Can Deleted or Formatted CCTV Footage Be Recovered? Lessons from the Albert Ojwang Case

Many people believe that once CCTV footage has been deleted or a DVR hard drive has been formatted, the evidence is lost forever. However, recent investigations in the Albert Ojwang case have shown that this is not always true.

Digital forensic experts can often recover deleted CCTV recordings, provided the data has not been completely overwritten. This case serves as an important lesson for businesses, schools, hospitals, government institutions, and homeowners who rely on CCTV systems for security.

What Happened?

According to court proceedings and investigations by the Independent Policing Oversight Authority (IPOA), Albert Ojwang died while in police custody. During the investigation, officers examined the CCTV system at the station and found that the Digital Video Recorder (DVR) was not operating normally.

Investigators discovered that the DVR had been disconnected from its display. After reconnecting the system, they reviewed the device logs and found evidence indicating that the hard drives had been formatted after the incident. Despite these attempts to remove the recordings, forensic specialists later recovered significant amounts of CCTV footage, which was presented as evidence in court.

The case demonstrates that formatting a CCTV hard drive does not always permanently destroy digital evidence.

Can Deleted CCTV Footage Really Be Recovered?

Yes. In many situations, it can.

When footage is deleted from a DVR or NVR, the recorder often removes only the file references rather than immediately erasing the actual video data stored on the hard drive.

Similarly, when a hard drive is formatted, the recorder may recreate a new file system while leaving much of the original data intact. Until new recordings overwrite that storage space, specialized forensic software may still recover the deleted footage.

However, recovery is never guaranteed. Success depends on several factors, including:

Whether new recordings have overwritten the deleted data.
The type of DVR or NVR used.
The file system employed by the manufacturer.
The condition of the hard drive.
The expertise and tools available to the forensic examiner.

Why CCTV System Logs Matter

Most modern CCTV systems maintain internal logs.

These logs can record:

User logins.
Failed login attempts.
Hard drive formatting.
Hard drive replacement.
Camera disconnections.
System shutdowns.
Time and date changes.
Configuration changes.
Export of video footage.

Even if recordings are missing, these logs can help investigators determine who accessed the system and what actions were performed.

This is why protecting system logs is just as important as protecting the footage itself.

What Happens When a Hard Drive Is Formatted?

Formatting does not necessarily wipe every sector of the hard drive.

In many DVRs and NVRs, formatting simply prepares the disk for new recordings by resetting its indexing structure. The original video files may remain physically stored on the disk until new recordings gradually overwrite them.

Think of it like removing the table of contents from a book. The chapters may still exist until someone writes new pages over them.

This is why professional forensic recovery is often possible after formatting.

What Should You Do After a Serious Incident?

If your CCTV system captures an accident, theft, assault, vandalism, or any event that may become evidence, act carefully.

Do not:

Format the DVR or NVR.
Delete any recordings.
Replace the hard drive.
Reset the recorder.
Continue unnecessary recording if evidence preservation is critical.

Instead:

Secure the recorder immediately.
Limit access to authorized personnel only.
Document the date and time of the incident.
Contact investigators if required.
Engage qualified CCTV forensic experts if footage appears missing or deleted.

Quick action significantly increases the chances of successful recovery.

How Businesses Can Protect CCTV Evidence

Every organization should have clear CCTV security procedures.

Best practices include:

Use strong administrator passwords.
Limit administrator access to trusted personnel.
Enable audit logs where available.
Regularly check that cameras and recorders are functioning correctly.
Back up important footage immediately after major incidents.
Store exported evidence on secure external media.
Protect DVRs and NVRs from unauthorized physical access.
Use surveillance systems from reputable manufacturers that provide reliable logging and security features.

The Importance of Professional CCTV Installation

Many organizations invest heavily in cameras but overlook the importance of proper installation and maintenance.

A professionally installed CCTV system should include:

Correct hard drive configuration.
Reliable power protection.
Secure user access management.
Proper recording schedules.
Health monitoring of cameras and storage.
Regular maintenance and testing.

These measures help ensure that critical evidence is available when it is needed most.

Final Thoughts

The Albert Ojwang case highlights an important reality about digital evidence. Deleting CCTV footage or formatting a recorder does not always permanently erase recordings. In many cases, forensic specialists can recover valuable evidence, especially when the storage has not yet been overwritten.

For businesses, schools, hospitals, residential estates, government institutions, and homeowners, the lesson is clear. Protect your CCTV system, secure your recordings, and never assume that deleting footage removes every trace of what happened.

A well-managed CCTV system does more than record events. It protects lives, supports investigations, and preserves the truth when it matters most.

Need Professional CCTV Installation or Forensic Advice?

Boardtac Solutions provides professional CCTV installation, maintenance, storage optimization, system health checks, and technical guidance for businesses, schools, hospitals, apartments, offices, warehouses, and residential properties across Kenya.

Whether you need a new surveillance system, a CCTV audit, or expert advice on protecting your recordings, our team is ready to help.