Evidence Law

Digital Evidence

Digital evidence refers to any information stored or transmitted in electronic form that can be used in a court of law, including emails, electronic records, digital photographs, social media data, and computer-generated documents.


What is Digital Evidence?


**Digital evidence** (also called **electronic evidence**) is any probative information stored in or transmitted through an electronic medium that can be presented in court to establish facts relevant to a legal proceeding. This includes emails, text messages, WhatsApp chats, social media posts, CCTV footage, GPS data, call records, computer files, digital photographs, website content, electronic transactions, and any other form of electronically stored information.


In everyday terms, digital evidence is any form of electronic data that can help prove or disprove facts in a legal case — from a screenshot of a threatening message to bank transaction records to CCTV footage of an incident.


Legal Definition and Framework


The admissibility of digital evidence in India is governed by the **Indian Evidence Act, 1872 (IEA)** (as amended by the Information Technology Act, 2000), and under the new law by the **Bharatiya Sakshya Adhiniyam (BSA), 2023**.


Key Legal Provisions


- **Section 3 IEA (as amended):** The definition of "evidence" includes electronic records. "Document" is defined to include any matter expressed or described by electronic means.


- **Section 65A IEA / Section 61 BSA:** Special provisions as to evidence relating to electronic records — the contents of electronic records may be proved in accordance with Section 65B.


- **Section 65B IEA / Section 63 BSA — Admissibility of electronic records:** This is the most critical provision governing digital evidence. It provides that any information contained in an electronic record which is printed on paper, stored, recorded, or copied in optical or magnetic media, produced by a computer, shall be deemed to be a document and shall be admissible as evidence of any fact stated therein, provided certain conditions are satisfied.


- **Section 67A IEA / Section 65 BSA:** Proof as to electronic signature — if a digital signature is alleged to have been affixed by a person, it must be proved that the digital signature was affixed by that person or under their authority.


- **Section 85A IEA:** Presumption as to electronic agreements — the court shall presume that an electronic record produced before it was authenticated by means of electronic signature, unless denied.


- **Section 85B IEA:** Presumption as to electronic records and electronic signatures — five years old electronic records signed by electronic signature are presumed to be genuine.


The Section 65B Certificate


The **Section 65B certificate** is the cornerstone of digital evidence admissibility. Under Section 65B(4) IEA / Section 63(4) BSA, a certificate must accompany the electronic record containing:


1. A statement identifying the electronic record and describing the manner in which it was produced.

2. The particulars of the device involved in the production of the electronic record.

3. A statement that the conditions specified in Section 65B(2) relating to the information and the computer are satisfied.

4. The certificate must be signed by a person occupying a **responsible official position** in relation to the operation of the relevant device or the management of the relevant activities.


Conditions Under Section 65B(2)


For electronic evidence to be admissible, the following conditions must be satisfied:


- The electronic record was produced by a computer during the period over which the computer was used regularly.

- During that period, information was regularly fed into the computer in the ordinary course of activities.

- The computer was operating properly throughout the relevant period (or any malfunction did not affect the accuracy of the record).

- The information in the electronic record reproduces or is derived from information supplied to the computer in the ordinary course of activities.


Landmark Judgments on Digital Evidence


Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473


This landmark three-judge bench decision of the Supreme Court **overruled** the earlier position and held that:


- Electronic records can only be proved by producing a **Section 65B certificate**.

- The general provisions of Sections 63 and 65 (secondary evidence) do not apply to electronic records — Section 65B is a **complete code** for admissibility of electronic evidence.

- Without a Section 65B certificate, electronic evidence is **inadmissible**.


Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) 7 SCC 1


A three-judge bench **clarified and reinforced** Anvar P.V. and held that:


- The requirement of a Section 65B(4) certificate is **mandatory** for admissibility of electronic evidence.

- The certificate must be contemporaneous or near-contemporaneous with the production of the electronic record.

- If the original electronic device is produced in court, a Section 65B certificate is **not required** — the certificate is needed only when a copy or printout of the electronic record is being produced.

- If the party is unable to obtain the certificate (for example, when the device is in the possession of the opposing party), they may apply to the court for appropriate directions.


