10.1 Building the Investigation Plan: Elements, Timelines & Change Control
Key Takeaways
- An investigation plan converts the client's objective into a written, testable structure: objective statement, factual predicate, legal constraints, method sequence, resource and budget allocation, milestones, and a defined completion condition.
- Timelines are driven from the outside in — the client's litigation calendar governs, so plan backwards from the discovery cutoff, which under CCP § 2024.020 falls 30 days before the initial trial date, with discovery motions heard no later than 15 days before.
- California limitations periods set hard outer bounds: two years for personal injury (CCP § 335.1), four years for a written contract (CCP § 337), one year for defamation (CCP § 340(c)), and six months to present a claim against a public entity (Gov. Code § 911.2).
- Scope changes must be approved in writing before the work is performed; unapproved scope expansion is unbillable, and continuing to investigate after the client's objective is satisfied strips away the legitimate-purpose anchor that keeps surveillance outside Penal Code § 646.9.
- Plans are living documents: build in decision points where the investigator re-evaluates whether the method is still producing evidence, and log every revision with a date, reason, and client approval.
Building the Investigation Plan: Elements, Timelines & Change Control
Core Practice Standard: The BSIS examination outline devotes an entire subarea — 2A, Scope of Engagement and Investigation Planning, weighted 10% — to work that happens before an investigator takes a single photograph. Task T10 requires the candidate to "develop an investigation plan to define processes for guiding the investigation to completion," supported by knowledge of plan elements, plan development from the scope of engagement, timeline construction, and methods for approving changes to the plan. In practice the plan is also your legal shield: it is the document that proves your surveillance served a legitimate purpose, that your billing tracked authorised work, and that you did what the client actually retained you to do.
Why the Plan Is a Legal Document, Not an Administrative One
Three California rules turn the investigation plan from good habit into risk control:
| Rule | How the plan protects you |
|---|---|
| Penal Code § 646.9(e) | Stalking requires a course of conduct that "serves no legitimate purpose." A signed engagement and a written plan tied to it are how you prove the purpose. |
| BPC § 7561.1(g) | Wilful failure to render the services or report agreed between the parties, where compensation has been paid, is a ground for discipline. The plan defines what was agreed. |
| BPC § 7539(b) | Knowingly making a false report to the client is a prohibited act. A plan with defined deliverables makes it obvious what the report must and must not claim. |
The Seven Elements of a California Investigation Plan
+---------------------------------------------------------------------------+
| INVESTIGATION PLAN ARCHITECTURE |
+---------------------------------------------------------------------------+
| 1. OBJECTIVE What question must be answered, in one sentence |
| 2. PREDICATE Facts already known + their sources + confidence |
| 3. CONSTRAINTS Legal, budgetary, geographic, temporal limits |
| 4. METHOD SEQUENCE Ordered tasks, cheapest and least intrusive first |
| 5. RESOURCES Personnel, vehicles, equipment, database spend |
| 6. MILESTONES Dated checkpoints tied to the client's calendar |
| 7. COMPLETION The condition that ends the engagement |
+---------------------------------------------------------------------------+
1. Objective. One sentence, answerable yes or no or with a specific fact. "Determine whether claimant Ruiz performs physical labour inconsistent with the restrictions in the 4 February AME report" is an objective. "Investigate Ruiz" is not. A vague objective is the root cause of scope creep, unbillable hours, and the ethical failures examined in Content Area 4.
2. Factual predicate. Everything already known, each item tagged with its source and how well it is verified. Distinguish what the client asserted from what you have independently confirmed. Clients are interested parties; treating their assertions as established facts is how investigators end up surveilling the wrong address or, worse, helping a client locate someone protected by a restraining order.
3. Constraints. Name the legal boundaries specific to this file before fieldwork: all-party consent under Penal Code § 632 if any recording is contemplated; no tracking device without registered-owner, lessor, or lessee consent under Penal Code § 637.7(c); no entry into a private building not commonly accessible to the public under BPC § 7539(g); Civil Code § 1708.8 for any telephoto or drone work near a residence; and permissible-use limits under the Driver's Privacy Protection Act and the Investigative Consumer Reporting Agencies Act if records will be pulled.
4. Method sequence. Order the tasks so that the cheapest and least intrusive come first. Public-records and open-source work before surveillance; surveillance before interviews that alert the subject; alerting steps last. This sequencing is not merely economical — it also means the intrusive methods are supported by more predicate when you finally use them.
5. Resources and budget. Estimate operative-hours, vehicles, database charges, and travel against the retainer. When a method is projected to consume more than the authorised budget, that is a change-control event, not a decision to absorb.
