A criminal case may turn on a phone extraction, CCTV clip, cloud backup, location log or exported message. Yet a digital file is not self-proving merely because it looks authentic on a screen. It can be copied without visible loss, edited without obvious marks, stripped of metadata or separated from the device and account that gave it meaning. The real challenge is whether investigators and litigants can show where the material came from, whether it remained intact and how the court may legally read its contents.
The Bharatiya Sakshya Adhiniyam, 2023 (BSA), in force from 1 July 2024, gives electronic and digital records the same legal effect as other documents, subject to its special proof regime. That qualification is decisive. Admissibility, authenticity and evidentiary weight remain separate questions. A technically impressive extraction can fail for want of the statutory certificate; a formally certified file can still carry little weight if its provenance is doubtful.
Section 63 is a proof architecture, not a clerical form
Sections 61 and 62 recognise electronic records but route proof of their contents through Section 63. A printout, copied video, exported chat or file stored on optical, magnetic or semiconductor media is treated as a document when the statutory conditions are met. Those conditions ask whether the relevant computer or communication device was regularly used, whether information of that kind was fed in during the ordinary course, whether the system operated properly and whether the output reproduces the information so supplied.
Section 63(4) requires a certificate whenever a computer output is tendered. It must identify the record, explain how it was produced, provide suitable device particulars and address the statutory operating conditions. The BSA goes further than the old practice by prescribing a structured certificate in its Schedule. Part A is completed by the producing party and Part B by an expert. The form specifically records the hash value and contemplates SHA-1, SHA-256, MD5 or another legally acceptable standard, with the hash report enclosed. Because Section 63(4) says the certificate must accompany the record at each instance when it is submitted for admission, teams should not assume that a certificate filed at an earlier procedural stage will automatically cure every later production.
The hash proves sameness, not truth
A cryptographic hash is a digital fingerprint generated from the bytes of a file or storage image. If the value changes, the data has changed. If the acquisition hash and the verification hash match, the examiner can show that the examined copy is byte-for-byte the same as the preserved image. But a matching hash does not establish who authored a message, whether a camera clock was accurate, whether an account was compromised or whether the underlying event occurred. Those propositions require contextual evidence: account ownership, device possession, server logs, witness testimony, surrounding communications and, where appropriate, expert interpretation.
This distinction prevents two opposite errors. The prosecution should not present a hash as proof of guilt; the defence should not treat every absence of a hash as proof of fabrication. The real inquiry is whether the reliability gap is serious enough to affect admissibility or weight.
Chain of custody must describe every transformation
Digital chain of custody begins before seizure. The officer should document the device’s condition, network state, displayed time, SIM and storage identifiers, connected peripherals and the person from whom it was recovered. A powered-on phone presents different risks from a switched-off device: remote wiping, volatile encryption keys and incoming data may alter the evidence. The response should follow a documented forensic protocol rather than improvised browsing.
After acquisition, the record should show who handled the device or forensic image, when custody changed, which tool and version were used, whether the extraction was logical or physical, the source and destination hash values, and every conversion made for review or court presentation. A working MP4 clip or PDF transcript is not the master evidence. It is a derivative exhibit whose relationship to the preserved source must be explained. The Bharatiya Nagarik Suraksha Sanhita, 2023 also integrates audio-video electronic processes into searches, seizures and proceedings, making disciplined capture and preservation a procedural issue as well as an evidentiary one.
Cloud and platform evidence require provider-level thinking
Modern evidence rarely lives on one device. A chat may be synchronised across phones, backed up to a cloud service and accompanied by provider metadata unavailable to the user. Section 63(3) sensibly treats interconnected devices, networks, storage resources and intermediaries as a single system for the relevant activity. Practically, however, the party must identify the correct certifier. A user can explain an export made from her device; she cannot necessarily certify the operation of a platform’s servers. Preservation requests, lawful production orders and provider records should therefore be considered early, before retention periods expire.
Screenshots are especially fragile. They may establish what appeared on a screen, but often omit headers, message identifiers, timestamps, URLs, edit histories and account data. Wherever possible, collect the native file or platform export and preserve its metadata.
A courtroom-ready protocol
Reliable digital evidence is built through four linked records: a seizure record, a forensic acquisition record, a continuity log and a Section 63 certificate. The tendering witness should be able to connect them without speculation. The opponent should receive enough technical information to test the process without exposing unrelated personal data. Courts, in turn, should separate threshold admissibility from the ultimate weight of the record.
The BSA does not make digital evidence easy; it makes the reliability questions visible. The decisive habit is to design proof at the moment of collection, not after the charge-sheet or trial brief is complete. When provenance, integrity and statutory certification are planned together, the digital trail can move from seizure to sentence without losing its legal meaning.
Primary references
Bharatiya Sakshya Adhiniyam, 2023