Home / Trending / Wagg Screening Part 3: Volatile Memory Dumps, CPIC Telemetry, and Electronic Intrusions

Wagg Screening Part 3: Volatile Memory Dumps, CPIC Telemetry, and Electronic Intrusions

September 14, 2026

The Jurisdictional Adjudication of Digital Forensic Records Under Wagg: Volatile RAM Dumps, CPIC Telemetry, and the Implied Undertaking Rule (Part 3 of 3)

Opening Question

When state law enforcement officers execute an electronic intrusion or digital asset seizure—capturing volatile RAM memory dumps, mobile device extractions, and Canadian Police Information Centre (CPIC) transactional logs—does the common-law Wagg framework encompass digital-forensic telemetry, and how does the strict operation of the Implied Undertaking Rule prevent the unauthorized weaponization of unredacted state data in private litigation?

Direct Answer Paragraph

The digital forensic extraction of state telemetry affords absolutely no administrative immunity to police custodians. Relying upon Herbert Broom’s equitable maxim probatio vincit praesumptionem (proof overcomes presumption), superior courts dictate that Wagg extends to volatile electronic telemetry, rendering unauthorized digital withholding absolute evidentiary nullities.

Overview

This publication concludes the definitive three-part legal treatise on the Wagg screening protocol across Canadian superior courts. Over Parts 1 and 2, this treatise deconstructed the formal jurisdictional gateway under D.P. v. Wagg (2005), 76 O.R. (3d) 387, and analyzed the semantic four-part public interest immunity balancing test governing non-party production under Rule 30.10.

Part 3 delivers the forensic and technological litigation manual: elevating the traditional Wagg doctrine into the digital era to capture electronic evidence, network telemetry, and unredacted digital extraction dossiers generated during state criminal investigations.

In contemporary policing, an investigative “file” is no longer confined to physical paper occurrence reports or spiral-bound officer notebooks. When major municipal police services (such as the Toronto Police Service or Ottawa Police Service), the Ontario Provincial Police (OPP), or the Royal Canadian Mounted Police (RCMP) investigate complex financial crimes, corporate espionage, cyber-extortion, or fatal motor vehicle collisions, the evidentiary core consists of complex digital forensics:

Volatile Memory (RAM) Dumps: Capturing live, ephemeral Random Access Memory from seized servers or workstations prior to shutdown, preserving unencrypted cryptographic keys, transient messaging artifacts, and active memory pools.
Mobile Device Extractions (UFDR / Cellebrite): Multi-gigabyte binary images capturing deleted text messages, encrypted messaging databases (Signal, WhatsApp), geolocation trails, and application telemetry.
CPIC Transactional Telemetry: Packet-switched telecommunications ledgers recording Message Keys (MKEYs), Originating Agency Identifiers (ORIs), and physical workstation Terminal Identifiers (TIDs) documenting how warrants were broadcast, modified, or cleared across the national mainframe.

When a civil litigant moves under Rule 30.10 to compel the production of these digital assets, the state routinely resists by asserting that Wagg was engineered for paper records, and that electronic forensic telemetry is too complex, confidential, or voluminous to screen.

Superior courts forcefully reject this digital evasion. A “document” under Rule 30.01(1)(a) explicitly encompasses electronic recordings, digital data, and computational files. Digital forensic extractions executed by state actors fall squarely within the Wagg jurisdiction. However, because digital files contain vast oceans of un-redacted, intimate biographical data touching innocent third parties, superior courts enforce an uncompromising, two-tiered safeguard:

First, the court commands the appointment of an independent Special Referee or Digital Master under Rule 54 to deconstruct the digital extraction, apply targeted keyword search filters, and segregate non-party data.

Second, the court strictly enforces the Deemed/Implied Undertaking Rule codified under Rule 30.1 of the Rules of Civil Procedure (reinforced by the Supreme Court of Canada in Juman v. Doucette, 2008 SCC 8). The party receiving the digital forensic records is bound by an absolute, non-waivable undertaking: the digital telemetry cannot be used, disseminated, published, or weaponized for any collateral purpose outside the precise civil action in which it was produced, without explicit, prior judicial leave. Violating this undertaking constitutes civil and criminal contempt of court, rendering the tainted evidentiary use an absolute nullity and exposing counsel to devastating personal sanctions.

Legal Domain/Area Identification

Civil Procedure (Non-Party Digital Discovery under Rule 30.10, The Deemed Undertaking Rule under Rule 30.1, and Court Referees under Rule 54), Digital Asset Forensics (Volatile RAM Dumps, Cellebrite UFDR Mobile Extractions, and CPIC Hexadecimal Telemetry), Evidence Law (Systemic Integrity under ss. 31.1–31.8 of the Canada Evidence Act), Constitutional Law (Section 8 Biographical Core and Privacy Rights), and the Doctrine of Nullity.

The Digital Forensic Wagg Extraction & Screening Pipeline

Superior courts and digital forensic examiners execute the screening of state electronic evidence through an objective, multi-stage pipeline:

