Pinpointing TomTom location records: A forensic analysis

TomTom GPS navigation devices are one of the most popular kinds of satellite navigation devices in the UK, and are increasingly being examined in criminal cases to identify data of evidential value. This article outlines the format of TomTom location records and shows how these can be automatically extracted, enabling deleted location entries to be recovered. In addition, it shows how the type of a record – e.g. home or favourite location – can be determined and how to identify locations where the TomTom has actually been, as opposed to destinations which have been entered into the device. This information has been used in a number of different investigations including cases of kidnap, grooming, murder and terrorism, and can be of vital importance in cases where hundreds or even thousands of location entries are recovered from a TomTom device.