Screenshots as Evidence in Enquiries

Screenshots as evidence in departmental enquiries refers to the use of captured images of electronic material—such as emails, WhatsApp messages, websites, social-media posts, computer screens, CCTV interfaces, system records, or electronic documents—to establish or corroborate allegations of misconduct.

A screenshot can be useful evidence, but a screenshot is not automatically conclusive proof of the facts shown in it. Its evidentiary value depends on authenticity, relevance, integrity, the circumstances in which it was captured, and compliance with the applicable evidentiary and disciplinary procedure.

1. What is a Screenshot?

A screenshot is a digital image representing information displayed on an electronic device.

Examples include:

• screenshot of an email;
• screenshot of WhatsApp/SMS conversations;
• screenshot of an employee's social-media post;
• screenshot of a company's internal software;
• screenshot of attendance records;
• screenshot of an alleged unauthorised transaction;
• screenshot of an electronic document;
• screenshot of a website;
• screenshot of CCTV footage or a monitoring system.

In a departmental enquiry, such material may be relied upon to support a charge of misconduct.

2. Relevance Is the First Requirement

The screenshot must have a connection with the charge.

For example, if the allegation is that an employee disclosed confidential information, a screenshot showing the alleged disclosure may be relevant.

However, merely producing a screenshot does not establish:

• who created the underlying material;
• who operated the account;
• whether the screenshot was altered;
• when it was created;
• whether the displayed information was complete;
• whether the account belonged to the charged employee.

The enquiry officer must therefore examine the evidentiary connection between the screenshot and the alleged misconduct.

3. Authenticity

Authenticity is one of the most important issues.

The person producing the screenshot should, where necessary, explain:

• the source from which it was obtained;
• the device/system involved;
• the date and time of capture;
• how it was preserved;
• whether the original electronic record remains available;
• whether any editing or alteration occurred.

A screenshot that has been detached from its original electronic source may require additional evidence to establish its reliability.

4. Screenshot vs Original Electronic Record

There is an important distinction between:

Original electronic record:
The actual email, server log, database entry, WhatsApp record, CCTV file, etc.

Screenshot:
A visual reproduction of what appeared on the screen.

Where possible, the original electronic record or system-generated record is preferable because it permits greater verification.

For example, if an employer alleges that an employee sent an email, the original email, server record, metadata and relevant system logs may provide stronger corroboration than a screenshot alone.

5. Electronic Evidence Under Indian Law

For proceedings governed by Indian evidence law, electronic records are subject to specific statutory rules.

The Bharatiya Sakshya Adhiniyam, 2023 (BSA) now governs evidence generally, replacing the Indian Evidence Act, 1872, subject to the applicable transitional provisions.

Electronic records can be admitted subject to the requirements prescribed by the BSA. The precise requirements depend upon how the electronic record is being proved and the nature of the device/system from which it originates.

Therefore, an enquiry officer should distinguish between:

• the screenshot itself;
• the underlying electronic record;
• testimony of the person who obtained it;
• system-generated records;
• certificates or other statutory requirements where applicable.

6. Departmental Enquiries Are Not Criminal Trials

A departmental enquiry is generally not governed by exactly the same standard of proof as a criminal prosecution.

The usual standard in disciplinary proceedings is preponderance of probabilities, rather than proof beyond reasonable doubt.

Therefore, a screenshot that would require substantial corroboration in a criminal prosecution may nevertheless contribute to establishing a departmental charge when supported by other reliable evidence.

However, this does not mean that unreliable or manipulated screenshots can automatically be treated as proof.

7. Natural Justice

Where a screenshot is relied upon against an employee, the employee should ordinarily be given a meaningful opportunity to examine and contest it.

Depending upon the circumstances, this may include access to:

• the screenshot;
• the underlying electronic record;
• relevant metadata;
• the source device/system;
• the person who captured or produced the screenshot;
• other documents relied upon by the disciplinary authority.

If important electronic evidence is withheld from the employee and the employee is thereby prevented from effectively defending the charge, questions of natural justice and procedural fairness may arise.

8. Screenshots of WhatsApp Messages

WhatsApp screenshots are increasingly encountered in workplace enquiries.

A screenshot showing a conversation may establish that certain words or images appeared on a device, but further questions may arise:

• Who owned the phone?
• Who controlled the WhatsApp account?
• Was the number registered to the employee?
• Was the message actually sent by the employee?
• Could the screenshot have been edited?
• Is the complete conversation available?
• Are relevant messages missing?
• Can the underlying device or account be examined?

Consequently, a WhatsApp screenshot is generally stronger when supported by additional evidence.

9. Screenshots of Emails

For email evidence, the enquiry should ideally consider:

• sender and recipient;
• date and time;
• subject line;
• complete contents;
• email headers where relevant;
• server records;
• attachment records;
• company email logs.

A screenshot containing only the visible portion of an email may not provide the complete evidentiary picture.

10. Screenshots and Chain of Custody

Where the authenticity of electronic material is disputed, preservation becomes important.

The organisation should, where practicable, document:

1. who obtained the screenshot;
2. when it was obtained;
3. from which device/system;
4. how it was stored;
5. whether the original record was preserved;
6. whether copies were made;
7. who subsequently handled the evidence.

