Section 65B IEA vs Section 63 BSA: Electronic Evidence
Quick Summary & Strategic Key Takeaways
- The Mandatory Statutory Schedule: Unlike Section 65B of the Indian Evidence Act 1872 which lacked an official form, Section 63(4) BSA 2023 statutorily prescribes a standardized form set forth in the Schedule to the Adhiniyam, divided into Part A (Device In-Charge) and Part B (Technical Expert/Custodian).
- Expanded Digital Horizon: The definition of electronic and digital records is comprehensively broadened to explicitly encompass cloud servers, mobile phones, encrypted chats (WhatsApp, Signal), semiconductor memory, CCTV DVRs, vehicle black boxes, and emails.
- Cryptographic Hash Integrity: Section 63 BSA jurisprudence formally incorporates hash value validation (SHA-256 / MD5) to verify data integrity and establish an uncompromised chain of custody during cyber investigations.
- Arjun Panditrao Khotkar Reaffirmed: The landmark three-judge bench ruling in Arjun Panditrao Khotkar remains governing law: a statutory certificate is a condition precedent for secondary electronic evidence, but trial courts maintain discretion to allow production prior to closure of trial.
1. The Digital Paradigm Shift: From IEA 65B to BSA Section 63
In modern civil and criminal litigation across India, tangible physical evidence is increasingly superseded by electronic records. Matrimonial disputes turn on WhatsApp chats, corporate fraud trials hinge on server audit logs and emails, and criminal prosecutions rely decisively on CCTV surveillance clips and cellular Call Detail Records (CDRs).
Under the colonial Indian Evidence Act, 1872 (IEA), electronic evidence was shoehorned into the statute via Sections 65A and 65B through the Information Technology Act, 2000. However, Section 65B suffered from a glaring legislative defect: it failed to provide an official statutory certificate format, sparking decades of contradictory High Court and Supreme Court rulings regarding certificate wording, signatories, and timing.
The Bharatiya Sakshya Adhiniyam, 2023 (BSA), which replaced the Indian Evidence Act with effect from July 1, 2024, introduces a modern digital-first evidentiary architecture. Under Section 61 BSA, electronic or digital records are granted equal legal status with traditional physical paper documents, while Section 63 BSA resolves decades of procedural ambiguity by introducing a mandatory statutory certificate format set forth in the Schedule to the Adhiniyam.
To generate a compliant statutory certificate for court proceedings, practitioners can utilize our ready-to-use Section 63 BSA Certificate Template.
2. Statutory Comparison: Section 65B IEA vs Section 63 BSA
A technical comparison highlights how Parliament modernized electronic admissibility rules:
| Legal Dimension | Section 65B Indian Evidence Act (1872) | Section 63 Bharatiya Sakshya Adhiniyam (2023) |
|---|---|---|
| Scope of Electronic Records | Restricted to computer outputs, magnetic optical media, and basic computers. | Broadened under Sec 2(1)(d) & Sec 63 to include smartphones, cloud storage, semiconductor memory, emails, encrypted chats, and CCTV DVRs. |
| Certificate Template | No statutory template provided. Led to conflicting formats, defective certificates, and widespread evidentiary rejections. | Statutorily Prescribed: Section 63(4) mandates adherence to the official template set forth in the Schedule to the Adhiniyam. |
| Certification Structure | Single loosely-worded certificate by a person occupying an official responsible position. | Two-Part Structured Format: Part A (Device User / Custodian) and Part B (Technical Expert / System Manager). |
| Integrity & Hash Validation | Not mentioned in statutory text; introduced piecemeal through judicial orders and forensic manuals. | Explicit statutory emphasis on device identification, system parameters, and cryptographic hash verification (MD5 / SHA-256). |
| Primary vs Secondary Evidence | Primary evidence exempted by judicial interpretation in Arjun Khotkar. | Codified under Section 57 read with Section 63: Original device produced directly is primary evidence; secondary prints require Schedule certificate. |
3. The New Mandatory Schedule Form: Part A & Part B Breakdown
The most consequential innovation of Section 63 BSA is found in sub-section (4), which provides that the certificate must be "in the form set forth in the Schedule". The Schedule to the Bharatiya Sakshya Adhiniyam establishes two distinct certification components:
Part A: Certificate by the Person in-Charge of the Device
Part A must be executed by the person who owns, operates, or has lawful custody of the computer, mobile phone, or recording device at the time the information was generated or retrieved. The certifier must declare under oath:
- Identifying parameters of the device (Make, Model, Serial Number, IMEI, MAC Address);
- That the device was operating properly and during the relevant period was under lawful control;
- That the printout or digital output accurately reflects the data stored in the device without unauthorized manipulation; and
- A description of the hash value generated during extraction, where applicable.
