Altering evidence after allegation

Short answer

Yes. In almost every context, altering, recreating, backdating or manipulating drafts, file timestamps or document metadata after an allegation has been made can be treated as a serious aggravating matter in its own right. Depending on the setting it may amount to further misconduct in a disciplinary process, spoliation or contempt in litigation, or, at the most serious end, a criminal offence such as perverting the course of justice. The label that attaches depends heavily on what exactly was done, why, and in what proceedings.

Because your question could arise in several different settings, the position differs according to context, so the material facts matter a great deal.

The key distinction: legitimate work versus tampering

Not every change to a document after an allegation is wrongdoing. The law and disciplinary practice distinguish between:

Innocent or ordinary explanations. Opening a file (which can update an “accessed” or even “modified” date), saving a copy to a new location, converting a format, or genuinely continuing legitimate work can all change metadata without any improper motive. Cloud sync, backups and automatic version histories routinely alter timestamps. A changed date is therefore a question that demands an explanation, not automatic proof of guilt.

Improper interference. The problem arises where the purpose or effect is to create a false impression, for example backdating a draft to make it look as though work existed earlier than it did, recreating “drafts” after the event to manufacture an evidential trail, or editing or deleting files so that an investigator cannot see the true position. It is the intention to mislead and the effect on the integrity of the evidence that turns ordinary file activity into misconduct.

This distinction runs through all the contexts below.

Academic and professional disciplinary proceedings

If this concerns an academic misconduct allegation such as plagiarism, contract cheating or an unauthorised essay service, then fabricating or manipulating evidence after the allegation is usually treated as separate and more serious misconduct than the original matter. University and professional regulator conduct rules generally treat providing false or fabricated evidence, and attempting to mislead an investigation, as a distinct breach that can attract heavier penalties, precisely because it goes to honesty and integrity.

In practice, panels are often more troubled by an attempt to cover up than by the underlying academic issue. Producing “draft” documents that were in fact created after the allegation, or altering timestamps to support a false account of how work was produced, can:

1. Convert an arguable or borderline original allegation into a clear finding, because it undermines the student’s or professional’s credibility on everything.

2. Constitute a separate charge of dishonesty, fabrication of evidence or attempting to pervert the process.

3. Increase the sanction, potentially to the most serious available, such as expulsion or removal from a professional register.

If genuine contemporaneous drafts do exist, the right course is to preserve them exactly as they are and provide them unaltered, together with any version history, rather than “tidying up” or recreating anything.

Employment and internal disciplinary contexts

If this is an employment or workplace investigation, the same principle applies. Manipulating documents or metadata after an allegation can amount to a fresh act of misconduct, often gross misconduct, because it goes to trust and honesty. Even if the original allegation was not itself dismissible, a deliberate attempt to falsify or destroy evidence commonly is, and dismissal for that conduct can be fair where a reasonable investigation supports it.

Civil litigation: disclosure duties and spoliation

In civil proceedings, parties are under duties to preserve documents once litigation is contemplated and to give honest disclosure. Metadata is itself disclosable and is routinely scrutinised. As the courts have made clear, where metadata dates differ from the dates on the face of a document, that discrepancy requires a proper explanation, and an unexplained discrepancy can lead the court to draw adverse inferences against the party responsible.

Deliberately altering, backdating or destroying documents relevant to a claim (“spoliation”) can result in:

Adverse inferences being drawn against the party, so the court assumes the destroyed or altered material would have been unfavourable to them.

Evidence being ruled inadmissible or given little weight, and findings on credibility going against the party generally.

Costs sanctions, strike-out of a claim or defence in serious cases, and potential contempt of court proceedings, which can carry a fine or imprisonment.

Criminal law: perverting the course of justice and related offences

At the most serious end, where the manipulation is connected to a criminal investigation or court proceedings, it can amount to the common law offence of perverting the course of justice. That offence is committed where a person does an act that has a tendency to pervert, and is intended to pervert, the course of public justice. Interfering with, fabricating or destroying evidence falls squarely within the CPS guidance on this offence. The courts have upheld convictions where a defendant deleted electronic files intending to render them unavailable to an investigation, which shows that manipulating or destroying digital evidence can found liability.

Related offences and provisions can also apply, including doing acts intended to distort, alter, conceal or destroy documents relevant to certain statutory investigations. Perverting the course of justice is an indictable offence carrying up to life imprisonment in principle, and sentences are frequently custodial even where the underlying matter was comparatively minor, because the offence strikes at the administration of justice itself.

It is important to be precise, though. This offence only bites where there is a course of justice capable of being perverted, meaning an investigation or proceedings in train or clearly in prospect, and where there is an intention to interfere with it. Purely internal academic or workplace matters are not usually “the course of public justice”, although they can still be very serious misconduct in their own domain.

How different facts change the answer

The outcome turns on several facts that are not yet clear from your question:

What proceedings are involved: a university panel, a professional regulator, an employer, a civil claim, or a criminal investigation. This determines whether the risk is a disciplinary finding, a costs or contempt sanction, or criminal liability.

What was actually done: merely opening or re-saving a genuine file is very different from deliberately backdating, recreating or deleting documents to mislead.

The intention behind it: an innocent explanation such as automatic sync, format conversion or continued legitimate work can rebut an inference of tampering, whereas an intention to deceive is the core of both misconduct and the criminal offence.

Whether the original allegation was well founded: even a false allegation does not justify manufacturing evidence in response, and doing so tends to convert a defensible position into an indefensible one.

Practical next steps

1. Stop making any further changes to the relevant files immediately. Do not delete, edit, “clean up”, re-save or move anything connected to the allegation. Preserve everything in its current state.

2. Preserve original devices, accounts, cloud storage and version histories, since these often contain the true record and can support an innocent account.

3. Gather the genuine contemporaneous evidence exactly as it exists, including any legitimate draft history, and be ready to explain any metadata discrepancies rather than trying to remove them.

4. If any changes have already been made, do not attempt to reverse or disguise them. Instead prepare a truthful, documented explanation of what happened and why, because a candid account is far more defensible than a further attempt at concealment.

5. Respond to the allegation on its merits, addressing the underlying issue honestly, rather than by constructing supporting material.

Bottom line

Editing, recreating or backdating drafts, timestamps or metadata after an allegation is high risk. Innocent, well-explained file activity is not misconduct, but deliberate manipulation to mislead is very likely to be treated as separate and more serious wrongdoing, whether as fresh disciplinary misconduct, spoliation and contempt in civil litigation, or the criminal offence of perverting the course of justice, depending on the forum. The safest course is always to preserve the evidence untouched and to deal with the allegation honestly.

If you tell me the specific setting, for example a university misconduct case, an employer investigation, a civil claim or a police matter, and what exactly was changed and why, I can give a more focused analysis of the risks and the best way to respond.