Authenticity of Electronic Records

1. Introduction

Authenticity of electronic records means establishing that an electronic record presented before a court is genuine, reliable, untampered with, and actually represents the information it is claimed to contain.

Electronic records include:

• emails;
• WhatsApp messages;
• SMS;
• computer files;
• CCTV footage;
• call recordings;
• call-detail records (CDRs);
• photographs and videos;
• social-media posts;
• server logs;
• GPS/location records;
• digitally signed documents;
• electronic contracts;
• banking and transaction records;
• cloud records.

Electronic evidence is particularly important because digital information can potentially be altered, deleted, copied, manipulated, or transferred without obvious physical signs. The Supreme Court has therefore repeatedly emphasized the importance of proving the source and authenticity of electronic records.

2. Meaning of Authenticity

An electronic record is authentic when the party relying upon it can sufficiently establish that:

1. the record actually originated from the claimed source;
2. the device or system associated with it is identifiable;
3. the record has not been materially altered or manipulated;
4. the method by which it was generated or stored is reliable;
5. the chain of custody is sufficiently established where relevant;
6. the person producing it has the necessary knowledge or certification;
7. the statutory requirements for admissibility have been satisfied.

Example

Suppose a person produces a WhatsApp conversation claiming:

“This message was sent by the defendant.”

The court may need to consider:

• whose phone contained the conversation;
• whether the phone/account belonged to the alleged sender;
• whether the conversation is complete;
• whether the messages were altered;
• how the electronic copy was extracted;
• whether it is the original record or a copy;
• whether the applicable electronic-evidence certificate has been provided.

Thus, authenticity and admissibility are related but distinct concepts.

3. Electronic Records under Indian Law

Historically, the principal statutory framework was found in Sections 65-A and 65-B of the Indian Evidence Act, 1872.

The Supreme Court developed detailed principles concerning electronic evidence through cases such as:

• Anvar P.V. v. P.K. Basheer;
• Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal;
• State (NCT of Delhi) v. Navjot Sandhu;
• Tomaso Bruno v. State of Uttar Pradesh;
• Shafhi Mohammad v. State of Himachal Pradesh;
• Sonu v. State of Haryana.

Current-law note: The Indian Evidence Act, 1872 has been replaced by the Bharatiya Sakshya Adhiniyam, 2023 (BSA). The corresponding framework for electronic/digital records is now principally found in the BSA, including its provisions dealing with electronic records and certificates. However, the major Supreme Court decisions under Section 65-B remain extremely important for understanding the underlying principles of authenticity and electronic evidence.

4. Primary and Secondary Electronic Evidence

A major distinction is between the original electronic record and a computer output/copy.

Primary electronic evidence

This may involve the original device or original electronic information itself, for example:

• the original mobile phone;
• the original laptop;
• the original storage device;
• the original electronic file.

Secondary electronic evidence

Examples include:

• printouts;
• copied files;
• CDs/DVDs;
• pen drives containing extracted information;
• screenshots;
• exported WhatsApp chats;
• copied CCTV footage;
• downloaded emails.

The Supreme Court's decision in Arjun Panditrao Khotkar clarified the distinction between the original electronic record and computer output and explained when the statutory certificate requirement applies.

5. Section 65-B Certificate

Under the former Evidence Act, Section 65-B was central to proving secondary electronic evidence.

The certificate generally addressed matters such as:

• identification of the electronic record;
• the manner in which it was produced;
• identification of the device/system;
• regular use of the computer/system;
• proper functioning of the relevant system;
• circumstances supporting the reliability of the output.

The Supreme Court described the certificate as an important safeguard for establishing the source and authenticity of electronic evidence.

Under the present BSA framework, the corresponding statutory requirements should be examined under the applicable provisions of the BSA rather than mechanically referring only to Section 65-B.

6. Why Authenticity Is Important

Electronic evidence is different from traditional paper evidence because digital information can be modified very easily.

For example:

Screenshot

A screenshot of a WhatsApp conversation may be created or edited without immediately revealing the alteration.

Audio

A recording can potentially be:

• edited;
• cut;
• spliced;
• enhanced;
• selectively reproduced.

CCTV

Footage may be:

• deleted;
• overwritten;
• exported incorrectly;
• edited;
• taken from an unidentified system.

Email

Questions may arise regarding:

• sender identity;
• account ownership;
• metadata;
• server records;
• alteration;
• forwarding;
• authenticity of attachments.

Therefore, the court must consider whether the electronic record can safely be relied upon.

7. Six Important Case Laws

1. State (NCT of Delhi) v. Navjot Sandhu

(2005) 11 SCC 600

This is one of the early important Supreme Court decisions dealing with electronic evidence.

The case concerned electronic records including telephone records. The Court considered how computer-generated information could be proved under the Evidence Act.

The decision initially permitted certain electronic records to be proved through the general provisions relating to documentary evidence.

Importance

The case represented the earlier judicial approach to electronic evidence.

However, its approach concerning proof of secondary electronic evidence was subsequently overruled/modified by the larger-bench decision in Anvar P.V. v. P.K. Basheer.

Legal significance

It is important historically because it shows the development of Indian law from a relatively flexible approach toward a more specific statutory regime for electronic evidence.

8. Anvar P.V. v. P.K. Basheer

(2014) 10 SCC 473

This is one of the most important judgments on electronic evidence in India.

The Supreme Court held that electronic records sought to be admitted as secondary evidence must comply with the special requirements of Section 65-B of the Evidence Act.

The Court emphasized that the statutory safeguards exist because electronic records are susceptible to:

• alteration;
• tampering;
• excision;
• transposition;
• manipulation.

The Court specifically emphasized source and authenticity as fundamental safeguards.

Principle

The special statutory procedure under Section 65-B was required for secondary electronic evidence.

Importance

Anvar P.V. effectively changed the legal landscape concerning electronic records and rejected the broader approach previously adopted in Navjot Sandhu concerning proof of secondary electronic evidence.

9. Tomaso Bruno v. State of Uttar Pradesh

(2015) 7 SCC 178

This case concerned, among other things, the significance of CCTV footage and electronic evidence in criminal investigation.

The Supreme Court recognized the increasing importance of electronic and scientific evidence in modern criminal investigation.

The Court observed that CCTV and other electronic material can be extremely important for establishing events.

Importance for authenticity

CCTV footage should not simply be assumed to be genuine because it comes from a surveillance system.

Issues may include:

• identity of the recording system;
• integrity of the footage;
• continuity of the recording;
• extraction procedure;
• preservation;
• possibility of alteration.

Subsequent development

However, Tomaso Bruno created tension with Anvar P.V. regarding the manner of proving secondary electronic evidence. This conflict was subsequently resolved by the larger bench in Arjun Panditrao Khotkar.

10. Shafhi Mohammad v. State of Himachal Pradesh

(2018) 2 SCC 801

In Shafhi Mohammad, the Supreme Court adopted a more flexible approach regarding the Section 65-B certificate, particularly where the electronic device was not under the control of the party seeking to produce the evidence.

Importance

The case recognized a practical difficulty:

What happens when a party wants to produce electronic evidence but does not control the device or computer from which it originated?

The judgment therefore relaxed the certificate requirement in certain circumstances.

Later position

This approach did not remain the final law.

The three-judge bench in Arjun Panditrao Khotkar subsequently held that Shafhi Mohammad did not correctly state the law on this issue and overruled it.

11. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal

(2020) 7 SCC 1

This is arguably the leading modern Supreme Court authority on authentication and admissibility of electronic evidence under the former Evidence Act.

The Court reaffirmed Anvar P.V. and clarified the conflicting authorities.

The Court held that the Section 65-B(4) certificate was a condition precedent for admissibility of secondary electronic evidence in the circumstances covered by the provision. It also overruled Shafhi Mohammad and treated Tomaso Bruno as having not correctly stated the law on this point.

Important exception

The Court clarified that a certificate is not necessary in the same way where the original electronic record/device itself is produced.

For example, where the original information is stored on a person's:

• mobile phone;
• laptop;
• computer;

and that original device is produced and proved appropriately, the certificate requirement applicable to secondary computer output does not operate in the same manner.

Importance

This case established an important balance:

Original electronic evidence → different treatment

Secondary electronic evidence → statutory certification requirements

12. Sonu @ Amar v. State of Haryana

(2017) 8 SCC 570

The Supreme Court dealt with objections concerning electronic evidence, including call-detail records.

The case is important for understanding the distinction between:

• admissibility, and
• the timing and manner of objections.

Importance

The case contributed to the broader discussion about whether objections to electronic evidence concern the mode of proof or the fundamental admissibility of the material.

Subsequent decisions, particularly Arjun Panditrao, clarified the position concerning Section 65-B and the certificate requirement.

Thus, Sonu should be read together with the later larger-bench authorities.

13. Mohd. Ajmal Amir Kasab v. State of Maharashtra

(2012) 9 SCC 1

The Supreme Court considered extensive electronic and digital evidence in the Mumbai terrorist attack prosecution.

Electronic records and internet-related information formed part of the evidentiary material used by the prosecution.

The case illustrates the importance of electronic records in proving:

• communications;
• movements;
• internet activity;
• connections between individuals;
• sequence of events.

The later electronic-evidence jurisprudence has referred to Kasab as an example of the practical evidentiary importance of electronic records.

14. Union of India v. CDR Ravindra V. Desai

(2018) 16 SCC 272

This case reinforced the importance of proper certification in relation to electronic records.

It is relevant to the proposition that where electronic evidence is sought to be introduced as secondary evidence, the statutory requirements concerning certification cannot simply be ignored.

The Supreme Court's later decisions have referred to the case while discussing compliance with the electronic-evidence requirements.

15. Key Principles Emerging from the Cases

The cases collectively establish several important principles.

Principle 1: Relevance alone is not enough

An electronic record may be highly relevant but still have to satisfy the applicable rules governing its proof and admissibility.

Principle 2: Authenticity is fundamental

The court must have sufficient assurance regarding:

• source;
• integrity;
• reliability;
• manner of creation;
• preservation.

The Supreme Court has specifically described source and authenticity as essential safeguards for electronic records.

