Devices, privacy, blocking, reporting and preserving evidence

When an online incident is active, staff need clear, practical steps for handling devices and evidence. Actions should protect the child immediately, avoid destroying useful evidence, and stop the home from becoming an amateur investigation team. Usernames, handles, screen names, links, timestamps and screenshots can all be relevant.
Staff must follow local policy on devices, consent, searching and privacy. They must not impersonate children online, contact suspected perpetrators from personal accounts, or store risky material on staff phones. Blocking and reporting have a role, but timing matters if urgent safeguarding or police action is needed.
Practical evidence and device principles
- Preserve key details: usernames, app names, messages and times may matter.
- Do not over-handle the device: unnecessary interference can lose evidence.
- Do not use personal staff accounts: staff should never enter the digital situation as themselves.
- Follow lawful process: searching, seizing or examining devices should match policy and safeguarding need.
- Be transparent where safe: children should understand what is being done and why.
Do not let urgency push the team into actions that lose the very information needed to protect the child.

