IN THE MATTER OF THE CHILDREN ACT 1989
AND IN THE MATTER OF WW AND SW (CHILDREN)
B e f o r e :
____________________
Bedfordshire Borough Council |
Applicant |
|
- and - |
||
LW(1) RW(2) WW and SW(3) |
Respondents |
____________________
Mr Wraight Counsel for LW
Miss Fairclough Counsel for SW
Mr Eames Solicitor for the children
Hearing dates: 20-25 April 2015
____________________
Crown Copyright ©
Judgment re SW and WW
Introduction
Background and chronology
Exhibit number | Device | Page Ref. | Analysis |
MJI 2 | Dell laptop | H88-90 | Suspicious keywords found in swap files area including 'pedo', 'lolita', 'blackdaddy', 'hotlolitas' 'underagehost.com', 'young preteen models' |
MJI 3 | Dell laptop | H90-94 | H90-94 |
MJI 13 | Black Western Digital HD | H94-95 | H94-95 |
MJI 17 | Black Western Digital HD | H96-98 | 6 x Level 1 images found 9 x Extreme pornographic material found (8 videos and 1 image). Asian females eating human and animal faeces. One image of a female engaging in oral sex with a dog. |
MJI 38 | Black Corsair computer tower | H98-106 | Contained 4 hard drives. On Drive 1, NO relevant images found but suspicious keywords found in swap files area including 'young preteen models', 'underage4', 'chatsunderage', 'sex.preteens', 'kiddy-daddy', 'sex.sugardaddy.wanted', 'underage.admirer', 'Alyo 8yo & Ali 9yo stripping- spreading- peeing- fingering in car', 'Pedo auntie gets 5yo niece to ram her fist in her cunt' Drives 2-4 believed to be set up as a RAID 'Redundant Array of Independent Disks' (i.e. multiple drives combining to makes one much larger drive). PM was unable to completely rebuild Drives 2-4. Over 88,000 images found on Drives 2-4 2x Level 4 images 4x Level 3 images 1x Level 2 image 17x Level 1 images All images found in the unused disk area of Drives 2-4. |
MJI 40 | Dell Optiflex computer tower | H106-108 | Suspicious keywords found in swap files area including 'lolita', 'young preteen models', 'privacyunderaged', 'basicunderage', 'chatsunderage' |
MJI 41 | Black Antech tower | H112-113 | 1x Level 1 image found 5x Extreme Pornographic images depicting animal sex Over the 5 drives, PM found over 550 videos of mostly adult pornography and around 63 adult pornographic images. |
MAT 01 | Wavemaster computer tower | H113-116 | Suspicious web activity found, including 'porntubehunter.com/L84916_This+Teeny+Loves+To+ Get+Her+Ass+Rammed+Daddys+Young+Girls' |
MAT 4 | Seagate HD | H116-117 | Suspicious deleted file names found using the term 'incest' |
SA 8 | Seagate HD | H118-119 | Suspicious link files found (created when a user opens a file to provide user with a shortcut next time they try to access it). Examples included 'girlpussy reelkiddymov pedo' and 'lolita'. The link files were stored under the user name [ed. redacted] |
Exhibit number | Device | Page Ref | RW comments |
SA8 | Seagate HD | H366-7 H407-11 |
Was kept in the garage and was in use at the time it was seized. It was attached to the computer in the garage on which most things were stored. Things were stored centrally on the machine in the garage. This would have been in use when LW was living there. RW was asked about a link file dated 30.8.06 referring to 'girl pussy real kiddymov, pedyo qwerty ray gold'. RW suggested that he backed up his work computer onto SA8 before he returned it to BCS Timeless (previous employer). RW suggested that he couldn't have downloaded these files because there were firewalls at work to prevent this. He suggested that due to the date it might correspond with the nudist file he downloaded. |
MJI40 | Dell Optiflex computer tower | H369 H403 |
Used by LW but then used for 5 or 6 other people. The children mainly used it but also HR, neighbour's kids, Paternal Grandmother, RW's sister, and a previous girlfriend. It was logged on as LW but the password was never changed. HR likely to have been the last user. RW said he never used this computer but at some point would have accessed it to set it up |
MJI41 | Black Antech tower | H369 | RW's old computer then passed onto LW. It was on 24/7 and you didn't need a password to get into it. |
MJI 38 | Black Corsair computer tower | H370 H375-379 H393-6 |