Principle 3: Electronic evidence is vulnerable to manipulation

Unlike physical documents, digital files can often be copied and altered without visibly changing their appearance.

Therefore, courts require safeguards against:

• editing;
• deletion;
• manipulation;
• substitution;
• selective extraction.

Principle 4: Original and copy are not the same

An original electronic record stored on the original device is conceptually different from a printout, screenshot, exported file, or other computer output.

Arjun Panditrao expressly clarified this distinction.

Principle 5: Certificate requirements matter

For secondary electronic evidence falling within the relevant statutory provisions, the required certificate is an important condition for admissibility.

The Supreme Court expressly reaffirmed this in Arjun Panditrao.

16. Authentication of Different Types of Electronic Records

A. WhatsApp Messages

The court may examine:

• mobile phone;
• WhatsApp account;
• phone number;
• identity of user;
• original device;
• extraction method;
• completeness of conversation;
• metadata or other corroborating material;
• applicable statutory certification.

A mere screenshot should not automatically be treated as conclusive proof of authorship or authenticity.

B. Emails

Authentication may involve:

• email address;
• account ownership;
• server records;
• metadata;
• electronic signatures;
• surrounding correspondence;
• recipient's conduct;
• original device or server evidence.

C. CCTV Footage

Important factors include:

• identification of CCTV system;
• date and time settings;
• original storage medium;
• continuity of footage;
• extraction procedure;
• preservation;
• certificate where applicable;
• evidence of the person responsible for the system.

D. Audio Recordings

The court may consider:

• identity of speakers;
• device used for recording;
• originality of recording;
• continuity;
• absence of manipulation;
• accuracy;
• clarity;
• manner in which the recording was preserved.

E. Call Detail Records

Important matters include:

• telecom service provider;
• source of the records;
• relevant server/system;
• responsible official;
• certification;
• integrity of the records.

Recent Supreme Court decisions continue to emphasize proper compliance when CDRs are relied upon as electronic evidence.

17. Chain of Custody

Chain of custody refers to maintaining a documented history of an electronic record from its collection until its production before the court.

For example:

CCTV system → extraction → storage device → investigating officer → forensic examination → court

At every stage, it is desirable to establish:

• who possessed the evidence;
• when it was transferred;
• how it was stored;
• whether it was altered;
• whether its integrity was maintained.

A strong chain of custody increases confidence in authenticity.

18. Hash Values and Digital Forensics

Modern electronic evidence may also be authenticated through digital forensic techniques.

A hash value is a mathematical representation generated from digital data.

If a file is changed, even slightly, its hash value will ordinarily change.

Therefore, forensic investigators may record hash values at the time of seizure or extraction and compare them later.

This can help establish integrity, although a hash value by itself does not necessarily establish who created the file or whether the underlying source was truthful.

19. Authenticity vs Admissibility vs Reliability

These concepts should not be confused.

Authenticity

Is this really the electronic record it is claimed to be?

Admissibility

Does the law permit the court to receive and consider it as evidence?

Reliability

Can the court safely rely upon the information contained in it?

Example

A WhatsApp screenshot may appear genuine.

But the court may still ask:

Is it authentic?

Then:

Has it been proved in the legally prescribed manner?

And finally:

Is it reliable and does it actually establish the alleged fact?

Thus, authenticity is only one component of the overall evidentiary analysis.

20. Practical Checklist for Authenticating an Electronic Record

Before relying upon an electronic record, a lawyer should consider:

Step 1 — Identify the source

Where did the record originate?

Step 2 — Identify the device/system

Which phone, computer, server or recording system created/stored it?

Step 3 — Preserve the original

Avoid unnecessary modification of the original device or file.

Step 4 — Create a forensic copy where appropriate

Use a proper forensic extraction process.

Step 5 — Record metadata

Preserve relevant date, time, file and system information.

Step 6 — Maintain chain of custody

Document every transfer.

Step 7 — Establish authorship

Where necessary, prove who created, sent or operated the record.

Step 8 — Obtain the applicable certificate

For secondary electronic evidence, comply with the applicable statutory certification requirements.

Step 9 — Corroborate

Where appropriate, support the record with:

• witness testimony;
• server records;
• telecom records;
• forensic evidence;
• surrounding circumstances.

Step 10 — Demonstrate integrity

Show that the record has not been altered or manipulated.

21. Important Case-Law Summary

22. Conclusion

The authenticity of electronic records is fundamental to modern evidence law because digital information is highly susceptible to copying, alteration and manipulation.

Indian courts have developed a structured approach requiring attention to:

• source of the record;
• original device;
• integrity of the data;
• method of extraction;
• chain of custody;
• certificate requirements;
• authorship;
• reliability; and
• the distinction between primary and secondary electronic evidence.

The most important authorities are Anvar P.V. v. P.K. Basheer and Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal. The latter clarified that the statutory certificate requirement for secondary electronic evidence is a critical safeguard, while an original electronic record/device may be treated differently.

Therefore, the basic legal proposition is:

An electronic record should not be accepted merely because it exists in digital form; its source, integrity, authenticity and legally prescribed mode of proof must be established before the court can safely rely upon it.