Defamation evidence workflow: building a publication chronology

The distinguishing feature is that a single statement is rarely the whole story. Reach, republication, and how the claim spread across accounts or platforms are usually as important as the original post, and they need their own capture and dating.

That means a defamation workflow adds two things a general harassment capture does not always need: proof of publication and reach, and ongoing tracking of repeat or mirrored versions of the same claim. Both are covered below, alongside the core capture and chronology steps common to any online-harm evidence file.

Capture the exact wording of the statement, not a paraphrase, along with the account or byline that published it, the platform or publication, and the date and time as it appeared. Take a full-page, uncropped screenshot or recording that includes the URL bar and any visible timestamp, and save the source URL separately as text, since a screenshot of a URL is harder to verify than the URL itself.

Context matters as much as the statement. Capture the surrounding thread or article, since replies, quote-posts, or an editor's note can change how a statement reads. If the statement appears in a comment section, capture the parent post or article it responds to, since defamatory comments are sometimes evaluated in light of what they were replying to.

• Exact wording of the statement, captured verbatim, not summarized
• Source URL, publisher or account handle, and platform or publication name
• Visible timestamp and, where available, an edit history or "last updated" marker
• The surrounding thread, article, or comment section for context
• Author or account details as they appeared at capture time, since accounts are sometimes renamed after a statement draws attention

Publication and reach are separate facts from the statement itself, and they need their own record. Reach evidence shows how far a statement traveled and how many people plausibly saw it, which is distinct from whether the statement was published at all.

• Visible engagement signals at capture time: view counts, like counts, share or repost counts, and comment counts, recorded with the date they were observed, since these numbers change constantly
• Screenshots of the statement appearing in a feed, search result, or notification, which help show it was actually surfaced to an audience rather than only existing at a static URL
• Evidence that specific people saw the statement, where available: replies referencing it, screenshots forwarded to the affected party, or direct confirmation from a third party who saw it
• The publication's or account's general audience size or reach at the time, as context for how far the statement plausibly traveled

A publication chronology lists every instance of the statement, in date order, with its own source, capture, and reach notes. This is the working document that turns a single defamatory post into a complete record of how a claim entered and moved through public view.

Each entry should include:

• Date and time of publication or republication, with the time zone noted
• Source: the exact URL, account, or publication
• A short factual description of what changed, if this is a republication or a variant of the original wording
• A link to the capture file or evidence ID for that instance
• Whether the entry is observed directly (visible in a capture), reported (told to you by someone else), or inferred (a connection you believe exists but have not directly observed)

Mark gaps explicitly. If there is a period where the statement may have spread but you have no captures, note the gap rather than guessing at what happened during it. A chronology that states its own limits plainly is more useful to counsel than one that quietly smooths over uncertainty.

Defamatory statements rarely stay in one place. They get quoted, screenshotted and reposted, summarized by other accounts, or republished after an initial takedown. Each instance is a separate fact for the chronology, and treating repeat publication as an ongoing task, rather than a single capture, is what keeps the file current as the situation develops.

• Search periodically for exact phrases from the original statement, since verbatim reposts are the easiest to find and connect back to the source
• Track accounts that quoted, screenshotted, or summarized the original statement, with their own source URLs and dates
• Note when a statement resurfaces after a period of dormancy, since a gap followed by a new appearance is itself a fact worth recording
• Keep each republication instance separate in the chronology rather than merging it into the original entry, since counsel may need to treat each instance individually depending on the jurisdiction and facts

Whether each republication legally resets any relevant time limit or counts as a fresh instance is a question for counsel, and it can vary by jurisdiction and circumstance. Your task is to capture every instance with its own date and source; the legal significance of repeat publication is not something to resolve at capture time.

Once a defamatory statement is taken down, whether by the author, a platform, or in response to a legal request, the strongest remaining evidence is whatever was captured beforehand. Preservation should come first, before any removal request goes out, so that the record exists independently of whether the request succeeds. This is true even when removal feels urgent: a hurried takedown request with no prior capture can leave a gap in the record that is impossible to fill later.

Hand counsel a dated chronology, not a narrative account of what you believe happened. Include the captures themselves, organized and referenced by the chronology, and a short summary of the affected party, the general nature of the statements, and the date range covered. Keep your own conclusions about whether something was defamatory in a clearly separate section from the factual record, so counsel can review the facts and reach their own assessment.

For the underlying capture and chronology mechanics that apply across any harm type, see the defamation evidence chronology workflow and the reputation attack evidence monitoring workflow. If your matter involves UK-specific considerations, the United Kingdom jurisdiction hub covers relevant context. Law firms building an intake path for reputational matters can see how evidence packs fit into existing client work at for law firms.