RW's current computer at the time it was taken. It was logged on as him and purchased in December 2010 when he was still with LW. RW said that MJI 38 contained back ups of other people's computers. RW said that the vast storage on MJI 38 was on the RAID drives, and this was where the 'day to day things' would have gone (n.b. PM found the vast number of indecent images on the RAID drives of MJI 38- see H103-105). RW denied any knowledge of the indecent images found on MJI 38. RW surmised that 'Lolita.com' could have been a pop-up when visiting an adult website. RW said that references to 'Pre teen' and 'Lolita fucking' would have been from when he used News Demon from March 2012. RW denied subscribing to such groups. RW denied downloading 'Alyo eightYO' from eMule. He said he hasn't used eMule since around 2006. RW stated that he was not surprised all the link files came under his user name because the computer was always logged in as him and never anyone else. |
MJI2 | Dell laptop | H385-390 H416-417 |
RW said that this was an old laptop from when he worked at Capita in 2006. RW said this computer was being used by the children when it was seized and would have had family safety software installed. He said that 'Lolita.A' and 'Lolita.B' were viruses not sites. He denied knowing how suspicious search terms could have been found on the laptop. RW then stated that the suspicious search terms found were likely to be from the anti spyware on the laptops, which forms lists of sites that are blocked due to viruses. RW was asked if this referred to the swap file found, and he said No. |
MJI3 | Dell laptop | H390-392 H416-417 |
RW said this was used by the children. He denied knowing how suspicious search terms could have been found on the laptop. RW then stated that the suspicious search terms found were likely to be from the anti spyware on the laptops, which forms lists of sites that are blocked due to viruses. |
MJI 13 | Black Western Digital HD | H392 | RW said it is not possible to have a swap file on an external hard drive |
MAT01 | Wavemaster computer tower | H404 | RW said this would have been in the loft. Any references to 'Teeny' were not children. RW accepted using this computer to access adult pornography but denied accessing child pornography. References to 'sex stories post.com forced sex incest gone wrong' were the sites LW had allegedly visited. |
MAT4 | Seagate HD | H406 | RW suggested that the term 'incest' did not necessarily equate to child pornography, and that it linked back to what LW had been searching for. He denied searching for it |
Exhibit number | Device | Page Ref. | Analysis |
MJI 2 | Dell laptop | H184 H242-243 |
No passwords required to access the user accounts. Child safe web browser identified. |
MJI 3 | Dell laptop | H185 | No passwords required to access the user accounts. NO child safe web browser identified. |
MJI 17 | Black Western Digital HD | H194-211 H211-212 |
One additional Level 1 image found. 3 further extreme images found and 13 further extreme videos. No permissions were required to access the indecent images or the extreme material. The Level 1 images were all created on 3.1.10 between 20:54:37 and 20:58:38. They were all last accessed at the exact same time of 14:57:01 on 20.1.10. They were all last modified at the exact same time of 14:04:06 on 2.7.11. The SID 'security identifier' used was the same as that used on MJ1, MJ2, MJ3 and MAT01. All of these SIDs referred to RW. |
MJI 38 | Black Corsair computer tower | H187 H221-235 H225-235 H250 H251 |
No account information available. All indecent images found were in the unused disk area. No time and date information was available. Images were found in the Lost Files which were identical to the indecent images previously found. All the images found in the Lost Files area were created on 27.5.12 within 1 second of each other at 23:46. BitTorrent files were found with identical names to the extreme videos found on MJI 17. The BitTorrent files were last accessed between 23.4.08 and 4.11.11. A comparison of the creation dates/times for BitTorrent files on MJI 38 with the actual files found on MJI 17 suggests that the files were being downloaded via BitTorrent on MJI 38 and then saved onto MJI 17. In the Lost Files area there were some large files which could have been produced by backing up other computers however the content of these files could not be verified. There was evidence to suggest that RW had subscribed to a newsgroup and files had been downloaded as RW had suggested in interview [H393-6] |
MJI 40 | Dell Optiflex computer tower | H187-8 | Passwords required for the Administrator and Setup user names. No other users specified. |
MJI 41 | Black Antech tower | H235 | Not possible to date any of the images as they were found in unallocated clusters. |
MAT 01 | Wavemaster computer tower | H189-191 | Passwords required for some accounts but not others in names of RW and LW. |
[Not pursued ]
1. There was a great deal of pornographic material on the computers seized and examined. He said perhaps 'hundreds of thousands of images.'
