There seems to be a simple solution here. Most corporate email systems archive emails. Even if a user deletes the email 100 times then it has no impact on the archive since the email is archived before it even hits the user inbox. Investigators then just search the archive.
Having said that, it was noted today in the TC that Duncan is claiming that the deleted emails were likely innocuous and had no bearing on the highway of tears issue. He would know since they were his emails that were deleted. He was reporting the process not a concern over the content of the emails.
At what level of government does an employee have the right to choose what is "innocuous" and has no bearing on an issue.
Sometimes the most trivial piece of information is the key to solving a problem, just like a good old gumshoe like Columbo used to do.
But another thing is the protocol being used, and I am no expert on this, but I did deal with this a few years ago when the Telus server said I had too much stuff stored.
I switched from a POP protocol to an IMAP protocol.
This allowed me to delete redundant emails from the server, but still keep them on my desktop computer if I so desired.
I don't know what protocol the government uses, but someone here can probably shed so light on this.
more on Pop vs IMAP here.
http://fourpointscon...imap-versus-pop