1. Introduction

Record tampering in investigations refers to the intentional alteration, deletion, concealment, fabrication, destruction, or manipulation of documents, electronic records, statements, registers, CCTV footage, emails, audit trails, or other evidence relevant to an investigation.

It may occur during criminal investigations, workplace disciplinary proceedings, regulatory inspections, employment disputes, internal compliance reviews, corporate fraud inquiries, or judicial proceedings. Tampering may be committed by an employee, investigator, manager, public official, witness, or another person who has access to the relevant records.

The primary purpose of maintaining accurate investigative records is to preserve the integrity of evidence, ensure procedural fairness, protect the rights of affected persons, and enable a court or competent authority to reach a reliable conclusion.

Record tampering can undermine an entire investigation because the decision-maker may be unable to distinguish genuine evidence from manipulated material. Depending on the circumstances and applicable law, it may lead to criminal prosecution, disciplinary action, adverse evidentiary inferences, regulatory penalties, or the exclusion of unreliable evidence.

2. Meaning and Scope of Record Tampering

Record tampering includes several forms of misconduct:

Alteration of records: Changing dates, figures, signatures, entries, statements, or other material information after the record has been created.

Fabrication of evidence: Creating false documents, emails, attendance registers, witness statements, or electronic communications and presenting them as genuine.

Destruction of evidence: Deliberately destroying, deleting, shredding, or rendering records inaccessible to prevent their examination.

Concealment of records: Hiding relevant documents or withholding evidence to obstruct an investigation.

Manipulation of digital evidence: Editing metadata, deleting electronic logs, altering CCTV recordings, modifying access histories, or interfering with forensic copies.

Backdating or falsification: Making a document appear to have been created, approved, or signed at a different time than it actually was.

Improper alteration of witness statements: Changing a person's statement without authorisation or misrepresenting what the witness actually said.

Interference with the chain of custody: Failing to document transfers of evidence, replacing original material, or introducing unexplained changes that compromise authenticity.

Not every correction or deletion constitutes unlawful tampering. Legitimate corrections, authorised redactions, routine data-retention practices, and properly documented amendments may be lawful. The decisive factors include intention, authority, materiality, applicable legal duties, and the effect on the investigation.

3. Legal Framework Governing Record Tampering in India

A. Bharatiya Nyaya Sanhita, 2023

The Bharatiya Nyaya Sanhita (BNS), which came into force on 1 July 2024, contains provisions dealing with offences such as:

Forgery: Creating false documents or electronic records in circumstances covered by the relevant statutory provisions.

Forgery for the purpose of cheating: Falsifying records to facilitate deception or wrongful gain.

Using forged documents or electronic records as genuine: Knowingly presenting fabricated material as authentic.

Destruction of evidence: Destroying or concealing evidence with the intention of preventing its production in legal proceedings or otherwise screening an offender, where the statutory requirements are met.

False evidence and related offences: Making or fabricating false evidence in circumstances covered by the legislation.

The precise offence and punishment depend on the nature of the record, the person's intention, the connection with legal proceedings, and the specific statutory ingredients established by the evidence.

B. Bharatiya Nagarik Suraksha Sanhita, 2023

The Bharatiya Nagarik Suraksha Sanhita (BNSS) regulates criminal procedure, including investigation, collection of evidence, and relevant procedural safeguards. Investigators must follow applicable legal requirements while collecting, handling, documenting, and producing evidence.

Failure to follow procedure does not automatically prove deliberate tampering, but unexplained interference with evidence may affect the credibility and fairness of an investigation.

C. Bharatiya Sakshya Adhiniyam, 2023

The Bharatiya Sakshya Adhiniyam (BSA) governs the admissibility and evidentiary treatment of documents, electronic records, and other evidence in proceedings to which it applies.

The authenticity, integrity, and reliability of electronic evidence can be especially important where the allegation concerns altered files, metadata, recordings, emails, or digital logs. Applicable requirements concerning electronic records and their proof must be satisfied.

D. Service Rules and Workplace Disciplinary Procedures

In employment investigations, record tampering may constitute misconduct under applicable service rules, employment contracts, disciplinary policies, standing orders, or professional codes of conduct.

An employer should establish the allegation through a fair process, disclose the material relied upon as required by law, permit the employee to respond, and issue a reasoned decision. Serious allegations should not be treated as proven merely because a record contains an inconsistency.

E. Information Technology and Data-Protection Requirements

Electronic records may also be subject to applicable information-technology, cybersecurity, confidentiality, and data-protection obligations. Unauthorised access, alteration, deletion, or disclosure may attract legal consequences where the relevant statutory requirements are met.

The applicable framework must be assessed according to the date of the conduct, the type of record, the organisation involved, and the nature of the proceedings.

4. Important Case Laws on Record Tampering in Investigations

The following Indian judicial decisions establish important principles concerning the integrity of evidence, suppression of records, fabricated documents, electronic evidence, and fair investigations. Some address these broader principles rather than a standalone offence of investigative record tampering.

