Random access memory (RAM) is the volatile working memory of a digital device. In legal practice it is relevant to digital evidence, disclosure/eDisclosure, discovery, and search and seizure. RAM provides very fast read/write access and temporarily stores the operating system, running applications and active file data on desktops, laptops, smartphones, tablets and servers while powered; it is cleared on shutdown.
RAM is not generally defined in UK or Irish legislation; it is a descriptive technical term used across computer misuse, copyright and data‑protection contexts. In copyright, data existing only transiently in RAM is commonly treated as a “temporary copy” and may fall within statutory exceptions (for example, UK CDPA 1988, s.28A), depending on the facts.
Forensically, RAM’s volatility means evidence (such as unsaved documents, chat fragments, credentials and encryption keys) may only be preserved by live capture or memory imaging. This should be undertaken lawfully and in a forensically sound manner with an audit trail, considering warrants or production orders, privilege, privacy and data‑minimisation duties. Treatment is broadly consistent across England & Wales, Scotland, Northern Ireland and Ireland.