                  ┌─────────────────────────────────────────────────────────┐
                  │          DIGITAL FORENSIC WAGG APPLICATION              │
                  │             (ELECTRONIC DISCOVERY GATEWAY)              │
                  └────────────────────────────┬────────────────────────────┘
                                               │
                                               ▼
                  ┌─────────────────────────────────────────────────────────┐
                  │    STEP 1: TARGETING STATE DIGITAL TELEMETRY            │
                  │   • Volatile Memory RAM dumps (unencrypted keys)        │
                  │   • Cellebrite / Axiom mobile device extraction images  │
                  │   • Native CPIC packet headers (MKEY, ORI, TID logs)    │
                  └────────────────────────────┬────────────────────────────┘
                                               │
                                               ▼
                  ┌─────────────────────────────────────────────────────────┐
                  │    STEP 2: FORMAL SERVICE & STATE PUBLIC INTEREST CHECK │
                  │   • Service on Crown Attorney & Police Cyber Services   │
                  │   • State asserts PII over proprietary forensic tools   │
                  │   • State asserts Section 8 third-party privacy         │
                  └────────────────────────────┬────────────────────────────┘
                                               │
           ┌───────────────────────────────────┴───────────────────────────────────┐
           ▼                                                                       ▼
 [ BLUNT UNFILTERED DISCLOSURE SOUGHT ]                                  [ PROTOCOL FOR TARGETED DIGITAL SCREENING ]
 • Moving party seeks entire 500GB phone dump                            • Appointment of Independent Referee (Rule 54)
 • Sifts through intimate family photos & chats                          • Targeted boolean keyword search filters run
 • Gross violation of third-party privacy                                • Hash matching to disputed transaction window
           │                                                                       │
           ▼                                                                       ▼
  [ MOTION STRUCK DOWN AS OVERBROAD ]                                    ┌─────────────────────────────────────────┐
  (Fails Proportionality / Sedona Canada)                                │   STEP 3: ISOLATION & IN CAMERA REVIEW  │
                                                                         │   • Referee extracts responsive subset  │
                                                                         │   • Unredacted dossier sealed by court  │
                                                                         │   • Judge reviews contested metadata    │
                                                                         └────────────────────┬────────────────────┘
                                                                                              │
                                                                                              ▼
                                                                         ┌─────────────────────────────────────────┐
                                                                         │       RULE 30.1 DEEMED UNDERTAKING      │
                                                                         │   • Production released to civil counsel│
                                                                         │   • Absolute ban on collateral release  │
                                                                         │   • Violation = Contempt of Court       │
                                                                         │   • Evidence admitted under CEA s. 31.2 │
                                                                         └─────────────────────────────────────────┘

The Complete 3-Part Wagg Screening Series Index

This comprehensive three-part legal treatise examines the statutory, procedural, and forensic mechanisms governing the production and admissibility of state-held criminal records in civil proceedings:

Part 1 of 3: The Jurisdictional Mechanics of Wagg: Production of State-Held Criminal Records in Civil Litigation — Dissecting the formal legal gateway under D.P. v. Wagg, the threshold of civil relevance, mandatory statutory notice to the Attorney General and Chief of Police, Rule 30.10 non-party production, and navigating the operational boundary between the open court principle and public interest immunity.
Part 2 of 3: Deconstructing the Four-Part Wagg Test: A Blueprint for Balancing Public Interest Immunity and Litigation Equity — Analyzing the four distinct legal criteria applied by superior court judges: the relevance spectrum, the exhaustion of alternative discovery channels, public interest immunity prejudice (confidential informants, ongoing investigations, police techniques), and the overarching administration of justice.
Part 3 of 3 (Current): The Digital-Forensic Frontier: Applying Wagg to Volatile Memory Dumps, CPIC Telemetry, and Electronic Intrusions — Elevating the Wagg framework into the digital era, exploring disclosure of raw CPIC transactional telemetry (ORI and Terminal ID mappings), volatile RAM captures, Cellebrite/UFDR mobile device extractions, and the strict enforcement of the Implied Undertaking Rule (Rule 30.1) over digital forensic artifacts.

Key Requirements / Elements for Compelling Digital Forensic State Records

To successfully obtain and authenticate complex digital forensic evidence from police repositories under the Wagg framework, counsel must satisfy the following technical and legal standards:

The Categorical Inclusion of Digital Telemetry under Rule 30.01: Counsel must establish as a matter of law that raw telecommunications packets, binary memory dumps, and hexadecimal database tables constitute “documents” under the Rules of Civil Procedure, defeating state arguments that discovery is restricted to typed summary reports.
The Crafting of Proportional Electronic Search Parameters: The moving party must tender a detailed, narrow Electronic Discovery Protocol (complying with the Sedona Canada Principles), identifying specific file extensions (e.g., .raw, .dd, .ufdr), targeted communication handles, and defined temporal windows, eliminating the objection that the request is an oppressive digital fishing expedition.
The Establishment of Systemic Integrity (Canada Evidence Act s. 31.2): Moving counsel must demonstrate how the police digital extraction will be authenticated, requiring the state to produce the underlying cryptographic hash manifests ($\text{SHA-256}$) generated at the moment of initial hardware capture to guarantee that the electronic evidence was not corrupted during state storage.
The Management of the Rule 30.1 Deemed Undertaking: Counsel must provide formal written undertakings confirming strict adherence to Rule 30.1, guaranteeing that highly sensitive digital extraction files (containing intimate third-party contacts and browsing histories) will be locked within secure, encrypted digital litigation vaults and never disseminated outside the courtroom.
The Motion for a Protective Sealing Order: To protect public interest immunity while enabling civil truth-seeking, litigators must petition the court to issue a companion protective order under Section 137(2) of the Courts of Justice Act, maintaining the raw digital images under court seal while releasing only verified, responsive forensic excerpts to the trial record.

Examples / Application

A. The Volatile RAM Memory Dump and the Unmasked Cryptographic Fraud

In a $50 million civil commercial fraud action, the corporate plaintiff alleges that a former chief technology officer embezzled treasury reserves by executing unauthorized transfers into unhosted cryptocurrency wallets. Two years prior, the RCMP Federal Serious and Organized Crime unit raided the CTO’s residence under a Section 487 warrant, executing a live volatile memory (RAM) capture on his running laptop before pulling the power. The criminal charges were stayed due to institutional delay under R. v. Jordan. The civil plaintiff brings a Wagg motion under Rule 30.10 demanding production of the RCMP’s raw volatile RAM dump (memory.dmp).

The RCMP objects under Factor 3 of Wagg, claiming the memory dump contains proprietary decryption tools and sensitive unredacted corporate records from unrelated entities.

The superior court grants a conditional Wagg production order. The judge orders the RCMP to deliver the raw RAM image under seal to an independent court-appointed digital forensic referee (Rule 54). The referee is instructed to apply specialized memory analysis tools (Volatility Framework) strictly to search for active private key strings and session cookies matching the plaintiff’s corporate treasury addresses. The referee isolates the cleartext private keys, redacts all unrelated third-party artifacts, and produces the authenticated extraction to civil counsel. The plaintiff uses the unmasked cryptographic keys to trace and repatriate $35 million in frozen digital assets.

B. The CPIC Terminal ID Audit in False Imprisonment Litigation

A plaintiff sues a municipal police services board for false imprisonment, arbitrary detention under Section 9 of the Charter, and malicious prosecution. The plaintiff alleges that officers arrested him on a fabricated, unsworn warrant that was retroactively entered into CPIC to justify an unlawful street stop. In the civil lawsuit, plaintiff’s counsel serves a Wagg motion demanding the raw, unredacted CPIC transactional audit trails, specifically requesting the Message Keys (MKEYs), Terminal Identifiers (TIDs), and microsecond timestamps for the “ADD” and “CLEAR” transaction opcodes.

The police services board resists, claiming CPIC transaction logs are protected by public interest immunity as confidential law enforcement intelligence.

The superior court orders immediate production of the CPIC telemetry. The judge dictates that raw transactional database logs that record the administrative actions of state actors cannot be cloaked in public interest immunity when the core issue in the lawsuit is the lawful authority of the arrest. The court holds that public confidence in the administration of justice demands that the true chronological history of police database entries be transparently audited. The extracted logs prove the “ADD” transaction was entered three hours after the plaintiff was locked in cells from an unauthorized terminal at an administrative courthouse desk, resulting in summary judgment on liability against the police board.

C. The Fatal Implied Undertaking Breach and Disqualified Counsel

In a contentious shareholder dispute, plaintiff’s litigation counsel successfully secures a Wagg order granting access to a police fraud investigation brief, including a Cellebrite extraction of the defendant director’s mobile phone. The order is subject to the standard Deemed Undertaking Rule under Rule 30.1. Upon reviewing the phone extraction, plaintiff’s counsel discovers embarrassing personal text messages between the defendant and a third-party romantic partner that have zero relevance to the corporate fraud claims. Seeking to force an immediate commercial settlement, plaintiff’s counsel leaks excerpts of the intimate messages to a prominent business journalist.

Counsel for the defendant immediately brings an emergency motion for contempt of court and disqualification.

The superior court delivers a blistering judgment. Applying Juman v. Doucette and Rules of Civil Procedure Rule 30.1, the judge rules that weaponizing state-disclosed discovery for collateral commercial extortion strikes at the heart of the administration of justice. The court finds plaintiff’s counsel in civil contempt, permanently disqualifies the law firm from representing the plaintiff, strikes the plaintiff’s statement of claim in limine, and orders the lawyer personally to pay $50,000 in full-indemnity special costs.

Regulatory Notes / Case Law

D.P. v. Wagg (2005), 76 O.R. (3d) 387 (Ont. C.A.): The paramount appellate authority establishing that state criminal records are presumptively protected from unrestricted civil production, requiring judicial screening to protect public interest immunity and privacy.
Juman v. Doucette, 2008 SCC 8: The landmark Supreme Court of Canada precedent governing the implied/deemed undertaking rule, establishing that documents and telemetry obtained through legal discovery cannot be used for any collateral purpose outside the specific proceeding without an explicit court order.
Rules of Civil Procedure, R.R.O. 1990, Reg. 194, Rule 30.1 (Deemed Undertaking Rule): Explicitly codifying that all parties and their counsel are deemed to undertake to the court and to all other parties not to use evidence or information obtained under discovery for any purpose other than that of the proceeding.
Rules of Civil Procedure, R.R.O. 1990, Reg. 194, Rule 54 (Referees): Empowering superior courts to appoint independent special referees to manage complex technical issues, directly applied to filter and redact massive digital forensic images.
Canada Evidence Act, R.S.C. 1985, c. C-5, ss. 31.1–31.8: Governing the authentication of electronic documents, requiring proponents of digital evidence to demonstrate the systemic integrity of the electronic record-keeping system.
R. v. Spencer, 2014 SCC 43: Foundational Supreme Court authority establishing that digital metadata and electronic network telemetry touch the intimate “biographical core” of the individual, requiring heightened constitutional protection under Section 8 of the Charter.
Bhasin v. Hrynew, 2014 SCC 71: The supreme authority on good faith and honest performance, strictly barring litigants from utilizing state-obtained electronic records in bad faith or for collateral commercial harassment.

nota bene: Mr. Kevin A. McLean (BA, JD, CIM) will hyperlink

Internal Links (Referrals to Other Blogs, Pages, Posts)

nota bene: Mr. Kevin A. McLean (BA, JD, CIM) will hyperlink

The Jurisdictional Mechanics of Wagg: Production of State-Held Criminal Records in Civil Litigation (Part 1 of 3)
Deconstructing the Four-Part Wagg Test: A Blueprint for Balancing Public Interest Immunity and Litigation Equity (Part 2 of 3)
The Forensic Decompilation of CPIC Transactional Telemetry: Hexadecimal Logs, Terminal IDs, and Audit Provenance (Part 4 of 5)
Forensic Copying vs. Volatile RAM Captures in Civil Litigation
The Forensic Extraction of Hexadecimal Metadata in Civil Litigation

External Authoritative Links

nota bene: Mr. Kevin A. McLean (BA, JD, CIM) will hyperlink

Supreme Court of Canada – Judgments Repository (Juman v. Doucette, Spencer)
Canadian Legal Information Institute (CanLII) – Electronic Evidence Decisions
The Sedona Conference – Working Group 7 (Sedona Canada Principles on E-Discovery)
Court of Appeal for Ontario – Practice Directions on Electronic Records

FAQ Section

Does the Wagg screening rule apply to digital forensic files like cellphone extractions and hard drive clones?

Yes. In Ontario civil practice, Rule 30.01 defines a “document” broadly to include any digital recording, electronic data, sound recording, or computational file. If the police seized a computer or cellphone during a criminal investigation, the raw digital forensic clone (e.g., Cellebrite extraction, EnCase image, or volatile RAM dump) is a state-held criminal record. It cannot be produced or inspected in a civil lawsuit without completing the formal Wagg screening process.

What is the “Deemed Undertaking Rule” (Rule 30.1) and why is it critical in digital Wagg motions?

The Deemed Undertaking Rule is an automatic, legally binding promise codified in Rule 30.1 of the Rules of Civil Procedure (and affirmed in Juman v. Doucette). It mandates that any party or lawyer who receives documents or digital evidence through court discovery cannot share, leak, or use that information for any purpose outside that specific lawsuit. Because police digital extractions contain thousands of private text messages, photos, and emails, violating this rule is punishable by civil contempt, heavy fines, and immediate disqualification.