1. Zahira Habibulla H. Sheikh v. State of Gujarat (2004)

Citation: (2004) 4 SCC 158

Facts: The case arose from the Best Bakery massacre and concerns regarding the reliability of witness testimony and the fairness of the trial.

Judgment: The Supreme Court emphasised that a fair trial is essential to the administration of justice. Courts must ensure that the truth is not defeated by intimidation, unreliable testimony, or failures in the judicial process.

Legal principle: Investigations and trials must protect the integrity of evidence. Any deliberate interference with witnesses or the evidentiary process can undermine justice and require corrective judicial action.

Relevance to record tampering: Where investigative records or witness statements are manipulated, the resulting proceedings may become unfair. This judgment supports the broader principle that courts must remain alert to interference with the truth-finding process.

2. S.P. Chengalvaraya Naidu v. Jagannath (1994)

Citation: (1994) 1 SCC 1

Facts: The dispute involved the suppression of a material document in civil litigation.

Judgment: The Supreme Court held that a person who obtains an advantage through fraud or deliberate concealment of material facts cannot ordinarily be permitted to retain that advantage.

Legal principle: Fraud and deliberate suppression of material documents undermine the administration of justice.

Relevance to record tampering: An investigator, employer, or litigant who deliberately conceals or manipulates a material record may compromise the reliability of the decision based on that record. The case is particularly relevant to deliberate concealment, although it arose in civil proceedings rather than a criminal investigation.

3. Gopal Krishnaji Ketkar v. Mohamed Haji Latif (1968)

Citation: AIR 1968 SC 1413; (1968) 3 SCR 862

Facts: The dispute concerned land and competing claims relating to the property. The Supreme Court considered the consequences of a party failing to produce material evidence within its possession.

Judgment: The Court explained that a party cannot necessarily avoid an adverse inference merely by arguing that the opposing party carries the burden of proof when relevant evidence is within its own possession and is withheld.

Legal principle: Unjustified withholding of material evidence may support an adverse inference, depending on the circumstances.

Relevance to record tampering: If an organisation or investigator refuses to produce original registers, correspondence, or logs that should be available, the omission may undermine the credibility of its explanation. However, non-production alone does not automatically establish deliberate tampering.

4. Tomaso Bruno v. State of Uttar Pradesh (2015)

Citation: (2015) 7 SCC 178

Facts: The case involved a criminal prosecution in which potentially relevant electronic evidence, including CCTV footage, was an important consideration.

Judgment: The Supreme Court discussed the importance of scientific and electronic evidence and considered the implications of failing to produce relevant material that could assist in determining the truth.

Legal principle: Electronic evidence can play a significant role in criminal investigations, and failure to collect or produce relevant electronic material may affect the assessment of the prosecution's case.

Relevance to record tampering: Deliberate deletion, alteration, or concealment of CCTV footage and other digital records can seriously compromise an investigation. The case supports the importance of preserving and examining such material, although failure to produce electronic evidence is not by itself proof that it was tampered with.

5. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020)

Citation: (2020) 7 SCC 1

Facts: The dispute concerned the admissibility and proof of electronic records in election-related litigation.

Judgment: The Supreme Court clarified the requirements under the former Indian Evidence Act, 1872, concerning certification of electronic records under Section 65B. The judgment distinguished between the original electronic record and a computer output for evidentiary purposes.

Legal principle: Electronic evidence must be proved in accordance with the applicable evidentiary rules. Authenticity and compliance with statutory requirements matter when electronic material is relied upon in proceedings.

Relevance to record tampering: Investigators should preserve original digital material, document forensic copies, maintain audit trails, and record how electronic evidence was collected. A failure to satisfy admissibility requirements is not automatically tampering, but unreliable handling can create serious evidentiary problems.

Note: The case interpreted the former Evidence Act. Current proceedings must be assessed under the Bharatiya Sakshya Adhiniyam, 2023, where applicable.

6. State of Rajasthan v. Kashi Ram (2006)

Citation: (2006) 12 SCC 254

Facts: The Supreme Court considered the evaluation of circumstantial evidence and the circumstances in which a court may draw inferences from evidence or conduct.

Judgment: The Court discussed the proper assessment of circumstantial evidence and cautioned against drawing conclusions that are not supported by the established facts.

Legal principle: Findings must rest on reliable evidence and a legally sustainable assessment of the circumstances.

Relevance to record tampering: An allegation that records were destroyed or altered must be established through evidence and the applicable legal requirements. Suspicious circumstances may justify further investigation, but the ultimate finding must not rest on speculation alone.

7. State of Maharashtra v. Dr. Praful B. Desai (2003)

Citation: (2003) 4 SCC 601

Facts: The case concerned the taking of medical testimony through video-conferencing and the use of technology in judicial proceedings.

Judgment: The Supreme Court recognised that video-conferencing can fall within the statutory understanding of evidence recorded in the presence of the court, subject to the applicable procedural safeguards.

Legal principle: Technology can legitimately facilitate the collection and presentation of evidence, provided that legal safeguards are observed.

Relevance to record tampering: Digital recordings and electronic documentation can strengthen investigative accountability when their authenticity, access, preservation, and use are properly controlled. The judgment concerns technology in evidence-taking, not a direct finding of record tampering.