Part B: Certificate by the Technical Expert or System In-Charge
Part B must be signed by an independent cyber expert, forensic examiner, or the technical manager in charge of the computer system, server, or cloud repository. The expert verifies:
- The software tools and extraction protocols utilized;
- The technical integrity of the storage media; and
- The cryptographic hash verification establishing that the secondary record is a bit-stream mirror copy of the original source.
This dual-certification model closes the loophole where investigating officers routinely signed generic certificates without possessing technical knowledge of the extraction hardware.
4. Landmark Judicial Precedents: Navjot Sandhu, Anvar P.V. & Arjun Khotkar
The interpretation of Section 63 BSA is deeply anchored in the landmark rulings of the Supreme Court of India rendered under Section 65B IEA:
State (NCT of Delhi) v. Navjot Sandhu (2005) 11 SCC 600 (Parliament Attack Case)
A two-judge bench held that non-compliance with Section 65B did not bar secondary electronic evidence if oral evidence of the person who printed the record was produced. This created immense confusion and allowed uncertified printouts into criminal trials.
Anvar P.V. v. P.K. Basheer (2014) 10 SCC 473
Overruling Navjot Sandhu, a three-judge bench held that Section 65B is a special law (lex specialis) that overrides general rules on secondary evidence. Electronic records can only be proved in accordance with Section 65B. In the absence of a contemporaneous statutory certificate, secondary electronic evidence is completely inadmissible.
Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020) 7 SCC 1
A three-judge bench definitively resolved all lingering controversies:
- The certificate under Section 65B(4) is a mandatory condition precedent for the admissibility of secondary electronic records.
- Where the original device itself is brought to court by the owner, it is primary evidence under Section 62 IEA (now Section 57 BSA) and no certificate is required.
- Where a party is unable to procure a certificate because the third-party device custodian (e.g. telecom company or hostile opponent) refuses to sign, the court has plenary powers under Section 165 IEA (now Section 168 BSA) and Order XVI CPC to summon the witness and direct production of the certificate.
- Trial courts may permit late production of the certificate prior to the conclusion of trial if no prejudice is caused to the accused.