Can a civil litigant obtain raw CPIC transaction logs using a Wagg motion?

Yes, in appropriate cases. If a civil lawsuit involves allegations of wrongful arrest, malicious prosecution, or bad-faith police conduct, the internal audit logs of the CPIC database (including the Message Keys, Terminal IDs, and microsecond timestamps showing when a warrant was entered or cleared) are directly relevant. Because CPIC logs record the administrative actions of state actors rather than confidential informant tips, superior courts routinely order their disclosure under Wagg.

How do courts prevent innocent third-party text messages from being exposed when a police phone extraction is produced?

Courts prevent privacy breaches by refusing to order raw, blanket productions. Instead, the judge will order a tailored electronic discovery protocol: (1) an independent digital referee or the police service’s cyber unit runs specific, agreed-upon keyword searches; (2) only messages between specific individuals during a specific date range are extracted; and (3) all personal photos, unrelated family chats, and bystander phone numbers are permanently redacted before civil counsel receives the files.

Can I use evidence obtained through a Wagg order to report someone to a professional regulator or tax authority?

Emphatically, no, unless you first obtain explicit permission from a superior court judge. Under the Supreme Court’s ruling in Juman v. Doucette, using discovery materials to report a target to the police, the Canada Revenue Agency (CRA), a professional licensing college, or the media is a direct violation of the Deemed Undertaking Rule. You must bring a formal motion to the court to be relieved of the undertaking; using the materials without a judge’s prior approval constitutes an abuse of process and contempt of court.

LawCap Value Proposition

Law Cap Inc. (part of the “Search & Seizure Law Group Of Companies”) is a specialized legal‑forensics and digital analysis platform dedicated to sophisticated litigation strategy, constitutional oversight, and advanced asset tracking. Led by an editor with cross‑disciplinary expertise in law, securities, and behavioral psychology, Law Cap Inc. conducts high‑level blockchain forensics (including EVM‑network parsing), complex fraud analysis, metadata manipulation verification, and forensic document examination. The platform provides unrepresented litigants, counsel, and organizations with advanced, on a pro bono publico basis, analytical frameworks for navigating institutional overreach, administrative complexity, and regulatory terrain.

LawCap exposes the strategic vulnerabilities of the administrative state. When federal tribunals attempt to weaponize silence, misdirection, and procedural delay to shield their actions from judicial review, LawCap provides the precise tactical blueprints to break the blockade. We translate complex prerogative remedies like structural mandamus, the prohibition against bootstrapping, and the doctrine of spoliation into actionable, high-impact legal strategy. By insisting on absolute algorithmic and statutory compliance. By insisting on absolute algorithmic and statutory compliance with the Federal Courts Rules, LawCap ensures that the foundational digital evidence—the raw truth of state action—is relentlessly extracted from the shadows and placed under the uncompromising scrutiny of the courts.

About the Founder, Owner, Executive Chair and CEO

Mr. Kevin A. McLean (B.A., J.D., CIM) (he/him) established Law Cap Inc. (“LawCap”) as a global platform for legal strategy, constitutional advocacy, and digital forensics. Operating within Ontario, Mr. McLean utilizes his background as a former barrister and solicitor in British Columbia, alongside credentials as a Chartered Investment Manager with the world famous and accredited Canadian Securities Institute located in Toronto, Ontario (Wellington West Avenue) (having passed in the span of eight months (eight multi-hour exams and ten if including the “mutual funds course” (see: infra): (i) the Canadian Securities Course: (ii) Wealth Management Essentials (with tax compendium modules); (iii) Investment Management Techniques; and (iv) Portfolio Management Techniques (along with although not required for the designation, the (v) the mutual funds course), to apply a broad and deep based analytical approach to Charter rights litigation and administrative accountability.

His background (the grind and lucky as they come)

Raised between the oceanfront calm of Spanish Banks in Vancouver and the warmth of Barbados, Mr. McLean grew up with a global perspective shaped by contrast — privilege without entitlement, exposure without complacency. The only father he knew, Mr. John Nugent (BA, JD, MBA, CFA Level I), legally adopted him at age nine (although ‘introduced’ at age three), marking Mr. McLean’s first direct encounter with litigation involving an absentee biological parent (father). He remains grateful to Mr. Jim Schuman, QC (as he then was), whose guidance during that process left a lasting impression on him.

Learning from the best through “osmosis” like a sponge in the Caribbean Sea

Living in Barbados part of each year throughout the 1980s and 1990s — never fully realizing how fortunate he was — Mr. McLean was introduced early to concepts such as trusts, tax residency requirements, capital gains, seed capital, convertible debentures, preferred shares, and other foundational elements of financial architecture. As his father often reminded him, “Education gets the foot in the door, but you learn and grow by doing — and you are either getting better or getting worse.”

Before his foray into junior mining on the West Coast — a sector many affectionately referred to as the “Wild West” — — Mr. Nugent served as President of Gardiner Group Stock Inc., where he managed more than 4,000 stock brokers, investment advisors, money managers, and analysts prior to the firm’s acquisition by TD Bank (a detail Mr. McLean now finds somewhat ironic). It was during this period that Mr. Nugent met Mr. McLean’s mother, then a stock broker and now a highly accomplished, world‑renowned professor and philanthropist with a Ph.D. The greatest compliment Mr. McLean has ever received came from Mr. Nugent himself, who once told him: “The best talker, salesman, and charismatic person I have ever seen. If he gets some substance, it will be a dangerous package in the real world.” Therein, the seeds of a dangerous truth-telling was born. Refinement and maturity were late blooming qualities – admittedly so.

Educational and Athletic Blessings: the infrastructure to form the public interest litigator

Mr. McLean was privileged and blessed to have attended the prestigious St. George’s School in Vancouver for both elementary and high school. When he realized that his then‑dream of representing Canada in a singular sport was becoming a reality, he transitioned to the Sports and Arts Program at Magee Secondary School, where he could begin classes an hour early and avoid elective and physical‑education requirements. This structure allowed him to train at an elite level, ultimately reaching number two in Canada in the U18 division and competing globally as a member of the Canadian National Tennis Team. He graduated from Magee Secondary School as the top student, earning the Principal’s List distinction with a 4.0 GPA in all courses.

