CHFI Computer Forensics Fundamentals and Process Practice Question
In a UK-based investigation, which legal framework governs the search and seizure of digital evidence?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
PACE (Police and Criminal Evidence Act)
The Police and Criminal Evidence Act 1984 (PACE) provides the legal framework for police powers, including search and seizure of digital evidence in the UK.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Electronic Communications Privacy Act
Why it's wrong here
The Electronic Communications Privacy Act (ECPA) is a US federal law that governs the interception and access of electronic communications and stored data, but it has no jurisdictional authority in the United Kingdom. For a UK-based investigation, lawful access to communications data falls under the Investigatory Powers Act 2016 or the Regulation of Investigatory Powers Act 2000, not ECPA. Therefore, ECPA is not the governing legal framework.
- ✓
PACE (Police and Criminal Evidence Act)
Why this is correct
The Police and Criminal Evidence Act 1984 (PACE) is the primary legal framework for police powers in England and Wales, covering stop and search, arrest, detention, and the seizure of evidence. Its Codes of Practice, particularly Code B, set out detailed procedures for searching premises and seizing property, including digital devices, to ensure lawfulness and admissibility. In a UK-based investigation, PACE is the correct framework for authorising and conducting searches and seizures, and it also provides exclusionary powers under section 78.
- ✗
Fourth Amendment
Why it's wrong here
The Fourth Amendment to the US Constitution protects individuals from unreasonable searches and seizures by government actors within the United States, and its remedies operate through the exclusionary rule to suppress unlawfully obtained evidence. It does not apply to UK police powers, which are governed by PACE and the Human Rights Act 1998. Fourth Amendment jurisprudence may only be relevant in UK proceedings when evidence was collected by US authorities for use in a US context, not as a direct source of UK investigative authority.
- ✗
GDPR
Why it's wrong here
The General Data Protection Regulation (GDPR), as retained in UK law alongside the Data Protection Act 2018, regulates the processing of personal data but does not confer any police powers of search or seizure. Investigators must comply with data protection principles when storing, analysing, and sharing seized data, but the legal authority for the search itself comes from PACE or other statutory powers. GDPR is not a criminal procedure framework and cannot authorise the acquisition of evidence, making it the wrong answer here.
Go deeper
Related to this question
About these practice questions
One of 745 original CHFI practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CHFI practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CHFI exam.