Private Investigator cheat sheet
Private Investigator · Keep the key ideas within reach.
Legal Framework, Statutes, and Licensing Regulations
Licensing is state-level: nearly all US states regulate private investigation through a statute and a licensing board or department, and a small number impose no statewide license requirement.
Typical statutory prerequisites: minimum age (commonly 18 or 21), fingerprint-based criminal history check, no disqualifying convictions, verified experience hours or a licensed sponsor, written examination, surety bond, and liability insurance.
An investigator generally must be licensed in each state where investigative services are performed; a second office location may require a separate branch-office license or registration.
Common statutory exemptions: the subject company's own employees, attorneys acting within the practice of law, and persons performing process service or repossession under a different credential.
Activities often requiring a separate credential: process serving, bail bond recovery, collateral repossession, polygraph examination, alarm and security consulting.
Penalties for unlicensed activity typically include misdemeanor criminal charges, administrative fines, denial or revocation of a future license, and civil injunctive relief.
Renewal usually requires continuing education hours, continuation of bond and insurance, and a clean disciplinary record; license and identification must be produced on request where the statute says so.
Statutory definitions control coverage: investigating for hire and obtaining information about a person's identity, habits, conduct, movements, or location is the common core of regulated conduct.
Ethics, Professional Conduct, and Privacy Obligations
FCRA: procuring a consumer report requires a permissible purpose; employment use requires a standalone written disclosure, the subject's authorization, and adverse action notices if action is taken.
FCRA misconduct-investigation exception: an investigation of suspected employee misconduct that is not used for creditworthiness and not disclosed to anyone other than the employer may fall outside 'consumer report' status, but the exception has limits.
GLBA (15 U.S.C. 6821) criminalizes obtaining a financial institution's customer information by false pretenses; penalties include fines and imprisonment.
DPPA (18 U.S.C. 2721 et seq.) restricts disclosure of personal information in motor vehicle records to enumerated permissible uses; the requester must certify the purpose and may face statutory damages for misuse.
Recording decision rule: identify the jurisdiction's consent rule first; one-party consent permits recording with one participant's agreement, all-party consent requires every participant's.
Social media: using a false identity or requesting account passwords to obtain another's private content may violate state statutes, platform terms, and computer crime laws.
Data minimization: collect only information relevant to the client's stated permissible purpose and avoid retaining health, financial, or biometric data without a documented need.
Conflict rule: decline or disclose an engagement where the investigator has a personal, financial, or prior-client relationship with a party, witness, or opposing counsel.
Confidentiality: client information and work product are disclosed only as authorized by the client, required by law, or compelled by subpoena or court order.
Evidence Collection, Chain of Custody, and Admissibility
Chain of custody record elements: item description, unique identifier, collector's name, date/time/place of collection, each transfer (from, to, date, time, reason), storage location, and seal number.
Seal rule: sign or initial across the seal so any opening is detectable; reseal with a new dated seal rather than overwriting the original.
Authentication (FRE 901): the proponent must produce evidence sufficient for a reasonable jury to find the item is what it is claimed to be, through witness knowledge, distinctive characteristics, or hash comparison.
Digital evidence: work from a forensic image made with a write-blocker; record MD5 or SHA-256 hash at acquisition and verify it before and after analysis; preserve metadata and original media.
Best evidence rule (FRE 1002): the original writing, recording, or photograph is required to prove its content unless a duplicate or an enumerated exception applies.
Packaging rule: use paper, not plastic, for biological and moist items; breathable containers for arson or accelerant evidence; package items separately to prevent cross-contamination.
Spoliation: the duty to preserve arises when litigation is reasonably anticipated, and loss of evidence can produce adverse inference instructions, exclusion, or monetary sanctions.
Photographs are ordinarily admissible when a witness with knowledge testifies the image fairly and accurately depicts the scene at the relevant time; metadata and chain documentation support authenticity.
Surveillance Techniques and Counter-Surveillance
Surveillance log entries: date, start and end times, location and address, subject and vehicle description with plate, activity observed, weather and lighting, equipment used, and investigator initials.
Public vantage rule: observation and photography from public streets and other public places generally do not violate privacy, but recording into a residence or other private space can constitute an intrusion.
GPS tracking: United States v. Jones (2012) held that physically installing a GPS device on a vehicle to monitor its movements is a search; state statutes may impose additional consent or warrant requirements.
Mobile surveillance spacing: keep one to three vehicles between the investigator and the subject, vary lane and position, and break off rather than risk detection.
Counter-surveillance indicators of a tail: repeated presence at turns, matching lane changes, a vehicle that stops when you stop; the response is a series of turns or a highway loop, not confrontation.
Covert camera placement: avoid restrooms, changing rooms, and bedrooms; document camera location, field of view, and clock synchronization, and avoid audio capture unless lawfully authorized.
Static versus mobile selection rule: choose a fixed post when the subject's location is known and the goal is documenting presence and activity; use mobile surveillance when the subject moves between locations.
Interviews, Statements, and Investigative Questioning
Miranda warnings are constitutionally required only for custodial interrogation by government agents; a privately retained investigator generally has no Miranda obligation.