Mr. Kevin A. McLean (BA, JD, CIM) carries on the Spanish Banks (Vancouver) running excellence tradition into the field of law nationwide (Canadian Bar Association 5 KM race)

While running a 15‑minute 5K at age 30 in the Canadian Bar Association race was an immense athletic accomplishment, Mr. McLean cherishes it most because he felt he was protecting the turf where his father had given him the privilege of growing up. His second most cherished athletic memory was winning the five‑kilometre race for the entire high school in Grade 9.

His earliest remains hitting two free throws with one second left — down by one — in Grade 7 to win the Vancouver city championship for St. George’s against St. Patrick’s. His earliest remains hitting two free throws with one second left — down by one — in Grade 7 to win the Vancouver city championship for St. George’s against St. Patrick’s.

The “McLean Name”: from the Highlands of Scotland and ode to William Wallace

The McLean name is Scottish, carried forward from Mr. McLean’s grandfather, Mr. Angus Alexander McLean, P. Eng. — the source of Mr. McLean’s middle name. Angus was married to Mrs. Margaret McLean, once the top tennis player in Canada in the 1940s and an accomplished field‑hockey athlete. She tragically passed away from cancer before Mr. She tragically passed away from cancer before Mr. McLean could meet her, though he has always understood why sport came naturally to him — the long stride, the biomechanics, and the competitive instinct. Angus suffered from macular degeneration, leaving him fully blind at age 60, and later Parkinson’s disease. He passed away in 2002, but Mr. McLean visited him every summer in Salmon Arm (having been born in Smithers, B.C.), often accompanied by his paternal grandmother, Ms. McLean visited him every summer in Salmon Arm (having been born in Smithers, B.C.), often accompanied by his paternal grandmother, Ms. Helen Elizabeth Lane (née Allsop), a pilot well into her 80s who passed away in 2012 and remains his favourite woman of all time. Mr. McLean often reflects on his grandfather’s resilience, noting: “I never heard him complain once — and if we could all be so grateful to be alive.” Through an eccentric yet uniquely detailed family tree, Mr. McLean learned that the McLean surname traces back to the 1300s in Scotland alongside none other than Sir William Wallace (later sensationalized by Mel Gibson in Braveheart). It thus became unsurprising to him why he has always been so staunchly stubborn and assertive about one’s rights, no matter the circumstance.

The Most Unique of Skill Sets at age 43 (March 25, 1983) (a “True Aries”)

Intersections of Law and Cryptography

The professional trajectory of Mr. McLean is defined by the deconstruction of unauthorized surveillance networks and the exposure of systemic irregularities.

Forensic Capabilities: His forensic data skills have frequently addressed complex anomalies within administrative and appellate contexts.
Blockchain Analysis: Following a 2014 incident involving an unauthorized RAM dump, Mr. McLean acquired proficiency in hexadecimal language to parse a one-million-page compressed architectural record.
Cross-Chain Tracking: He successfully traced unauthorized data disclosures across the Ethereum blockchain in Switzerland and EVM-compatible networks, such as the Binance Smart Chain (BSC).
Judicial Evidence: These findings provided significant blockchain evidence before the Honourable Justice Bowden of the British Columbia Supreme Court (BCSC) in December 2015 which was withheld from the BCSC (see: McLean v. Law Society of British Columbia, 2015 BCSC 661; McLean v. Law Society of British Columbia, 2015 BCSC 1431; McLean v. Law Society of British Columbia, 2015 BCSC 1972; McLean v Law Society of British Columbia, 2017 BCSC 987; Law Society of British Columbia (Re), 2018 BCIPC 37 (author was the successful unnamed respondent therein); and McLean v. Attorney General of British Columbia, 2019 BCCA 133 [defeated the AGBC at the Court of Appeal, no leave to appeal by AGBC]; and by change of legislation in 2024, the author has become the first to ever defeat in any motion, hearing and in finality a professional and regulatory association or body at all and in the field of public interest litigation involving the breach of Charter rights of members and clients of members

Adversity and Resilience

After transitioning to e-commerce ventures in the health and wellness sector in 2015, Mr. McLean navigated and is navigating as a result of CAT impairments (physical in nature but with mind-body connection) significant extralegal challenges and physical trauma.

Physical Recovery: Following a severe vehicular incident on August 31, 2022, which resulted in devastating spinal injuries, he maintains a disciplined daily regimen involving specialized orthotics and minimalist biomechanics to manage his recovery.
Procedural Strategy: Despite physical hardship, Mr. McLean utilized an extensive command of procedural law during a multi-jurisdictional detention to secure his release by demanding adherence to Criminal Code protocols, specifically Form 2 and Form 7 requirements.

Litigation and Procedural Discovery

This commitment to legal redress led to the discovery of a notable event in Canadian legal history: the post-facto falsification of a six-page “Information Package” (footer CCO-2–000-1).

Case Comparison: While historical precedents such as R. v. Silva (Quebec 2019/2020) involved the unauthorized use of a judicial stamp, the wholesale falsification of an entire six-page package is considered unprecedented.
Ongoing Oversight: Further irregularities, nullities (jurisdictional in nature) discovered involving various levels of the judiciary remain subjects of scrutiny and formal complaint.

Outside Interests: Athletics and mental health (lifelong journeys – not destinations)

Mr. Kevin A. McLean (BA, JD, CIM) has always lived life at full speed — sometimes literally. He still holds the record for the fastest five‑kilometre time ever run by a lawyer in the Canadian Bar Association’s annual 5K race, clocking an extraordinary 15:05 in one of the years he won the event. Before entering law, Kevin competed on the Canadian National Tennis Team (U16 and U18), representing Canada at the world‑renowned Orange Bowl — the largest junior tennis tournament on the planet. Winning a round there placed him among the top 20 junior players globally in his age category.