This is particularly important where allegations involve deletion, manipulation or unauthorised access.

Important Case Laws

1. Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473

The Supreme Court established important principles concerning the admissibility and proof of electronic records under the Indian Evidence Act.

The Court emphasised the statutory requirements applicable to electronic records and the special treatment required for computer-generated evidence.

Principle: Electronic evidence must satisfy the statutory requirements governing its proof; a mere reproduction of electronic material does not automatically establish its admissibility.

2. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1

A Constitution Bench clarified the law concerning electronic records and certificates under Section 65B of the Indian Evidence Act.

The judgment explained the circumstances in which a certificate was required for secondary electronic evidence and reaffirmed the importance of the statutory procedure for proving electronic records.

Principle: The manner of proving electronic records is governed by statutory requirements, and courts must distinguish between the original electronic record and secondary evidence.

3. Tomaso Bruno v. State of Uttar Pradesh, (2015) 7 SCC 178

The Supreme Court recognised the importance of electronic evidence, including CCTV and other technological records, in modern investigations.

The Court observed that electronic evidence can be significant in determining facts and that technological evidence may sometimes provide objective information concerning an incident.

Principle: Electronic records can be important evidence, but their reliability and proper production remain relevant to their evidentiary value.

4. State (NCT of Delhi) v. Navjot Sandhu, (2005) 11 SCC 600

The Supreme Court dealt extensively with electronic records, computer-generated material and telephone-related records.

Although the statutory framework has subsequently evolved, the case remains historically important in understanding the treatment of electronic evidence in Indian law.

Principle: Electronic material can be relied upon as evidence when properly connected with the facts in issue and proved according to the applicable evidentiary framework.

5. Roop Singh Negi v. Punjab National Bank, (2009) 2 SCC 570

This is particularly relevant to departmental enquiries.

The Supreme Court emphasised that disciplinary proceedings cannot be decided merely on the basis of allegations or documents placed before the disciplinary authority without proper consideration of the evidentiary material.

The Court also stressed the importance of evidence supporting the findings of misconduct.

Principle: A disciplinary finding must have an evidentiary foundation; documents and allegations cannot automatically be treated as established facts merely because they appear in the departmental record.

6. Kuldeep Singh v. Commissioner of Police, (1999) 2 SCC 10

The Supreme Court considered the scope of judicial review over disciplinary findings and emphasised that disciplinary findings must have evidentiary support.

The Court recognised that disciplinary authorities have considerable latitude in assessing evidence, but findings cannot be based on wholly unsupported or perverse conclusions.

Principle: Evidence in a departmental enquiry must provide a reasonable basis for the disciplinary finding.

7. M.V. Bijlani v. Union of India, (2006) 5 SCC 88

The Supreme Court dealt with the standard applicable to disciplinary proceedings and the requirement that findings must be based on material capable of supporting the conclusion.

Principle: Although departmental proceedings use the standard of preponderance of probabilities, there must still be relevant evidence connecting the employee with the alleged misconduct.

8. Central Bank of India Ltd. v. Prakash Chand Jain, AIR 1969 SC 983

The Supreme Court considered the evidentiary role of domestic enquiry findings and the requirement that conclusions in disciplinary matters must be supported by relevant material.

Principle: The disciplinary authority/enquiry officer must assess the evidence fairly rather than mechanically accepting the employer's allegations.

Evidentiary Value of Different Screenshots

When a Screenshot Alone May Be Insufficient

A screenshot may be insufficient where:

• its source cannot be established;
• authenticity is specifically disputed;
• it appears cropped or edited;
• the underlying record is available but deliberately withheld;
• the identity of the account holder is uncertain;
• the screenshot does not establish the date/time;
• the context of the conversation is missing;
• there is contradictory electronic evidence.

The appropriate response is generally to seek corroborating evidence, rather than automatically accepting or rejecting the screenshot.

Best Practice for Employers

For a fair departmental enquiry, the employer should preferably:

1. Preserve the original electronic record.
2. Preserve relevant metadata where available.
3. Record how and when the screenshot was obtained.
4. Identify the device/system from which it came.
5. Avoid unnecessary cropping or editing.
6. Provide the relied-upon material to the employee.
7. Allow the employee a reasonable opportunity to challenge authenticity.
8. Produce the relevant witness or system record where necessary.
9. Maintain an appropriate chain of custody.
10. Apply the applicable statutory rules governing electronic evidence.

Conclusion

A screenshot can constitute relevant evidence in a departmental enquiry, but its evidentiary strength depends on authenticity, source, integrity, relevance and corroboration. The fact that an image appears to show an email, message, website or computer record does not automatically prove who created it or that it has not been altered.

Indian case law, particularly Anvar P.V., Arjun Panditrao Khotkar, Roop Singh Negi, Kuldeep Singh and M.V. Bijlani, demonstrates two complementary principles: electronic evidence must comply with the applicable legal requirements, and disciplinary findings must have a reasonable evidentiary foundation. In an enquiry, therefore, a screenshot is best treated as part of the evidentiary record rather than automatically as conclusive proof.