Field Notes

question

Are Swedish mobile-extraction filters disclosed at trial?

StatusWorkingUpdatedStands on4 sourcesSupportsnotes

Mobile-device extraction and evidentiary selection makes an extraction report a filtered product: examiner search terms, date ranges, and selection decisions shape what reaches the court, and those filters may be invisible at trial. Its direct evidence is one Södertörn protocol that candidly disclosed its own incompleteness. The question is whether Swedish practice as a whole preserves and discloses the filters — tool versions, search protocols, excluded categories, and the path from raw artifact to exhibit — and whether any Swedish standard requires it to.

Why it matters

The answer decides whether the invisible-filters criticism describes routine Swedish practice, exceptional lapses, or a gap the disclosure rules already close. Rättssäkerhet in Swedish criminal cases uses the claim in its argument that the evidentiary pipeline’s filters escape adversarial testing; that argument needs practice evidence, not one candid protocol. The audit-requirements list in the extraction note is currently a normative standard without a measured baseline, and defence strategy in Post-seizure digital recovery depends on what the defence can actually demand.

What is already known

  • Chapter 27 of Rättegångsbalk permits seizure and copying on investigative-relevance grounds, with judicial review usually available after the fact rather than required before extraction.
  • One public Södertörn District Court protocol states that the UFED report was not complete, that deleted data might not have been recovered, and that review focused on selected dates and persons of interest.
  • Cognitive and human factors in digital forensics documents contextual and organizational bias across the forensic process, which makes undisclosed tasking and search context an accuracy problem rather than only a fairness problem.
  • NFC’s laboratories are Swedac-accredited under ISO/IEC 17025 for many forensic methods, with documented standard procedures and proficiency testing, and the prosecution service’s RåV 2022:31 governs how forensic examinations are commissioned and documented. Whether mobile-extraction methods specifically sit inside the accredited scope, and what either framework requires about search-filter disclosure, is not yet established.1
  • The vault holds no Swedish validation standard, disclosure rule, or practice survey for mobile-forensics tools and examiner search protocols.

What would settle it

  • Sample Swedish UFED reports across offence categories from public preliminary-investigation files, and record which of the audit items each report discloses.
  • Find Swedish validation and disclosure standards for mobile-forensics tools and examiner search protocols, including any forensic-laboratory accreditation requirements.
  • Establish what access the defence has in practice to the full extraction rather than the selection included in the FUP, and on what legal basis.
  • Check whether any Swedish judgment or appeal has turned on an undisclosed extraction filter or a successful demand for the excluded data.

  1. Polisen, “Metoder och standardförfaranden — forensiska undersökningar”, and Åklagarmyndigheten, Forensiska undersökningar, RåV 2022:31. Both are the agencies’ own statements of their practice, and they are the two framework documents this question turns on. Neither was found to address search-filter disclosure directly, which is why the question stands open rather than answered either way. ↩

Built on 4 sources (4 external).

Working out connections…