5. Evidentiary Protocols: WhatsApp Chats, Emails, CCTV & CDRs
Tendering digital evidence in accordance with Section 63 BSA requires strict adherence to forensic best practices:
| Evidence Type | Mandatory Extraction Protocol | Required Section 63 BSA Documentation |
|---|---|---|
| WhatsApp Chats & SMS | Screenshot or PDF export is secondary evidence. Must record phone IMEI, SIM card number, and sender/receiver phone numbers. | Part A signed by phone owner; Part B signed by cyber forensic expert detailing extraction tool (e.g. Cellebrite, UFED). |
| CCTV Surveillance Footage | Never produce raw unverified USB drives. Export footage directly from DVR with original timestamp and frame rate. | Certificate signed by the premises manager having lawful control of DVR, certifying camera operation and DVR serial numbers. |
| Call Detail Records (CDRs) | Obtained by police via statutory requisition under Section 94 BNSS (old 91 CrPC) from telecom service providers (TSPs). | Mandatory Section 63 certificate signed by the designated Nodal Officer of the TSP under official seal and designation. |
| Email Communications | Printout must include full RFC-compliant internet email headers showing originating IP address, server hops, and timestamps. | Part A signed by account holder; Part B by corporate IT administrator/server custodian where hosted on private enterprise domain. |
6. Cryptographic Hash Values (SHA-256) & Chain of Custody
In modern cyber forensic practice, a digital file is easily susceptible to manipulation, timestamp alteration, or selective deletion. Under Section 63 BSA, trial courts insist upon proof of cryptographic hash value validation:
- What is a Hash Value? A hash algorithm (such as SHA-256 or MD5) processes digital files and produces an irreversible, unique 64-character alphanumeric string. If even a single byte or space in a 10-hour CCTV video or 5,000-page WhatsApp chat log is modified, the resulting hash value changes completely.
- Chain of Custody Verification: When police seize a mobile phone or hard drive under Section 106 BNSS, the forensic technician must generate the hash value at the moment of seizure, record it in the seizure memo, and ensure that the hash value generated by the forensic lab matches the seizure hash. Any divergence destroys the evidentiary integrity of the electronic record.
7. Defence Blueprint: How to Cross-Examine & Discredit Defective Digital Evidence
When the prosecution or an adversary tenders electronic records against your client, apply this rigorous 5-step cross-examination checklist:
| Cross-Examination Vector | Target Vulnerability | Trial Court Impact |
|---|---|---|
| 1. Non-Adherence to Schedule | Check if the certificate strictly conforms to Part A and Part B of the BSA Schedule or is a rehashed old 65B format. | Deviation from statutorily prescribed form violates Section 63(4) BSA, rendering evidence inadmissible. |
| 2. Absence of Lawful Control | Interrogate whether the certifier personally possessed lawful operational control over the device during the recording window. | If the witness was merely an administrative signatory without physical access to the device, the certificate is invalid. |
| 3. Broken Chain of Custody | Scrutinize the seizure memo, seizure bag seal, transit history, and storage conditions between seizure and forensic extraction. | Broken seals or unrecorded custodial transitions raise reasonable doubt regarding tampering. |
| 4. Selective Extraction | Examine whether conversations were truncated, context deleted, or only incriminating lines presented. | Under Section 33 BSA (old 39 IEA), the court must order production of the complete conversation or reject the extract. |
| 5. Missing Hash Value Logs | Cross-examine the forensic expert on the absence of SHA-256 hash validation at the time of initial extraction. | Failure to establish bit-stream integrity precludes reliable corroboration under forensic standards. |
8. Stage of Filing the Certificate: Chargesheet vs Trial Evidence
A recurring battleground in criminal trials is whether the prosecution can cure a defective or missing Section 63 BSA certificate during the trial:
- General Rule: The certificate must be tendered along with the electronic record at the earliest stage—with the chargesheet under Section 193 BNSS (old 173 CrPC) or with the plaint/written statement under Order VII Rule 14 CPC. This ensures the defence has complete notice and disclosure under Section 230 BNSS (old 207 CrPC).
- Judicial Relaxation Under Arjun Khotkar: The Supreme Court clarified that if the certificate was omitted due to bona fide inadvertence, the trial court has the power to permit production at any stage prior to the conclusion of defence evidence, subject to giving the accused full opportunity to cross-examine the certifier. However, late production cannot be used to introduce entirely new, suspicious digital evidence.
