The Reformatting Problem: Surveillance Video, Chain of Custody, and a Hearing in Three Weeks

The integrity of the evidence has been compromised in several ways, some curable and one not.

Defects:

• Original medium destroyed. Reformatting the card destroyed the original; copies on a laptop are secondary evidence. Worse, the card was reused, so nothing on it is recoverable from its current state.
• No hash values or custody log. Nothing shows the files were unaltered between download and delivery. Without hashes and a transfer log, any discrepancy is indefensible.
• Personal Dropbox. Client evidence in a personal cloud account is both a confidentiality problem and an authentication problem - no access controls, no audit trail.
• Re-encoded highlight reel. Editing changes the file, strips metadata, and produces a derivative, not the evidence.

What to do now:

1. Litigation hold immediately. Suspend deletion, overwriting, or 'cleanup' of any device, account, or file.
2. Image the laptop and attempt forensic recovery of deleted files; document the attempt even if it fails.
3. Hash every native file (SHA-256), create read-only master copies in two firm-controlled locations, and start a signed chain-of-custody log covering every custodian and transfer.
4. Keep the highlight reel but relabel it a derivative compilation; the evidence is the continuous native footage.
5. Write a supplemental report documenting the reformatting, the download, the upload, and the recovery attempt, with dates and names.

You cannot restore the original. You can show exactly what happened, in your own words, before opposing counsel does it for you.

Respond, preserve, and produce in an organized package - do not resist.

• Acknowledge and preserve. Notify the client and its counsel the day the subpoena arrives; a subpoena triggers a duty to preserve. Do not allow the adjuster to reorganize or discard the file.
• Assert protection narrowly. Notes reflecting the investigator's impressions and strategy may be work product, and client communications are protected, but the underlying video and photographs are facts and will be produced. Assert protection in a written index with specific document descriptions rather than withholding silently.
• Produce:
  • native video files for all four days, with capture times and hash values;
  • the 112 stills in their original format;
  • the chain-of-custody log and a signed declaration from Okafor describing the camera, the downloads, the Dropbox upload, and the reformatting;
  • the surveillance reports and daily activity logs;
  • the derivative six-minute reel, labeled as a derivative.
• Withhold: attorney and client communications, billing records, and unrelated case files. Redact third parties where possible without altering the substance.
• Timing. Three weeks before a Board hearing is tight. Serve the production with a cover letter and an affidavit of compliance, and give the carrier's counsel enough time to prepare direct testimony.

If the reformatting cannot be explained cleanly, tell the client's counsel now. A surprise on cross-examination is far more damaging than a disclosed gap.

Authentication is the case; the report must be built so a stranger can use it.

• Lay a personal-knowledge foundation. Okafor must testify that the recording fairly and accurately depicts what he saw: he operated the camera, it was functioning, the date and time stamp was correct (document a check against a reliable clock each day), and the files were not altered after capture. If he cannot, a 'silent witness' foundation requires proof of the equipment's reliable operation and an unbroken custody chain - weaker here because of the reformatting.
• Play the continuous footage, not the reel. Walk the hearing officer through each segment. Identify and explain every gap in recording - battery change, repositioning, weather - in advance. Documented gaps are survivable; gaps discovered on cross are not.
• Required report content: date; start and stop times; location with street address and description; weather and lighting; distance to subject and how it was measured; camera, lens, and storage; who else was present; what the subject did, in observable terms; and every break in recording.
• Neutral language. 'The subject lifted and carried a 40-pound bag approximately 30 feet' beats 'the subject faked his injury.' Conclusions belong to the fact finder.
• Media log. File names, hashes, storage location, and each transfer, with times and custodians, referenced in the report.
• Anticipate the counterattack: editing, out-of-context clips, or a single good day during a bad month. Pre-empt it with the continuous record and the daily activity log showing hours when the subject was observed doing nothing notable.

A perfect video with a broken chain is worth less than ordinary video with an impeccable one.