Navigating the Arjun Panditrao Doctrine, Hash Value Integrity, Cloud Server Log Audits, and Challenging Defective Certificates
In twenty-first-century Indian jurisprudence, virtually every criminal trial, commercial suit, and matrimonial dispute hinges on electronic records. WhatsApp chat backups, server access logs, CCTV video footage, audio recordings, email correspondence, and automated banking database extracts have superseded physical paper documents as the primary evidentiary currency of the courtroom.
However, digital evidence possesses an intrinsic forensic vulnerability: it is intangible, transient, and exceptionally susceptible to silent modification, deletion, tampering, and deepfake fabrication. A bad actor can alter an email header, fabricate a WhatsApp screenshot, or manipulate metadata within seconds without leaving physical trace marks.
To ensure that only authentic, untampered electronic records are admitted to adjudicate human liberty and property, Indian evidence law has historically maintained an uncompromising statutory filter: the electronic evidence certificate. Formerly codified under Section 65B of the Indian Evidence Act 1872, this mandatory framework has now been comprehensively modernized and re-enacted under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023 (BSA 2023). This treatise deconstructs the drafting, verification, and judicial challenge of Section 63 certificates.
Section 63 of the BSA 2023 establishes that any information contained in an electronic record which is printed on paper, stored, recorded, or copied in optical or magnetic media or cloud storage produced by a computer shall be deemed to be also a document, and shall be admissible in any proceedings, without further proof or production of the original, if the conditions mentioned in this section are satisfied.
Under Section 63(2), four objective technical conditions must be satisfied: (a) the computer output was produced by the computer during the period over which the computer was used regularly to store or process information; (b) during the said period, information of the kind contained in the electronic record was regularly fed into the computer in the ordinary course of the said activities; (c) throughout the material part of the said period, the computer was operating properly; and (d) the information contained in the electronic record reproduces or is derived from such information fed into the computer in the ordinary course.
Crucially, under Section 63(4), the production of a formal **Certificate** is mandatory. The certificate must: identify the electronic record containing the statement and describe the manner in which it was produced; give such particulars of any device involved; and be signed by a person occupying a responsible official position in relation to the operation of the relevant device or the management of the relevant activities.
For decades, Indian courts grappled with conflicting interpretations regarding whether an electronic certificate was mandatory in all circumstances or whether oral testimony could cure its absence. This jurisprudential confusion was definitively resolved by a three-judge bench of the Supreme Court of India in the landmark ruling of *Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal* (2020 7 SCC 1).
The Supreme Court affirmed the earlier landmark ruling in *Anvar P.V. v. P.K. Basheer* (2014 10 SCC 473), establishing that the certification requirement is an **absolute condition precedent to the admissibility of secondary electronic evidence**. Oral evidence under Section 60 cannot substitute for or cure the absence of a statutory certificate.
The Court established the vital distinction between Original and Secondary electronic records: if the primary electronic device itself (the actual mobile phone, hard drive, or server) is produced in court by the owner who created the record, a certificate is not required. However, the moment a secondary printout, USB drive, CD, or export copy is presented, a Section 63 BSA certificate signed by the person in lawful custody of the device is mandatory. An electronic document produced without a certificate is legally inadmissible scrap.
Section 63 of the BSA 2023 reflects a major technological modernization over the antiquated 1872 Act: the explicit statutory recognition of cryptographic hash functions and forensic chain of custody. In modern digital forensics, proving that an electronic copy is an exact, unaltered bit-stream image of the original requires computing a cryptographic hash value.
Algorithms such as SHA-256 (Secure Hash Algorithm 256-bit) and MD5 generate an irreversible, unique mathematical string representing the exact binary structure of the digital file. If even a single byte or pixel is altered, the hash value changes completely. A professionally drafted Section 63 certificate must state the exact cryptographic hash value calculated at the time of extraction and confirm that the hash value of the secondary copy matches the original source.
Furthermore, the certificate must document the unbroken 'Chain of Custody': the exact date, time, physical seizure location, make and model of forensic imaging hardware (e.g., Tableau write-blockers), and the name of the forensic examiner who maintained custody, defeating tampering allegations.
In criminal and commercial trial practice, challenging the prosecution's or plaintiff's Section 63 BSA certificate is a lethal defense weapon. Defense counsel must scrutinize the certificate across four critical vulnerability vectors.
First, scrutinize the **Signatory's Authority**: Was the certificate signed by a person occupying a responsible official position in relation to the operation of the device? A certificate signed by an investigating police officer who did not manage the server or mobile device is invalid; it must be signed by the system administrator, cellular telecom nodal officer, or device owner.
Second, challenge **Temporal Validity**: Under *Arjun Panditrao*, the certificate should ideally accompany the electronic record when filed with the police charge sheet or civil plaint. While courts allow late production in bona fide circumstances, unexplained delays of years in producing a certificate create severe suspicion of retroactive fabrication.
Third, probe for **Hardware Omissions**: If the certificate fails to identify the operating system, device IMEI/MAC address, or fails to confirm that the computer operated properly without system crashes during the relevant period, the certificate fails statutory muster, rendering the electronic evidence inadmissible.
Advocate Ritik Khurana Chambers provides specialized digital evidence litigation, cyber forensics auditing, and trial advocacy before the High Court of Punjab & Haryana, the Delhi High Court, and Sessions Courts across India. Led by Advocate Ritik Khurana, holding an LL.M. in Cyber Law & Digital Forensics from the National Forensic Sciences University (NFSU), our chambers represents a rare convergence of advanced forensic science and high-court trial advocacy.
Our practice drafts airtight Section 63 BSA Electronic Evidence Certificates for corporate clients, multinational banks, and law enforcement agencies, incorporating SHA-256 cryptographic hashes and certified chain of custody logs. In high-stakes criminal trials, our defense team executes devastating cross-examinations of forensic witnesses, dismantling flawed electronic evidence certificates and securing dismissals of unverified digital charges.
In the digital trial era, evidence is no longer physical; mastering Section 63 BSA is the decisive skill that determines whether electronic allegations stand as unassailable truth or collapse as unverified hearsay.
Advocate Ritik Khurana provides courtroom litigation counsel and strategic advisory in AI Governance (ISO 42001), DPDP Act 2023 compliance, Cyber Crime Bank Account Unfreezing (Section 503 BNSS), Commercial Arbitration, and High Court Criminal Writ Petitions.
Advocate Ritik Khurana provides specialized statutory counsel, forensic due diligence, and High Court trial advocacy in connection with the regulatory frameworks analyzed above: