How should preservation and safeguarding be balanced?¶
Define the immediate harm and evidential risk, then choose the least destructive action that protects the victim within the available time.
Compare intervention with delay¶
Identify monitoring, threats, fraud, lockout or other continuing harm. Then identify which sessions, messages, recovery details or provider records may disappear if action is taken.
Capture the original state where this does not create unacceptable delay. Consider targeted session control, one blocked contact or provider preservation before a full reset.
Make the trade-off reviewable¶
Record decision-maker, information, options, advice, action and direct effects. Do not conceal lost sessions or changed content, and do not postpone necessary safety for a technically perfect record.
Review after intervention because the victim may still need safe communications, device support and continuing monitoring.
Key takeaway
Protect the victim through a proportionate bounded action and document both the evidence preserved and the evidence changed.
