Fact Investigation

Investigate to resolve an issue

A legal investigation should answer a defined question. Begin with the claim, defense or decision at issue and identify the factual elements that control it. Broadly collecting information without a theory wastes time and can obscure evidence that matters.

For each element, note what is established, what is disputed, what is missing and which source could resolve the gap. Sources may include documents, people, physical evidence, digital records, public filings or expert analysis, depending on the problem.

Build a fact map

Create a timeline with dates, actors, communications and key decisions. Identify which facts come from firsthand observation and which are repeated from someone else. Record the source and reliability of each fact. Contradictions should remain visible until resolved; do not choose the version that favors the client without support.

The chart is a planning device, not a conclusion. It helps identify high-value follow-up and reduces the chance of overlooking contrary facts.

Choose proportionate methods

Select a method that can answer the question with appropriate reliability and cost. A short client interview may clarify who received a notice; a document request may verify delivery; an expert inspection may evaluate a mechanical defect. Consider urgency, privacy, preservation obligations, client resources and legal limits.

Use open questions to obtain a narrative, then ask specific questions about dates, participants, documents and exact words. Preserve originals and metadata where relevant. Document who collected information, when and how, so that the source and chain of custody remain clear.

Test competing explanations

A strong investigation tests the best alternative explanation, not only the preferred theory. If a customer alleges a device failed because of a defect, examine maintenance, installation, misuse and other causes. If an email appears to give notice, verify who sent it, who received it and what the attachment contained.

Look for disconfirming evidence early. This can reveal a weakness while there is still time to investigate, negotiate or revise advice. An advocate's role does not justify ignoring facts that affect the client's position.

Ethics and preservation

Investigations must respect confidentiality, privilege, privacy, applicable contact rules and preservation duties. Do not destroy, alter or conceal relevant evidence. A legal hold may be needed when litigation is reasonably anticipated. Follow the task's instructions and applicable law when collecting digital or third-party information.

Distinguish privileged communications from underlying facts. A client may have a privilege over a communication seeking legal advice, but the fact of an event does not become privileged simply because it was reported to counsel.

Timed task method

1. Write the legal issue and its factual elements.
2. Build a short timeline and mark source reliability.
3. Identify the two or three facts most likely to change the outcome.
4. Choose a targeted, lawful method to obtain each fact.
5. State how each possible answer would affect advice or litigation strategy.
6. Report conclusions with limitations and next steps.

In an exam file, investigation questions should be practical and tied to a legal consequence. ‘Interview everyone’ is less useful than ‘confirm who received the written notice because the statute makes receipt a prerequisite to the cure period.’

Rank questions by legal consequence and urgency

Not every unknown fact deserves equal investigation. Rank gaps by whether they affect a legal element, a deadline, evidence preservation or an immediate client decision. A missing receipt may determine whether a cure period started. The color of a delivery truck probably does not matter unless identity is disputed. This ranking keeps investigation focused and proportionate.

Use a table with four columns: issue, known evidence, missing fact, and next source. For a notice issue, the known evidence may be an email copy; the missing fact may be delivery to the contract address; the source may be server logs or an acknowledgment. State what each possible answer would change.

Evaluate source quality and corroboration

A document's existence does not establish that its contents are true. Record who created it, when, for what purpose and from what knowledge. A contemporaneous business entry may be more reliable than a later summary, but it may still repeat an outsider's claim. Corroborate important facts with independent records or witnesses when possible.

A client recalls a phone call in which the supplier accepted a new date. Look for call logs, follow-up emails, calendar notes or a later course of performance. Ask whether another person heard the call and what exact language was used. This can distinguish a binding modification from an informal discussion.

Preserve evidence before it changes

When a dispute or claim is foreseeable, preservation can be urgent. Identify relevant devices, accounts, records and custodians. Preserve originals and metadata where appropriate; do not edit, delete or selectively export material in a way that changes context. Follow legal and ethical limits when collecting information from third parties or personal devices.

If a product may have failed because of a defect, document its condition before repair or disposal. Record who handled it and when, preserve packaging and service records, and consider whether expert inspection is needed. Investigation should protect both the evidence and the client's ability to continue operating safely.

Interview without turning assumptions into facts

Begin with an uninterrupted account, then ask targeted questions about chronology, participants, exact words and documents. Use neutral wording. “What did the supplier say about the date?” is better than “The supplier agreed to the new date, correct?” The second question assumes the conclusion and may distort the account.

When accounts conflict, preserve both versions and identify what could test them. If one employee says the warning was delivered and another says it was only drafted, seek the sent copy, transmission record and recipient confirmation. The investigation should not resolve a dispute by choosing the account that favors the client.

A worked investigation plan

A client alleges that a former employee took confidential customer information. First identify the legal theory and elements, such as ownership or confidentiality, access, use and harm under the rules supplied in the task. Preserve access logs, employee devices, confidentiality agreements and customer communications. Interview the client about how the list was created, who could access it and what safeguards existed. Obtain the employee's role and departure timeline.

Test alternative explanations: the list may have been public, created by the employee, or downloaded for an authorized business purpose. Determine whether any customer was contacted and what information was used. Tie each investigative step to an element or remedy. A broad request to “search all devices” without scope, authority or preservation controls is not a sound plan.

Make an investigation plan proportionate

Choose investigative steps based on importance, reliability, urgency, privacy and cost. A quick record request may resolve a delivery-date dispute; a forensic review may be disproportionate unless electronic access is central. Identify who is authorized to collect the material and preserve it without changing content or context.

Report findings with their source and limitation. “The shipping portal shows delivery at 4:12 p.m.” is stronger than “the package was delivered” if the portal identifies only an address scan and not the recipient. State what additional evidence would establish receipt if that fact controls the legal period.

Update the analysis when evidence changes

Investigation is iterative. When a new record or witness account arrives, compare it with the current fact map and revise the legal analysis. If the evidence contradicts the client's initial account, investigate the discrepancy rather than deleting the earlier version. A changed fact can affect liability, credibility, settlement value and preservation needs.

If a delivery record shows receipt at a different address, determine whether the location was authorized and who signed. The new evidence may support actual receipt, misdelivery or a record error. Identify the source and seek a second record or witness before drawing a final conclusion.

Report limits as well as findings

A useful investigation summary explains what was reviewed, what was established, what remains disputed and what steps were not possible. Do not describe a search as exhaustive if it covered only one account or time period. State limitations so the reader can judge the strength of the conclusion.