Non-custodial interview safeguards: state at the outset that participation is voluntary and the person may leave or decline to answer, and document that statement on the record.
Cognitive interview sequence: reinstate mental context, request everything remembered, recall in varied order, change perspective, then review the account.
Statement reliability: record the exact questions asked and note whether answers were spontaneous or prompted; avoid leading questions that supply facts the subject did not volunteer.
Written statement elements: date, time, location, declarant identifying information, voluntariness language, the statement in the declarant's own words, signature, witness signature, and notarization if sworn.
Behavioral cues such as gaze aversion or fidgeting lack validated accuracy for deception detection and should not be reported as evidence of lying.
Vulnerable subjects (minors, cognitively impaired, limited English proficiency) require a support person, a qualified interpreter, and simplified questioning, with accommodations documented.
Deception about evidence by an interviewer is lawful in most US jurisdictions but increases false-confession risk and can undermine the statement's reliability and credibility.
Criminal and Civil Investigation Procedure
Burden standards: criminal conviction requires proof beyond a reasonable doubt; civil liability requires a preponderance of the evidence, meaning more likely than not.
Probable cause for arrest exists when facts and circumstances would lead a reasonable person to believe an offense was committed and that a particular person committed it.
Civil discovery tools: interrogatories, requests for production, requests for admission, depositions, and subpoenas directed to non-parties.
Subpoena duces tecum commands production of documents; subpoena ad testificandum commands appearance to testify; both require proper service and compliance with distance and travel rules for non-parties.
Proof of service affidavit typically states the server's identity, date, time, place, method, and person served, and must conform to the applicable rules of civil procedure.
Statutes of limitations run from accrual of the claim or discovery of the injury; the specific period depends on the claim type and jurisdiction.
When a matter may become criminal, preserve evidence and coordinate with law enforcement; never alter, conceal, or destroy items to shield a client.
Purpose distinction: a civil investigation develops evidence to support a claim or defense, while a criminal investigation supports prosecution and carries constitutional constraints on state actors.
Report Writing, Documentation, and Case File Management
Report structure: case number, client, date/time/location, persons present, observations in chronological order, actions taken, evidence collected, and a separately labeled conclusion.
Objectivity rule: report observed facts and verbatim quotations, label opinions and inferences as such, and record 'unknown' rather than estimating.
Contemporaneous notes are the primary record; retain the originals, never destroy or rewrite them, and cite them when preparing the formal report.
Correction protocol: draw a single line through an error, initial and date it, and write the correction; never use correction fluid, erasure, or overwriting.
Litigation hold: suspend routine destruction as soon as litigation, a formal investigation, or a preservation letter is reasonably anticipated, and document the hold and its compliance.
Redaction: remove or mask personal identifiers not relevant to the authorized purpose, and log what was redacted and the reason.
Case file security: role-based access, encrypted storage, an audit trail of who accessed what, and secure destruction at the end of the retention period.
Retention periods derive from statute, licensing rules, insurance requirements, and the client contract; the longest applicable period controls.
Searches, Trespass, and Property Rights Boundaries
State action requirement: Fourth Amendment limits bind government actors; a private investigator becomes a state actor if acting at police direction or as an agent of law enforcement.
Trespass requires unauthorized entry onto land in possession of another; consent from a person with authority over the property defines the permitted scope of entry.
Curtilage, the immediate area around a dwelling such as a yard or porch, receives Fourth Amendment protection; open fields do not, but private trespass law still restricts entry on private land.
Intrusion upon seclusion requires an intrusion into a place or conversation where the plaintiff had a reasonable expectation of privacy, in a manner highly offensive to a reasonable person.
Photographing a home's interior through a window from a public place may still be an intrusion if it captures activity in a private area.
Dumpster searches: courts frequently find no reasonable expectation of privacy in trash placed for collection, but state law and municipal ordinances may differ.
Never impersonate law enforcement; false representation of official status is a separate crime and can taint both evidence and the case.
Property boundary verification: confirm ownership and authority through public records or the client before entry; a tenant's permission does not necessarily override the owner's restrictions.
Business Operations, Client Contracts, and Recordkeeping
Engagement letter contents: parties, scope, deliverables, fee structure, expense policy, confidentiality, conflicts, termination, and permissible purpose certification.
Fee structures: hourly plus expenses, flat fee per assignment, and retainer draw-down; contingent fees are prohibited or restricted for some licensed activities and attorney-adjacent work.
Client funds: where required, hold advance retainers in a separate trust or escrow account and reconcile monthly against time and expense records.
Kovel doctrine: an investigator retained by an attorney to assist in providing legal advice may be covered by attorney-client privilege and work product protection; document the attorney's direction.
Insurance: professional liability (errors and omissions), general liability, and commercial auto are commonly required or prudent; confirm the state's minimum coverage rule.
Business formalities: register the entity, file an assumed name certificate, obtain a business license and tax identification number, and keep the PI license in the licensed individual's name.
Billing records should tie each time entry to a case number, date, task, and duration; expense receipts should be retained with the corresponding invoice.
Data disposal: destroy client records and personal information according to contract and statute using secure methods, and document the destruction.