Legal analysis: The collection and extraction of electronic evidence must be carried out by two or more investigators. In general, the original storage medium of electronic data should be seized. If it cannot be seized, you can extract information or obtain evidence by printing, taking photos or video recording. When collecting and extracting electronic evidence, a written record shall be made to record the cause of action, the object and other contents, which shall be signed or sealed by the investigator and the evidence provider. When obtaining electronic evidence, there should also be qualified people as witnesses.

Legal basis: Article 14 of the Provisions on Several Issues Concerning the Collection, Extraction, Examination and Judgment of Electronic Data in Criminal Cases. When collecting and extracting electronic data, a written record shall be made to record the cause of action, object, content, time and place, the method and process of collecting and extracting electronic data, and a list of electronic data shall be attached, indicating the category, file format and integrity check value, which shall be signed by the investigator and the electronic data holder (provider). If the electronic data holder (provider) is unable to sign or refuses to sign, it shall be noted in the record and signed or sealed by the witness. If conditions permit, relevant activities should be recorded.