When is a cloud line of enquiry proportionate?¶

A cloud line of enquiry is proportionate when a focused, lawful and realistic request could materially affect an investigative or safeguarding decision, and that value justifies its intrusion, cost, delay and specialist demand.

Test value before breadth¶

Define the question and what a positive, negative or inconclusive result would change. Consider the seriousness of the matter, relevance of the account or service, likely record coverage, volatility and whether device, communications or organisational evidence could answer the question more directly.

A narrow request for recent authentication and session records may carry high value where attribution is disputed. Years of unrelated account content may add intrusion and review burden without improving the decision.

Separate preservation from acquisition¶

Short-lived records may justify immediate, targeted preservation while the value and proper acquisition route are assessed. Preservation maintains an option; it does not make a later broad request proportionate by itself.

Record expected value, records and identifiers sought, time scope, holder, urgency, costs and the point at which the enquiry will be reviewed. Jurisdiction, provider delay and technical feasibility affect whether the proposed route is realistic.

Stop or narrow the work when likely benefit no longer justifies the effort or intrusion. A proportionate decision can change as evidence or availability changes, but should not continue simply because more data might exist.