{"id":568,"date":"2026-07-27T07:00:51","date_gmt":"2026-07-26T21:00:51","guid":{"rendered":"https:\/\/qld.cybersafebusiness.au\/index.php\/2026\/07\/27\/smartphones-are-now-central-to-digital-investigations-and-the-pressure-is-growing\/"},"modified":"2026-07-27T07:00:51","modified_gmt":"2026-07-26T21:00:51","slug":"smartphones-are-now-central-to-digital-investigations-and-the-pressure-is-growing","status":"publish","type":"post","link":"https:\/\/qld.cybersafebusiness.au\/index.php\/2026\/07\/27\/smartphones-are-now-central-to-digital-investigations-and-the-pressure-is-growing\/","title":{"rendered":"Smartphones Are Now Central to Digital Investigations \u2014 and the Pressure Is Growing"},"content":{"rendered":"<p>Smartphones have quietly become one of the most important sources of evidence in modern investigations.<\/p>\n<p>According to a new global survey from Cellebrite, mobile devices are now cited in 97% of criminal investigations, making them the single most relied-upon source of digital evidence. That figure represents a sharp rise from 73% in 2024, reflecting how quickly investigations have shifted toward mobile-first data.<\/p>\n<p>The findings are drawn from Cellebrite\u2019s latest industry trends report, based on responses from 1,200 digital forensics practitioners across 63 countries. What stands out is not just how common mobile evidence has become, but how central it is to case workflows.<\/p>\n<p>For many investigators, phone data is no longer supplementary \u2014 it is now the starting point.<\/p>\n<h2>Digital Evidence Is Increasing Case Solvability \u2014 and Workload<\/h2>\n<p>Public safety respondents overwhelmingly agreed that digital evidence makes cases easier to solve. In the survey, 95% said digital evidence increases solvability, reinforcing how critical device data has become in building timelines, identifying relationships, and corroborating events.<\/p>\n<p>At the same time, 94% said the growing complexity of digital evidence is straining caseloads. Messages, images, videos, app data, and cloud-linked information can quickly multiply into vast datasets that must be reviewed carefully and defensibly.<\/p>\n<p>Despite this pressure, organisational change has been slower than the growth in evidence volumes. Only 62% of agency leaders said they have shifted resources away from legacy investigative methods toward digital approaches, pointing to ongoing gaps in staffing, training, and process redesign.<\/p>\n<h2>Review Time Is the Biggest Bottleneck<\/h2>\n<p>One of the clearest operational challenges identified in the report is review time.<\/p>\n<p>Around two-thirds of respondents said reviewing digital evidence is the single biggest barrier to progressing cases. This reflects the sheer volume of data investigators now face, particularly when analysing large numbers of communications, media files, and application records from smartphones.<\/p>\n<p>As investigations increasingly rely on digital sources from day one, review capacity has become just as important as data extraction.<\/p>\n<h2>AI Is Seen as Helpful \u2014 but Policy Often Gets in the Way<\/h2>\n<p>Artificial intelligence is widely viewed as a way to help investigators keep pace with growing evidence volumes. In the survey, 65% of public safety respondents said AI could accelerate investigations, particularly by assisting with analysis and pattern identification.<\/p>\n<p>However, nearly one-third said their agency\u2019s policies currently prevent AI from being used, highlighting a disconnect between perceived value and practical adoption.<\/p>\n<p>One area where AI stood out was communications analysis. Practitioners pointed to AI\u2019s ability to quickly analyse messages and identify links between people as one of its strongest use cases.<\/p>\n<p>At the same time, concerns about governance, transparency, and public trust remain central.<\/p>\n<p>As Matt Scott noted, the relationship between the public and law enforcement depends on trust. Any use of AI or automation must include safeguards, public consultation, and clear boundaries to ensure that decision-making remains with human officers and staff.<\/p>\n<h2>Investigations Are Becoming \u201cDigital First\u201d<\/h2>\n<p>Several practitioners described a fundamental shift in how investigations now begin.<\/p>\n<p>\u201cDigital evidence is increasingly where our investigations begin,\u201d said James Howe. Rather than being confined to specialist labs, digital evidence is shaping case strategy from the outset, forcing agencies to rethink workflows across entire organisations.<\/p>\n<p>From a technology provider perspective, Cellebrite described this data growth as unavoidable.<\/p>\n<p>\u201cIt\u2019s clear digital evidence is the backbone of modern justice,\u201d said David Gee. As the number of devices and data sources continues to grow, agencies are being pushed to adopt tools and processes that allow them to work efficiently while preserving accuracy and evidentiary integrity.<\/p>\n<h2>Cloud Adoption Is Growing \u2014 but Slowly<\/h2>\n<p>The report also highlights uneven progress in how digital evidence is stored and shared.<\/p>\n<p>Receptiveness to cloud-based digital evidence management rose to 42% in 2026, up from 38% the year before. Even so, traditional methods remain widespread. Two-thirds of respondents said they still share evidence using portable hard drives or USB sticks.<\/p>\n<p>These practices can introduce risks around access control, tracking, and chain of custody. They can also slow collaboration between teams and agencies, especially when large files must be manually transferred and re-ingested into separate systems.<\/p>\n<h2>Digital Evidence Is Expanding Beyond Law Enforcement<\/h2>\n<p>The survey also examined private-sector investigations and found similar trends emerging across business environments.<\/p>\n<p>Digital evidence is increasingly embedded into routine business operations, with AI adoption moving from planning into active implementation. Among private-sector respondents, the most common investigation types included eDiscovery, data theft, and network exploits.<\/p>\n<p>Mobile data appeared in 66% of private-sector investigations, while computer storage and cloud data each featured in nearly half. More than half of respondents said AI-assisted communication analysis helped accelerate outcomes.<\/p>\n<p>As Colin Duncan explained, organisations are focusing more on preparedness rather than purely reacting after incidents occur. The goal is consistent, defensible understanding of data across systems \u2014 with AI used responsibly to speed analysis without sacrificing accountability.<\/p>\n<h2>A CSB Perspective<\/h2>\n<p>At CSB, we see these findings as part of a broader shift. Digital evidence \u2014 particularly from smartphones \u2014 is no longer a niche capability. It is becoming foundational to investigations across public safety, legal, and corporate environments.<\/p>\n<p>As data volumes grow, the challenge is no longer just access to evidence, but how quickly, securely, and responsibly it can be reviewed and shared. Tools like AI offer meaningful opportunities to reduce workload and improve outcomes, but only when paired with clear governance, policy alignment, and human oversight.<\/p>\n<p>The future of investigations is digital-first \u2014 and organisations that adapt their processes, skills, and safeguards accordingly will be far better positioned to keep pace.<br \/><b><br \/>&nbsp; Source &amp; Credit<\/b>\n<\/p>\n<p>Adapted from insights and survey findings published by Cellebrite, based on responses from global digital forensics practitioners.&nbsp;&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Smartphones have quietly become one of the most important sources of evidence in modern investigations. According to a new global survey from Cellebrite, mobile devices are now cited in 97% [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":567,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-568","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/568","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/comments?post=568"}],"version-history":[{"count":0,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/568\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media\/567"}],"wp:attachment":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media?parent=568"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/categories?post=568"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/tags?post=568"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}