Shafhi Mohammad v. State of Himachal Pradesh (2018) 2 SCC 801


A two-judge bench had held that the Section 65B certificate requirement is directory (not mandatory). However, this was effectively overruled by the larger bench in **Arjun Panditrao (2020)**, which confirmed the mandatory nature of the certificate.


Types of Digital Evidence


1. Computer-Generated Records


Automatically generated by computers without human intervention — server logs, system timestamps, automated reports, ATM transaction records.


2. Computer-Stored Records


Records created by humans and stored in electronic form — emails, word processing documents, spreadsheets, databases, digital contracts.


3. Audio and Video Recordings


CCTV footage, call recordings, video conferences, body camera footage, and voice recordings stored in electronic format.


4. Social Media Evidence


Posts, messages, photographs, and interactions on platforms like Facebook, Instagram, Twitter, WhatsApp, and LinkedIn.


5. Mobile Phone Data


Call records, text messages, GPS location data, photographs, app data, and browsing history from mobile devices.


When Does This Term Matter?


Criminal Investigations


Digital evidence plays a critical role in modern criminal investigations — from cybercrimes and financial fraud to murder and terrorism cases. Call detail records (CDRs), IP address logs, CCTV footage, and digital communications are routinely used to establish the movements, associations, and activities of the accused.


Civil and Commercial Disputes


Emails, digital contracts, electronic communications, and financial records are key evidence in commercial litigation, contractual disputes, and arbitration proceedings.


Matrimonial Disputes


WhatsApp messages, social media posts, call recordings, and photographs are increasingly used as evidence in divorce, custody, and domestic violence cases. The Delhi High Court in several cases has admitted WhatsApp conversations as evidence when accompanied by a Section 65B certificate.


Cybercrime Cases


The **Information Technology Act, 2000** deals with offences like hacking, identity theft, data breach, and cyberterrorism. Digital evidence is the primary evidence in such cases, and forensic analysis of devices and networks is essential.


Practical Significance


- The **Section 65B certificate is mandatory** for admissibility of electronic evidence (unless the original device itself is produced). Failure to produce the certificate can result in the evidence being rejected entirely.

- **Chain of custody** must be maintained — digital evidence must be collected, stored, and presented in a manner that ensures its integrity and prevents tampering.

- **Digital forensics** experts play a crucial role in extracting, preserving, and authenticating digital evidence. Their expert testimony often accompanies the production of electronic records.

- **Hash values** (digital fingerprints) are used to verify that electronic evidence has not been altered from the time of collection to the time of production in court.

- The **Bharatiya Sakshya Adhiniyam (BSA), 2023** has retained the framework of Section 65B with minor modifications, ensuring continuity in the treatment of electronic evidence.


Frequently Asked Questions


Is a screenshot admissible as evidence in court?


A screenshot can be admissible as evidence if it is accompanied by a **Section 65B certificate** from the person responsible for the device that captured the screenshot. The certificate must identify the electronic record and confirm that the conditions for admissibility are satisfied. Without the certificate, a mere screenshot may be challenged and declared inadmissible.


Can WhatsApp messages be used as evidence?


Yes. WhatsApp messages are electronic records and are admissible under Section 65B, provided the requisite certificate is produced. The Supreme Court and various High Courts have accepted WhatsApp messages as evidence in criminal, civil, and matrimonial proceedings. However, the authenticity of the messages — that they were actually sent by the alleged sender and have not been tampered with — must be established.


What happens if digital evidence is tampered with?


Tampered digital evidence is liable to be **rejected** by the court. The opposing party can challenge the integrity of electronic records by demonstrating inconsistencies, absence of a proper chain of custody, or forensic analysis showing manipulation. Additionally, producing fabricated or tampered digital evidence is a criminal offence under the IT Act and the IPC, attracting penalties including imprisonment.


Do I always need a Section 65B certificate for electronic evidence?


The Supreme Court in **Arjun Panditrao (2020)** clarified that a Section 65B certificate is required when a **copy** or printout of an electronic record is being produced. If the **original electronic device** (such as a laptop, phone, or hard drive) is produced before the court, the certificate is not required. However, in practice, original devices are rarely produced, and parties must ensure they obtain the certificate at the time of collecting the evidence.


Disclaimer: This glossary entry is for informational purposes only and does not constitute legal advice.