Cybercrimes Act __________________________________________________________________ (b) permitting and assisting the law enforcement officer to collect or record that data. (2) For the purposes of this section, “traffic data” means(a) information relating to communication by means of a computer system; (b) the information generated by computer system that is part of the chain of communication; and (c) information that shows the communication’s origin, destination, route, time, size, duration or the type of underlying service. Disclosure and collection of content data 35. where there is a reasonable ground to suspect or believe that the content of an electronic communication is required for the purposes of investigation, a ploce officer incharge of a police station or a law enforcement officer of a similar rank may issue an order (a) to collect, record, permit or assist the relevant authority to collect or record content data associated with specified communications transmitted by means of a computer system; or (b) to collect or record the computer data through technical means. Court order 36. Where the disclosure or preservation of data, under sections 31, 32, 33, 34 and 35, as the case may be, can not be done without the use of force or due to resistance from the part holding data or evidential value of data can be preserved through the order of the court, a law enforcement officer may apply to court for an order for the disclosure or preservation. Use of forensic tool 37.-(1) Where a law enforcement officer is satisfied that essential evidence cannot be collected under this Part, he may apply to the court for an order to authorise the use of a forensic tool. (2) The application under subsection (1) shall contain(a) the name and address of the suspect; (b) a description of the targeted computer system; and (c) a description of the intended measures, purpose, extent and duration of the utilization. (3) The law enforcement officer shall ensure that any modification made to the computer system or computer data of the suspect are limited to the investigation and that any changes reversed after the completion of the investigation is restored into the system. 19