9. Comprehensive Comparison Matrix: Section 65B IEA vs Section 63 BSA
| Parameter | Section 65B Indian Evidence Act (1872) | Section 63 Bharatiya Sakshya Adhiniyam (2023) | Practical Litigation Consequence |
|---|---|---|---|
| Statutory Mandate | Sub-sections (1) to (5) | Sub-sections (1) to (4) + Schedule | Mandatory statutory Schedule template eliminates defective drafting. |
| Two-Part Certification | Not required; single signatory was common. | Part A (Device User) + Part B (Technical Expert) | Ensures accountability of both device possessor and forensic technician. |
| Cloud & Social Media Scope | Vaguely covered under 'computer system' | Explicitly defined across digital categories | Seamless evidentiary framework for encrypted chats and cloud backups. |
| Hash Integrity Standard | Ad-hoc; dependent on local police rules | Formally recognized forensic requirement | SHA-256 hash matching is vital for surviving cross-examination. |
| Primary Evidence Production | Exempted by judicial ruling in Arjun Khotkar | Codified under Section 57 & 63 BSA | Producing original phone or DVR directly eliminates need for certificate. |
Frequently Asked Questions on Section 65B IEA vs Section 63 BSA
Comprehensive legal guidance on electronic certificates, WhatsApp chat admissibility, and cyber forensic standards.
What is the primary difference between Section 65B IEA and Section 63 BSA?
Under Section 65B of the Indian Evidence Act, 1872, there was no uniform statutory certificate format, leading to frequent procedural challenges over wording. Under Section 63(4) of the Bharatiya Sakshya Adhiniyam, 2023 (BSA), Parliament introduced a mandatory statutory Schedule format comprising Part A (Certificate of In-charge of Device) and Part B (Certificate of Expert/Technical Custodian).
Are WhatsApp chats, SMS, and emails admissible in court without a Section 63 BSA certificate?
No. Secondary electronic records such as printouts of WhatsApp messages, screenshots, exported PDF chat logs, email printouts, or pendrive copies are strictly inadmissible in evidence unless accompanied by a properly executed statutory certificate under Section 63(4) BSA, in accordance with the binding three-judge bench ruling in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal.
When is an electronic record considered primary evidence not requiring a certificate?
Under Section 57 of the BSA, where the original electronic device itself (e.g., the original smartphone on which WhatsApp chats were received, or the original hard disk/DVR) is produced directly before the trial court for inspection, it constitutes primary evidence and does not require a Section 63 BSA certificate.
Who is competent to sign the Section 63 BSA certificate?
Under Section 63(4) BSA, Part A must be signed by the person who had lawful operational control or custody of the computer, mobile phone, or recording device at the time the record was created or extracted. Part B must be signed by an authorized expert, technical officer, or network system manager overseeing server or cloud storage infrastructure.
At what stage of trial must the Section 63 BSA certificate be filed?
Ordinarily, the prosecution must file the Section 63 BSA certificate alongside the chargesheet under Section 193 BNSS, or the civil plaintiff alongside the plaint/documents. However, applying the Supreme Court ruling in Arjun Panditrao Khotkar, trial courts possess discretion to permit production of the certificate at a later stage of trial prior to the closing of evidence to prevent miscarriage of justice.
What role does a cryptographic hash value (SHA-256) play under Section 63 BSA?
A cryptographic hash value (such as SHA-256 or MD5) acts as a unique mathematical digital fingerprint. Computing and declaring the hash value in the Section 63 certificate proves that the extracted digital file (CCTV footage, audio recording, database export) has not been tampered with, edited, or altered since extraction.
How can a defence lawyer challenge defective electronic evidence under Section 63 BSA?
Electronic evidence can be successfully discredited by: (1) Demonstrating non-compliance with the mandatory Schedule format of BSA; (2) Showing the signatory lacked lawful control or personal knowledge of device operation; (3) Proving a broken chain of custody; and (4) Establishing absence of hash value verification or metadata integrity.
Which law governs electronic evidence generated before July 1, 2024?
Electronic records created prior to July 1, 2024 can be tendered with a Section 65B IEA certificate if proceedings commenced before that date. However, for any trial or evidentiary deposition tendered on or after July 1, 2024, the courts mandate compliance with Section 63 BSA and its Schedule format.