His athletic career continued at The Ohio State University, where he played NCAA tennis on scholarship beginning in 2001. To this day, Kevin remains a proud Buckeye, a donor to the university, and a familiar (or intentionally hard‑to‑find) face on eight or so College Football Saturdays each year in Columbus, Ohio. He still enjoys the tradition of “Kegs and Eggs,” though for him it’s now just the eggs — Kevin is a long‑retired drinker who speaks openly and gratefully about the role evidence‑based treatment including medication for ADHD played in transforming his life. He recommends (but does not advise) anyone struggling with any such symptoms to seek professional help from a qualified psychiatrist.

Kevin is single, unmarried, and a non‑parent — not out of absence, but out of purpose. As he likes to say, he is “married to the game,” and he believes “the public deserves it.” His work, his advocacy, and his commitment to building accessible legal knowledge platforms reflect that ethos: disciplined, service‑oriented, and driven by a sense of responsibility larger than himself.

The Philosophy of LawCap

LawCap is a movement where intellectual application and mental fortitude are prioritized over brute force. The philosophy maintains that systemic corruption is addressed through analytical capacity and a command of the law. LawCap seeks the engagement of individuals dedicated to improving society and achieving accountability through truth. Live your life within the boundaries of law and on your own terms.

GOOGLE MY BUSINESS

Contact Information and Helpful Links

Email: info@lawcap.ca and mclean@searchandseizure.ca

Confidential fax: (416) 352‑0055

Mailing address: Suite 314, 720 King Street West, Toronto, Ontario

Google My Business: LawCap Inc.

Feel free to check out our daily posts! We break the news before the so called “breaking news”! #breakthenewsbeforethebreakingnews (it is a mouthful but iron sharps iron and no pain no gain. If it was easy, everyone would be doing it. Feel free to chat with us on Google MyBusiness, email, text, call and if you are really fearful of government (and we have been there and nothing wrong with some out of an abundance of caution (ex abundanti cautela), you can confidentially fax at 1 (416) 352-0055). We honour strictly the duty of confidence found as precedent in the SCC and paying a little homage to No Limits Sportswear Inc. v. 0912139 B.C. Ltd., 2015 BCSC 1698 as per The Honourable Madam Justice S. Griffin (who in the Applicant’s estimation was and is a phenomenal judge but obviously he is most partial to The Honourable Madam Justice Gerow, The Honourable Mr. Justice Bowden, The Honourable Mr. Justice Grauer The Honourable Mr. Justice McIntosh, The Honourable Madam Justice Dickson, The Honourable Mr. Justice Masuhara, The Honourable Mr. Justice Goepel (as he then was) and The Honourable Mr. Justice Tysoe) (and oddly The Honourable Justice Matajawa as per the caselaw in LSBC v. Lawyer “A” as he found that the Applicant’s case against the LSBC involved him not consenting to any forensic copying (little did he or the Applicant know at the time that there was a Concealed RAM Dump).

Courage is contagious. A coward dies a thousands deaths but a warrior dies but one (Sir William Shakespeare). Lastly, to the extent that anything is shared via any medium, the recipient is under a strict duty of confidence and cannot be compelled to provide the same absent court order and to the extent any matter involves matters preparatory to litigation and/or ongoing litigation, it will be presumed to be protected by litigation privilege without any exceptions).

DISCLAIMER (generally)

It is strictly mandated that no constituent element of the information promulgated herein shall be erroneously construed as the provision of formal legal advisement; concurrently, the dissemination of such documentation ipso facto precludes the formation of any solicitor-client, attorney-client, or analogous professional relationship (the “Professional Relationship”). All articulated postulations, wherein they remain unanchored to demonstrable and objective empirical data, constitute the exclusive, prima facie perspectives of the underlying commercial enterprise (the “Commercial Enterprise”). Furthermore, all disseminated publications are incontrovertibly shielded by established jurisprudential defences (the “Jurisprudential Defences”), encompassing justification, fair comment promulgated strictly in good faith, and the rigorous execution of a moral, ethical, statutory, prescribed, and common law duty, coupled with recognized journalistic protections as elucidated by the Supreme Court of Canada in Grant v Torstar Corp, 2009 SCC 61 (the “Grant Decision”).

Potential Lawsuits (generally and this specific article, post or blog): Waiver of Personal Service and Cautionary Admonition

Regarding any subjective apprehension of a nascent cause of action within the jurisdiction of Ontario grounded in defamation, or any alternative tortious liability implicating this digital publication platform (the “Publication Platform”), the aforementioned commercial enterprise, or the individual proprietor, Kevin Alexander McLean, B.A., J.D., C.I.M. (the “Proprietor”, “CEO”, “Owner”, “Editor”)—who formerly practiced as a barrister and solicitor in the jurisdiction of British Columbia and maintains the professional designation of Chartered Investment Manager—it is unequivocally mandated that such grievances be addressed pursuant to the rigorous strictures of Canadian tort jurisprudence.

Should litigation be commenced against the commercial enterprise or the proprietor pertaining to allegations of defamation, irrespective of the underlying judiciousness of the antecedent legal advisement, service of process shall be accepted exclusively via electronic transmission at the previously designated electronic mailing addresses, thereby effectuating a binding waiver of the requirement for effectuating personal service. Notwithstanding this procedural concession, an unequivocal reservation of rights is maintained in limine for the explicit purpose of seeking security for costs, pursuing the summarily striking of the pleadings via summary judgment—strictly distinguished from a summary trial—and applying for elevated cost awards on a substantial indemnity or full indemnity basis against the initiating party in either a personal or corporate capacity. Furthermore, overarching rights are expressly reserved to seek interlocutory and injunctive relief, alongside the commencement of counterclaims seeking substantive damages for multifarious tortious infractions, expressly including the tort of abuse of process, and concurrently seeking remedial measures against any retained legal representatives. The prerogative to freely publish commentary delineating the procedural evolution of any such litigation, constituting public acta, is similarly and irrevocably reserved.

