Cyber Crime & Digital Evidence

Information Technology Act, 2000

The Information Technology (IT) Act, 2000 is the primary legislation in India dealing with cybercrime and electronic commerce. It provides legal recognition for electronic transactions, digital signatures, and electronic records. Crucially, the IT Act contains specific penal provisions for various offenses committed using computers, computer systems, or networks.

As technology rapidly evolves, the legal framework has adapted, with significant amendments made to the IT Act in 2008 to address emerging threats. Understanding the interplay between the IT Act and the general penal laws is essential for both prosecution and defense in cybercrime cases.

Types of Cyber Crimes

The IT Act categorizes and penalizes several distinct forms of cyber offenses:

• Cheating by Personation (Section 66D): Punishes anyone who, by means of any communication device or computer resource, cheats by personation.
• Identity Theft (Section 66C): Making use of the electronic signature, password, or any other unique identification feature of any other person dishonestly or fraudulently.
• Violation of Privacy (Section 66E): Intentionally capturing, publishing, or transmitting the image of a private area of any person without their consent.
• Publishing Obscene Material (Section 67): Publishing or transmitting any material in electronic form which is lascivious or appeals to the prurient interest. (Note: Section 66A was struck down by the Supreme Court in the Shreya Singhal case, but awareness of its historical context remains relevant).
• Hacking and Data Theft (Section 43 & 66): Accessing, downloading, or introducing viruses into a computer system without permission, when done dishonestly or fraudulently.

Cyber Crime and BNS

With the implementation of the Bharatiya Nyaya Sanhita (BNS), 2023, the penal framework for offenses, including those with a cyber element, has been updated. Traditional offenses such as cheating, forgery, and extortion, when committed through digital mediums (e.g., phishing, financial frauds), are prosecuted under the relevant sections of the BNS in conjunction with the IT Act.

The distinction often lies in the specific elements of the crime. If the offense is purely technical (like hacking), the IT Act prevails. If a traditional crime is facilitated by technology (like online fraud), both statutes may be invoked, adhering to the principles of statutory interpretation regarding general vs. special laws.

Digital Evidence (BSA 2023)

The Bharatiya Sakshya Adhiniyam (BSA), 2023, modernizes the rules of evidence, particularly concerning electronic records. Sections 61 to 65 of the BSA specifically deal with the admissibility of digital evidence, recognizing electronic records as documents.

Certificate Requirement: A critical aspect is the requirement of a certificate under Section 63 of the BSA (analogous to the former Section 65B of the Indian Evidence Act). For any electronic record (like WhatsApp chats, emails, CCTV footage, server logs) to be admissible as evidence, it must be accompanied by a certificate signed by a person occupying a responsible official position in relation to the operation of the relevant device. This certificate must confirm the functioning of the computer and the authenticity of the output. The Supreme Court has repeatedly emphasized that this certificate is a mandatory precondition for admitting electronic evidence.

Digital Forensics & Preservation

In cybercrime investigations, preserving the integrity of digital evidence is paramount. Digital forensics involves identifying, extracting, and analyzing data from electronic devices in a manner that is legally admissible. Proper chain of custody must be maintained.

Key defense considerations often revolve around proving that electronic evidence may have been tampered with, that the hash value of the data was not properly recorded or preserved, or that the device was accessed by unauthorized personnel before forensic imaging took place.

Reporting Cyber Crime

Cybercrimes should be reported immediately to minimize financial loss and aid in tracking offenders. The Government of India provides the National Cyber Crime Reporting Portal (cybercrime.gov.in) for centralized reporting. Additionally, complaints can be filed at local cyber crime police stations. Timely reporting is crucial for blocking fraudulent transactions and initiating the preservation of server logs under Section 91 of the BNSS.