8. Best Bakery Case — Zahira Habibulla H. Sheikh v. State of Gujarat (2006)

Citation: (2006) 3 SCC 374

Facts: The case arose from the retrial and broader judicial scrutiny of the Best Bakery prosecution, in which serious concerns had been raised about the fairness and reliability of the original proceedings.

Judgment: The Supreme Court reinforced the importance of a fair trial and the need to ensure that the administration of justice is not defeated by failures in the evidentiary process.

Legal principle: Courts have an important role in protecting the truth-finding process and ensuring that proceedings are fair and reliable.

Relevance to record tampering: Where records, witness accounts, or other investigative material are deliberately manipulated, the fairness of the proceedings may be compromised. The case supports judicial scrutiny and appropriate corrective measures when the integrity of the process is threatened.

5. Common Warning Signs of Record Tampering

Investigators, compliance officers, and employers should pay attention to the following warning signs:

Inconsistent dates: A record contains dates that conflict with emails, system logs, attendance registers, or other contemporaneous documents.

Missing records: Documents that should ordinarily exist are absent without a satisfactory explanation.

Unexplained modifications: Important entries have been changed without an amendment note, approval, or identifiable author.

Altered metadata: File creation dates, modification histories, or other digital attributes appear inconsistent with the documented timeline.

Irregular signatures: Signatures, initials, stamps, or approvals appear copied, forged, or inconsistent with authentic records.

Broken chain of custody: There are unexplained gaps in who possessed, transferred, stored, or accessed the evidence.

Conflicting versions: Different copies of the same document contain materially different information without a legitimate explanation.

Unauthorised deletion: Files, CCTV footage, messages, or audit logs disappear while an investigation is ongoing or reasonably anticipated.

These indicators justify verification and further inquiry; none automatically proves intentional wrongdoing.

6. Procedures for Preventing and Detecting Record Tampering

A sound investigation should use documented controls to protect the authenticity and reliability of records.

A. Preserve original evidence

Secure original physical documents and electronic files.

Create forensic copies where appropriate.

Avoid making investigative notes directly on original documents.

Suspend routine deletion when a lawful preservation obligation or relevant hold applies.

B. Maintain a chain-of-custody register

The register should identify the evidence, its source, collection date and time, collecting officer, transfers, storage location, access history, and any authorised examination or alteration.

Every transfer should be documented so that unexplained gaps can be investigated.

C. Use digital integrity controls

Where technically appropriate, organisations should use cryptographic hashes, access controls, version histories, immutable audit logs, and secure backups. A hash can help establish whether a file has changed since a recorded reference value was generated, although it does not independently prove that the original file was authentic.

D. Separate responsibilities

The person accused of manipulating records should not control the preservation, verification, and final assessment of the same evidence without appropriate independent oversight.

Sensitive investigations may require an independent investigator, forensic specialist, compliance officer, or external reviewer.

E. Document every authorised correction

Legitimate corrections should preserve the original entry where possible and record:

The reason for correction.

The person making the change.

The date and time.

The supporting evidence.

The approval, where required.

F. Conduct an independent review

Where tampering is suspected, the reviewing authority should compare original documents, backup copies, system logs, metadata, witness accounts, and other independent evidence. The review should distinguish deliberate manipulation from technical failure, administrative error, and ordinary document correction.

7. Legal Consequences of Record Tampering

The consequences depend on the applicable law and the facts established.

A disciplinary or criminal finding should follow the relevant standard of proof and procedural requirements. The consequences should not be imposed solely because an error or unexplained discrepancy exists.

8. Responsibilities of Employers and Investigating Authorities

Employers and investigating authorities should establish clear policies on record preservation, access permissions, retention periods, electronic evidence, and reporting suspected manipulation.

They should also train staff to identify suspicious changes, maintain confidential reporting channels, and protect individuals who report concerns in good faith, subject to applicable law.

Investigators must remain impartial and should not selectively preserve only evidence supporting one theory. Evidence that may exonerate an accused person or employee must also receive appropriate consideration.

Where credible evidence of deliberate tampering emerges, the organisation should preserve relevant material, restrict unauthorised access, document its response, and refer the matter to the competent authority where legally required.

9. Conclusion

Record tampering in investigations threatens the integrity of evidence and undermines public confidence in legal, regulatory, and workplace decision-making. Altering documents, fabricating statements, concealing relevant records, or manipulating electronic evidence can result in serious legal and professional consequences.

The principles reflected in Zahira Habibulla H. Sheikh, S.P. Chengalvaraya Naidu, Gopal Krishnaji Ketkar, Tomaso Bruno, Arjun Panditrao Khotkar, State of Rajasthan v. Kashi Ram, and State of Maharashtra v. Dr. Praful B. Desai demonstrate the importance of reliable evidence, procedural fairness, and careful judicial evaluation. These authorities address related evidentiary principles rather than all establishing direct liability for tampering.

Ultimately, effective prevention requires secure preservation, transparent documentation, reliable audit trails, independent verification, and fair procedures. A credible investigation must protect both the evidence and the rights of every person affected by the process.