Given that causes of action sounding in defamation must be adjudicated before a superior court possessing inherent jurisdiction—specifically, a tribunal constituted pursuant to section 96 of the Constitution Act, 1867 (the “Section 96 Court”)—any party initiating such proceedings irrevocably attorns generally to the jurisdiction of the Province of Ontario and to that specific judicial echelon at first instance. Judicial resources remain intrinsically finite; their utilization necessitates the expenditure of the public treasury across multiple governmental strata. This encompasses the executive branch, financed by the provincial government via the taxation of the citizenry; the judicial branch, remunerated by the federal government; and tertiary municipal expenditures whereby auxiliary judicial officers are perpetually contracted through municipal law enforcement agencies, functioning effectively as a government institution (the “Government Institution”), such as the Toronto Police Services Board.

While the fundamental right to articulate dissenting opinions is rigorously respected, and electronic correspondence remains welcomed for the exclusive purpose of identifying substantive inaccuracies necessitating amelioration, it is unambiguously declared that no financial indemnification shall be disbursed, as no valid cause of action in defamation or otherwise is recognized to subsist. Consequently, should the instigation of formal litigation remain the finalized trajectory, the requisite tariff of fees must be remitted in strict accordance with the attendant regulations promulgated under the Administration of Justice Act, R.S.O. 1990, c. A.4. Subsequently, discrete copies of the formally issued—as rigidly distinguished from merely filed—statement of claim (the “Statement Of Claim”) must be concurrently served upon all respective respondents, whereupon subsequent procedural mechanisms shall be accordingly activated. Any deviation from these prescribed procedural modalities, constituting a direct contravention of statutory mandates, the equitable doctrines of fairness, or the strictures delineated within the Rules of Civil Procedure, R.R.O. 1990, Reg. 194 (the “Procedural Rules”), shall categorically not be countenanced as a remediable irregularity. Rather, such defective origination or procedural non-compliance shall be definitively construed as an absolute nullity, functioning ultra vires the initiating party’s jurisprudential authority, and effectuating a compulsory reversion to the status quo ante.

Love Finding Topics in an Efficient Manner?

Do you need any help finding a topic or tag, in addition to our encyclopedia, please click our “Legal Topics & Investigative Index” and it will assist in you finding topics, posts, blogs, and pages on that specific topic or tag: https://lawcap.ca/legal-topics-investigative-index/

Feel free to check out “No Cap” © Legal Encyclopedia ©, which is updated and grows daily: https://lawcap.ca/law-cap-inc-s-proprietary-and-trademarked-no-cap-legal-encyclopedia/#jn-a

Are you looking for more high level educational information in a If you’re revisiting material from the previous Division and need fast access, Law Cap Inc. has organized hyperlinks to each topic for seamless retrieval.

