal authority. Investigators can commit it even while gathering lawful information, so access rules must be confirmed before entry.

Related: Invasion of privacy
Invasion of privacy

Intrusion into a person's private affairs, such as peering into a home or disclosing private facts, where the subject had a reasonable expectation of privacy. It is a common civil claim against investigators.

Related: Trespass, Stalking
Driver's Privacy Protection Act

A U.S. federal law restricting disclosure of personal information held by state motor vehicle agencies. Investigators must qualify under a listed permissible use before obtaining driver records.

Related: Public records, Fair Credit Reporting Act
Fair Credit Reporting Act

A U.S. law governing consumer reports: who may obtain them, what must be disclosed, and how disputes are handled. Investigators ordering background reports must qualify as permissible users.

Related: Driver's Privacy Protection Act, Due diligence
Stored Communications Act

A U.S. statute limiting when stored electronic communications, such as emails and messages held by providers, may be accessed. It makes voluntary disclosure by third-party providers risky without subpoena or consent.

Related: Subpoena duces tecum, Preservation letter
Subpoena duces tecum

A court order requiring a person or organization to produce specified documents or records at a stated time. Investigators often use it to obtain records that the holder will not release voluntarily.

Related: Affidavit, Stored Communications Act
Affidavit

A written statement of facts sworn or affirmed before someone authorized to administer oaths. Investigators use affidavits to preserve a witness's account in a form admissible in proceedings.

Related: Deposition, Hearsay
Hearsay

An out-of-court statement offered to prove the truth of what it says. Investigators should know the rule because interview notes and secondhand reports may be excluded or heavily challenged.

Related: Affidavit, Investigative report
Spoliation

Destruction or alteration of evidence that another party could reasonably expect to use in litigation. Investigators who fail to preserve recordings or notes can face sanctions or adverse inferences.

Related: Preservation letter, Chain of custody
Exculpatory evidence

Information that tends to clear a suspect or reduce culpability. A thorough investigator records it in the case file rather than suppressing it, because withholding it undermines the whole report.

Related: Case file, Investigative report
Contemporaneous notes

Written records made at or near the time of an observation, before memory fades or is influenced by later information. Courts treat them as more reliable than notes reconstructed weeks later.

Related: Case file, Investigative report
Case file

The organized collection of notes, reports, photographs, recordings, and evidence logs for one matter. It must be complete and retrievable, since opposing counsel may review it in litigation.

Related: Chain of custody, Contemporaneous notes
Investigative report

A factual narrative of what was done, observed, and concluded, written in plain chronological order with sources identified. Opinions are clearly separated from observations.

Related: Case file, Contemporaneous notes
Entrapment

Inducing someone to commit a crime they were not already disposed to commit. Investigators and cooperating witnesses must avoid it because it can defeat a prosecution.

Related: Witness interview
Witness interview

A structured conversation to gather what a person knows, starting with open questions and moving to specifics. It differs from interrogation in that the person is not a suspect under accusation.

Related: Entrapment, Contemporaneous notes
One-party consent recording

A rule allowing a conversation to be recorded when at least one participant agrees. In all-party-consent jurisdictions, recording without everyone's knowledge can itself be a criminal offence.

Related: Invasion of privacy
Public records

Government-held documents open to inspection, such as property deeds, court filings, and corporate registrations. They are the backbone of lawful background and asset research.

Related: Skip tracing, Open-source intelligence
Open-source intelligence

Information gathered from publicly available sources such as news archives, social media, and registries. Investigators must document the source and capture the content before it changes or disappears.

Related: Public records, Due diligence
Attorney-client privilege

Protection covering confidential communications between a client and a lawyer. Investigators retained by counsel work under it, so interviews and reports may become privileged material.

Related: Engagement letter, Conflict of interest
Conflict of interest

A situation where a duty to one client or a personal interest could improperly influence professional judgment, such as investigating a competitor of a current client. It must be disclosed and usually declined.

Related: Engagement letter, Attorney-client privilege
Engagement letter

A written agreement setting out the parties, scope of work, fee structure, reporting deadlines, and limits of what the investigator will do. It prevents later disputes about cost and expectations.

Related: Retainer, Conflict of interest
Retainer

An advance payment a client makes to secure an investigator's availability and cover initial work. Billing is drawn from it, and unused funds are typically returned when the matter closes.

Related: Engagement letter
Due diligence

Pre-transaction research on a person or company, often before a partnership or acquisition. It checks litigation history, ownership, sanctions exposure, and business reputation using lawful sources.

Related: Open-source intelligence, Public records
Expert witness

A person permitted to give opinion testimony based on specialized knowledge, unlike a fact witness who describes what was seen or heard. Investigators may testify in either role.

Related: Deposition, Investigative report
Deposition

Sworn out-of-court questioning of a witness by opposing lawyers, recorded by a court reporter. Investigators prepare clients by reviewing the case file so answers match earlier reports.

Related: Affidavit, Expert witness
Workplace investigation

An internal inquiry into alleged employee misconduct such as theft, fraud, or harassment. Findings must follow company policy and may later be tested in arbitration or an employment tribunal.

Related: Witness interview, Contemporaneous notes
Stalking

A pattern of unwanted conduct that would cause a reasonable person fear, which prolonged surveillance can become if the subject is harassed. Observation must stay purposeful and documented.

Related: Invasion of privacy, Counter-surveillance
Preservation letter

A written demand asking a party to retain records, recordings, or data relevant to a dispute. It protects the investigator and client from later claims that evidence was lost.

Related: Spoliation, Stored Communications Act