6. Milestones. Dated checkpoints, each with a deliverable and a go/no-go decision.
7. Completion condition. State what ends the engagement — "three days of surveillance completed, or documented activity contradicting the restrictions, whichever comes first." Without it, an engagement drifts and the investigator keeps working past the point of legitimate purpose.
Building the Timeline Backwards From California Deadlines
Investigative timelines are almost never set by the investigator. They are set by the client's calendar, and in litigation support that calendar is statutory.
| Deadline | Authority | Planning consequence |
|---|---|---|
| Discovery cutoff — 30 days before the initial trial date | CCP § 2024.020(a) | Every witness statement and record you intend to feed into discovery must exist well before this date. |
| Discovery motions heard no later than 15 days before trial | CCP § 2024.020(a) | Subpoena disputes need lead time; a motion to quash filed against your records subpoena can consume weeks. |
| Consumer/employee records notice | CCP §§ 1985.3(b), 1985.6 | Add at least 10 days before production and 5 days before serving the custodian, plus the § 1013 mail extension. |
| Personal injury — 2 years | CCP § 335.1 | Locate-and-serve work must finish inside the period. |
| Written contract — 4 years; oral contract — 2 years | CCP §§ 337, 339 | Sets the outer edge of asset and due-diligence engagements. |
| Defamation — 1 year | CCP § 340(c) | Reputation investigations are time-critical. |
| Claim against a public entity — 6 months | Gov. Code § 911.2 | The shortest clock most investigators meet; a late claim usually kills the case outright. |
| Service of summons — 3 years from filing | CCP § 583.210 | Frames skip-trace-and-serve engagements. |
Work the schedule in reverse: fix the client's hard date, subtract report preparation, subtract analysis, subtract fieldwork, subtract records lead time, and the remainder is your start date. If the remainder is negative, that is a conversation to have with the client on day one — not in week three.
Change Control: Approving Revisions to the Plan
A plan that cannot change is useless, and a plan that changes silently is dangerous. Adopt a simple, documented rule:
- Trigger. The subject moves counties, the identified vehicle turns out to be registered to a third party, the budget is 70% consumed at 40% of the objective, or a method proves legally unavailable.
- Written proposal. State what changed, what you now propose, the cost delta, and the effect on the deliverable date.
- Client approval before performance. Approval by email is sufficient and creates the record. Work performed before approval is at the investigator's risk and, if billed, invites a complaint under BPC § 7561.1(g).
- Version the plan. Date and number each revision. When you later testify, "Revision 3, approved by the client on 12 May, expanded surveillance to the Bakersfield jobsite" is a far stronger answer than a recollection.
- Stop conditions. Some triggers end the engagement rather than expand it: discovering the client's objective is to locate a person protected by a restraining order, discovering an undisclosed conflict, or a client instruction that cannot be executed lawfully.
Case Example: Planning a Workers' Compensation Surveillance
Scenario: A defence firm retains an investigator on 3 March. Trial is set for 6 October. The claimant is alleged to be operating a side landscaping business despite lifting restrictions. Budget: $4,500.
Plan built backwards. Discovery cutoff is 6 September (30 days before trial, CCP § 2024.020). Records subpoenas for the claimant's business filings and any DMV-permissible-use lookups need the § 1985.3 notice cycle, so those issue no later than mid-August. Report and exhibit preparation take a week, so fieldwork must conclude by late August. That leaves March through August — comfortable, which means the investigator should say so rather than pad the schedule.
Method sequence. Secretary of State bizfileOnline and county fictitious business name index first (cheap, no notice required); then Assessor and Recorder records for the residence; then three surveillance days scheduled around the pattern of life those records suggest.
Constraints written into the plan. No tracking device (no consent from a registered owner is obtainable). No audio recording of anything the claimant says (Penal Code § 632). No entry past the fence line; documentation from the public street only. No telephoto shots into the residence (Civil Code § 1708.8).
Change control in action. On the second surveillance day the claimant is observed loading a trailer registered to his brother in a neighbouring county. That is a trigger: the investigator emails the firm proposing two additional days at the brother's address, a $900 cost delta, and a revised delivery date; the firm approves in writing; the plan becomes Revision 2. The unauthorised alternative — simply following the trailer for two extra days and billing for it — would be unbillable work at best and, if the objective had already been satisfied, surveillance without a live legitimate purpose at worst.
An investigator is retained on 1 April in a civil matter with an initial trial date of 1 December. Working backwards, what is the latest date by which discovery, including any records the investigator intends to produce through subpoena, must be completed?
During a surveillance engagement the subject relocates to a county 90 miles away, which will add two operative days and $900 to a $4,500 budget. What does sound change control require?
Which element is the most common point of failure in an investigation plan, and why does it matter legally?
A client asserts that the subject lives at a specific address and asks the investigator to begin surveillance there immediately. How should the factual predicate section of the plan treat that assertion?