5.1.1. A

5.1.1. A (I): Advanced Forensic Imaging – Bit‑Level Authenticity

5.1.1. A (II): Bit‑Level Authenticity — Automated Metadata Extraction & Integrity Verification

5.1.1. A (III): Algorithmic Evidence Parsing – Digital Chain‑of‑Custody

5.1.2. B

5.1.2. B (I): Binary‑Level Evidence Reconstruction

5.1.2. B (II): Blockchain‑Anchored Evidence Preservation

5.1.2. B

5.1.3. C

5.1.3. C (II): Cryptographic Hash Validation – Authenticity Assurance

5.1.3. C (III): CPU‑Level Memory Extraction – Volatile Evidence Capture

5.1.4. D

5.1.4. D (II): Disk Imaging Protocols – Forensic Standards

5.1.4. D (III): Data Integrity Failures – Evidentiary Collapse

5.1.5. E

5.1.5. E (I): Encrypted Evidence Handling – Key Management Protocols

5.1.5. E (II): Evidence Tampering Detection – OCR & Typography Analysis

5.1.5. E (III): External Drive Seizure – Chain of Custody Requirements

5.1.6. F

5.1.6. F (I): Forensic Copying – Essential Guide

5.1.6. F (II): Forensic Copying vs RAM Captures

5.1.6. F (III): Fileless Backdoors & WMI Persistence – Surveillance Detection

5.1.6. F (IV): Forensic Metadata Reconstruction – Authenticity Restoration

5.1.7. G

5.1.7. G (I): GPU Memory Dumps – Hidden Evidence Extraction

5.1.7. G (II): Garbled OCR Court Records – Authenticity Analysis

5.1.8. H

5.1.8. H (I): Hex Level Evidence Review – Raw Data Integrity

5.1.8. H (II): Metadata Poisoning – Intentional Metadata Corruption

5.1.9. I

5.1.9. I (I): Image‑Based Evidence – Pixel‑Level Authenticity Review

5.1.9. I (II): Image‑Based Evidence – Pixel‑Level Manipulation Detection

5.1.9. I (III): Image‑Based Evidence – Pixel‑Level Authenticity Reconstruction

5.1.10. J

5.1.10. J (I): JPEG Compression Artifacts – Authenticity Indicators

5.1.10. J (II): JPEG Double‑Compression – Manipulation Detection

5.1.10. J (III): JPEG Quantization Tables – Authenticity Verification

5.1.11. K

5.1.11. K (I): Kerning Irregularities – Typography‑Based Forgery Detection

5.1.11. K (II): Typography Drift – PDF Forgery & Document Tampering Detection

5.1.11. K (III): Typography Layer Overwrites – Digital Document Tampering

5.1.12. L

5.1.12. L (I): Layer‑Sequence Reconstruction – Hidden Edit Identification

5.1.12. L (II): Layer‑Stack Integrity – PDF & Hybrid Document Authenticity

5.1.12. L (III): Layer‑Blend Anomalies – Digital Forgery & Hidden Edit Detection

5.1.13. M

5.1.13. M (I): Metadata‑to‑Pixel Correlation – Cross‑Layer Authenticity Verification

5.1.13. M (II): Metadata‑Chain Reconstruction – Authenticity Restoration

5.1.13. M (III): Metadata‑Origin Verification – Device & Source Authenticity

5.1.14. N

5.1.14. N (I): Noise‑Pattern Integrity – Sensor & Rendering Authenticity

5.1.14. N (II): Noise‑Pattern Discontinuities – Hidden Edit & Region‑Level Tampering

5.1.14. N (III): Noise‑Pattern Fabrication – Synthetic & Software‑Generated Artifacts

5.1.15. O

5.1.15. O (I): Optical‑Flow Irregularities – Motion‑Based Manipulation Detection

5.1.15. O (II): Temporal‑Interpolation Artifacts – AI & Software‑Generated Frame Synthesis

5.1.15. O (III): Temporal‑Cadence Breaks – Frame‑Timing Authenticity Verification

5.1.16. P

5.1.16. P (I): Pixel‑Level Authenticity Review – Raw Image Integrity

5.1.16. P (II): Pixel‑Adjacency Irregularities – Splicing & Region‑Level Manipulation

5.1.16. P (III): Pixel‑Gradient Anomalies – Microscopic Edit & Region‑Boundary Detection

5.1.17. Q

5.1.17. Q (I): Quantization‑Table Integrity – Compression‑Signature Authenticity

5.1.17. Q (II): Quantization‑Table Anomalies – Recompression & Manipulation Detection

5.1.17. Q (III): Quantization‑Residual Mapping – Compression‑Artifact Differential Analysis

5.1.18. R

5.1.18. R (I): Raster‑Vector Inconsistencies – Hybrid Forgery Detection

5.1.18. R (II): Raster‑Layer Artifact Mapping – Pixel‑Structure Tampering Detection

5.1.18. R (III): Raster‑Vector Boundary Differential – Cross‑Layer Tampering Detection

5.1.19. S

5.1.19. S (II): Screenshot‑Compression Signatures – Platform & Pipeline Verification

5.1.19. S (III): Screenshot‑UI Rendering Drift – Platform‑Native Interface Authenticity

5.1.20. T

5.1.20. T (I): Typography Drift – Font & Glyph Rendering Inconsistencies

5.1.20. T (II): Font‑Embedding Irregularities – PDF & Document Forgery Indicators

5.1.21. U

5.1.21. U (I): UI‑Layer Authenticity – Interface Element Integrity Verification

5.1.21. U (II): UI‑Element Residual Mapping – Microscopic Interface Tampering Detection

5.1.22. V

5.1.22. V (I): Vector‑Layer Authenticity – Native Glyph & Shape Integrity Verification

5.1.22. V (II): Vector‑Raster Hybrid Detection – Structural Inconsistencies Across Layer Types

5.1.22. V (III): Vector‑Boundary Differential – Microscopic Outline & Edge Integrity Analysis

5.1.23. W

5.1.23. W (I): Workflow‑Origin Verification – Native Pipeline Authenticity Analysis

5.1.23. W (II): Workflow‑Anomaly Drift – Cross‑Stage Pipeline Manipulation Detection

5.1.23. W (III): Workflow‑Boundary Differential – Cross‑Stage Structural Integrity Detection

5.1.24. X

5.1.24. X (I): Cross‑Layer Authenticity – Multi‑Modal Structural Integrity Verification

5.1.24. X (II): Cross‑Layer Drift – Multi‑Modal Rendering & Structural Inconsistency Detection

5.1.23. Y

5.1.23. Y (I): YARA Rule‑Based Evidence Detection

5.1.23. Y (II): Yield‑Based Digital Evidence Classification

5.1.24. Z

5.1.24. Z (I): Zero‑Day Exploit Tracing – Forensic Attribution

5.1.24. Z (II): Zero‑Knowledge Proofs – Evidence Integrity Applications

For rapid access to additional topics within this Division, Law Cap Inc. offers structured hyperlinks to each entry for efficient review and analysis.

Ready to continue your deep dive? Law Cap Inc. has curated direct hyperlinks to the next Division for seamless navigation and expanded insight.

7.1. Administrative Law & Judicial Review – Encyclopedia Index

Mr. Kevin Alexander McLean (BA, JD, CIM)

Canadian, Toronto, Ontario, Former lawyer, Chartered Investment Manager Lover of sea otters.

Wagg Screening Part 3: Volatile Memory Dumps, CPIC Telemetry, and Electronic Intrusions

The Jurisdictional Adjudication of Digital Forensic Records Under Wagg: Volatile RAM Dumps, CPIC Telemetry, and the Implied Undertaking Rule (Part 3 of 3)

Opening Question

Direct Answer Paragraph

Overview

Legal Domain/Area Identification

The Digital Forensic Wagg Extraction & Screening Pipeline

The Complete 3-Part Wagg Screening Series Index

Key Requirements / Elements for Compelling Digital Forensic State Records

Examples / Application

A. The Volatile RAM Memory Dump and the Unmasked Cryptographic Fraud

B. The CPIC Terminal ID Audit in False Imprisonment Litigation

C. The Fatal Implied Undertaking Breach and Disqualified Counsel

Regulatory Notes / Case Law

Internal Links (Referrals to Other Blogs, Pages, Posts)

External Authoritative Links

FAQ Section

LawCap Value Proposition

About the Founder, Owner, Executive Chair and CEO

His background (the grind and lucky as they come)

Learning from the best through “osmosis” like a sponge in the Caribbean Sea

Educational and Athletic Blessings: the infrastructure to form the public interest litigator

Mr. Kevin A. McLean (BA, JD, CIM) carries on the Spanish Banks (Vancouver) running excellence tradition into the field of law nationwide (Canadian Bar Association 5 KM race)

The “McLean Name”: from the Highlands of Scotland and ode to William Wallace

The Most Unique of Skill Sets at age 43 (March 25, 1983) (a “True Aries”)

Intersections of Law and Cryptography

Adversity and Resilience

Litigation and Procedural Discovery

Outside Interests: Athletics and mental health (lifelong journeys – not destinations)

The Philosophy of LawCap

Contact Information and Helpful Links

DISCLAIMER (generally)

Potential Lawsuits (generally and this specific article, post or blog): Waiver of Personal Service and Cautionary Admonition

Love Finding Topics in an Efficient Manner?

Wagg Screening Part 2: Deconstructing the Four-Part Public Interest Immunity Test

The Jurisdictional Architecture of Influence Peddling: Dissecting Section 121 of the Criminal Code (Part 1 of 3)

Related Posts

Who Pays for the Cure? The Cross-Border Battle Over Collateral Be ...

Section 9 Charter: Administrative Detentions, Immigration Holds, ...

Sensitive Personal Information Definition in Canadian Privacy Law ...

Leave a Reply Cancel reply