Normally, seized drives from business computers are returned to owner after forensic examination is over and no incriminating data is present.
However, if suspect drive contains child porn images, - as you know having these images alone is a crime-, then drives should not be returned to the owner. The same rule applies to seized hard drives that contain hundreds of credit cards numbers.
So, how does system work in your country? Do judges ask you to wipe these drives after trial and return the original drive to the owner? Or does the drive is kept forever and a new drive is bought for the company?
Or what?
Thanks
Have you considered asking the other party for a list of data that they want?
Have them identify in writing to include where it is located on the computer.
That way you could review it to make sure it is not contraband and copy it out to a DVDR? The caveat is that you must be able to review it so if it is encrypted then you would require access to view it first.
Before it is wiped. I am aware of cases where tax return data was needed and it was provided to the defendant in this manner.
Regards,
Chris Currier