2. His report identifies which of those images comprised illegal child pornography but it is not possible to say whether or not any of these images were viewed. There were a tiny proportion of the whole.
3. He did not have the benefit of seeing the computers set up in situ and this would have helped his investigation in relation to passwords and domain.
4. It is possible for an individual to remote access any computer provided equipped with the necessary password and material can be introduced to a computer in this way.
5. The dates and times of access cannot be relied on too much. The only reliable dates are created dates.
6. It is difficult to identify any particular user
7. The computer MJ138 could not be reconstructed in the same form thereby creating insuperable forensic difficulties.
8. The issue of security software could not be ruled out as a method by which material had innocently been downloaded.
9. He could not see any active search for illegal images of children but it could not be ruled out.
10. In relation to the mother's case that the father invited her to watch two videos involving child pornography, he identified a number of hits with a file path of the users through the medium of eMule indicating that a file with potentially illegal material had been downloaded under RW's user name. He said it was difficult to imagine any scenario other than downloading but it was not possible now to say what the contents were and therefore difficult to know whether it was unlawful material.
11. It would be possible for the computers to have been wiped or various encryption tools used.
His conduct in relation to that particular issue remains unattractive but I do not find that this is evidence that he manufactured. At the conclusion of his evidence he remained clear that the children had suffered through parental discord and had been unable to understand the difference between the family court and the criminal court. He was also able to accept that things perhaps might have been done differently with the benefit of hindsight.
"I find it highly unusual that since the court hearing in September 2013 that both WW and SW's views of their mother have continued to deteriorate where once they were happy to enjoy contact with their mother to the deterioration of them alleging physical harm and now refusing to attend contact and in particular to the extent WW placing himself at risk of absconding."
Relevant Law
Burden and Standard of Proof
"I would…announce loud and clear that the standard of proof in finding the facts necessary to establish the threshold under section 31(2) or the welfare considerations in section 1 of the 1989 Act is the simple balance of probabilities, neither more nor less."
"If a legal rule requires a fact to be proved (a 'fact in issue'), a judge or jury must decide whether or not it happened. There is no room for a finding that it might have happened. The law operates a binary system in which the only values are 0 and 1. The fact either happened or it did not. If the tribunal is left in doubt, the doubt is resolved by a rule that one party or the other carries the burden of proof. If the party who bears the burden of proof fails to discharge it, a value of 0 is returned and the fact is treated as not having happened. If he does discharge it, a value of 1 is returned and the fact is treated as having happened."
"Evidential cogency is obviously needed where the harmful event is itself disputed. However, where there is no dispute that it happened the improbability of the event is irrelevant: Re B (Care Proceedings: Standard of Proof), at paras [72] and [73]."
"in my view at times the approach of both the local authority and the Guardian came perilously close to an approach which, on the basis of the expert medical evidence, proceeded on the basis that: 'R' was the victim of a shaking injury because the medical opinion was that this was the most likely cause of his injuries, and the relevant exercise was to consider whether, given their care, and thus the opportunity they had to injure 'R', the parents could show that they did not injure him."
Assessment of the Evidence
"Evidence cannot be evaluated and assessed in separate compartments. A judge in these difficult cases must have regard to the relevance of each piece of evidence to other evidence and to exercise an overview of the totality of the evidence in order to come to the conclusion whether the case put forward by the local authority has been made out to the appropriate standard of proof."
Findings and conclusion
'A vast collection of legitimate adult pornography was kept within the family home on computers and hard drives used by both Mother and Father. The Father started building up the collection at least 10 years before the relationship commenced. Both parents were responsible for downloading legitimate adult pornography during the relationship and accept that this created a toxic and unhealthy environment within the
home that meant that they both failed to consistently prioritise the emotional needs of the children.'