Recording an internal violation that holds up to challenge

Community By Juliano Baladão · 4 September 2026 · 5 min read

One person's word against another's is the natural state of almost every internal record

The typical case starts well: someone saw it, the gate attendant confirms it, the management company sends a notice. And then the resident answers with three sentences — it was not me driving, it was not at that hour, that photo shows nothing. Nobody gets anywhere, because all that exists is the memory of two people and an image with no context. The property manager backs off to avoid a fight, and the rule written into the bylaws loses authority for the next case.

The way out is not to accuse more firmly. It is to produce a record that answers those three sentences on its own — less technology and more discipline: deciding, before the first case, what the community treats as a valid record, and applying that criterion equally to everyone.

What does not work as a record?

Three formats turn up in almost every community and support nothing once they are challenged.

• A phone photo with no context. It does not say where it was, when it was or what was happening. The clock on the device can be changed by the person who took it, and the image carries no fixed element to anchor the place. It works as an internal heads-up, not as the basis for a sanction.
• A screenshot from a messaging group. It records that somebody said something, not that the thing happened. And it drags in content from third parties who have nothing to do with the case.
• An account from a third party with no record attached. A witness has value, but on its own it reproduces the original problem: two versions and no object. An account is there to start an investigation, not to close it.

The practical criterion is simple: if the record only stands because one person says it is true, it is not a record. It is testimony.

Does a digital photograph count as evidence?

It does, with one condition. Art. 422 of Brazil's code of civil procedure (Código de Processo Civil) gives any mechanical reproduction the standing to prove the facts it represents if its conformity with the original is not challenged by the party against whom it was produced. Paragraph 1 deals with the digital case: digital photographs prove the images they reproduce, “devendo, se impugnadas, ser apresentada a respectiva autenticação eletrônica ou, não sendo possível, realizada perícia” — if challenged, the corresponding electronic authentication has to be produced or, where that is not possible, an expert examination carried out.

Two consequences follow. As long as nobody challenges it, almost anything gets through — which is why so many management companies believe their process works, right up until someone decides to argue. And when the challenge comes, the question stops being “is the image convincing?” and becomes “is there electronic authentication for this file?”. Producing it later is expensive; producing it at capture is practically free.

The backdrop: art. 369 guarantees the parties the use of all lawful means to prove the facts, and art. 371 gives the judge a reasoned appraisal of the evidence. There is no mandatory format for proving an internal violation — there is what survives a challenge and what does not. Which is why it is worth looking not at a checklist of items, but at what the defense usually says and at the legal question each line raises.

Notice what those five lines have in common: none of them argues with the image itself, all of them argue with who stands behind it. Which is why the useful answer is not a better image, but one the other party can check without depending on whoever produced it. The principle is far older than any technology: whoever makes a claim has to be open to verification by the person who disagrees.

A chain of integrity is what separates a record from any old file

A chain of integrity means being able to demonstrate that the file presented today is the one recorded on the day of the fact. The usual instrument is a cryptographic hash function: a fixed-length digest computed over the content, which changes completely if a single bit changes. Whoever receives the file recomputes the digest and compares. If it matches, the content is the same.

What that reaches has to be stated honestly, because confusion here produces overblown claims at HOA meetings. A hash does not prove when the image was made, does not prove that it depicts what is claimed and does not prove who produced it. It proves one thing only, and proves it well: that the file has not changed since the digest was computed. The moment, the place and the method are separate elements, each with a mechanism of its own — the subject has a whole piece to itself in video evidence that holds.

One operational detail settles a great many cases: who can run the check. Verification that depends on the community opening its own system and showing a screen is circular. What ends an argument is an independent check — the accused, his lawyer or an expert examining the file on their own.

Does the accused need a right to a defense?

In practice, yes — for a pragmatic reason. The Civil Code sets the amount and the quorum for a community fine, but it does not describe the procedure: that comes from the bylaws and the house rules. With no written procedure, every notice is improvised, and improvisation is the easiest argument for anyone trying to void the charge.

A minimum procedure fits in five lines of the house rules: who investigates, how long before the unit owner is notified, through which channel, what the deadline for a defense is, who rules and whether there is an appeal. Alongside it, a rule on retention: the record is kept for as long as the procedure lasts, and no longer.

Equal treatment is what keeps the rule standing at the next HOA meeting

A good record loses its value when it is used selectively. If three residents went over the limit on the same stretch and only one was notified, the argument stops being about speed and becomes about a vendetta — and on that ground the community loses, however impeccable the evidence.

Which is why the trigger has to be defined beforehand and apply to everyone: same stretch, same limit, same procedure, same sequence of warning and sanction. It is also what makes it possible to account for the results without exposing anyone — an aggregate number per stretch and per time band on the notice board, with no names, and the individual case kept inside the notice procedure.