Is forensic recovery possible?

Forensic recovery is a procedure that uses professional digital forensic equipment and techniques to restore deleted or damaged data from mobile phones, PCs, and storage media as close to the original as possible.

When forensic recovery is conducted to secure evidence in civil cases (divorce and consolation money) or criminal cases (stalking, etc.) such as a spouse's infidelity, the following legal requirements must be met for the digital evidence to be effective.

(1) Guarantee of identity and integrity

First, you must prove that the recovered data has not been tampered with.

(2) Lawful collection procedures

It must be collected lawfully in accordance with related laws such as the Personal Information Protection Act and the Protection of Communications Secrets Act, and illegal collection that violates illegal photography or another person's privacy may not be recognized as having evidentiary capacity.

(3) Specialized institution analysis report

If you submit an appraisal certificate or analysis report from a credible digital forensic specialized institution along with it, the court's reliability will increase.

However, even for deleted data, if the storage space has already been overwritten, recovery may be impossible, so the urgency of evidence acquisition is very important.

Therefore, it seems wise to minimize unnecessary use and quickly receive help from an attorney or digital forensic expert.