Live 20 practitioner certifications live · Free preview lessons on most courses Back to main site →

The digital-evidence problem in POSH after BSA 2023

Almost every POSH complaint in 2026 arrives with digital exhibits. If the IC does not authenticate and preserve them the way the Bharatiya Sakshya Adhiniyam wants, the whole inquiry is exposed on appeal. This lesson sets the scene: what changed on the 1st of July 2024, why the old Section 65B habits are now dangerous, and where the Supreme Court has drawn the lines in 2025 and 2026.

Free preview 9 min read Verified

Let me start with a scene you have probably lived through. A complainant walks in with her phone and shows you a WhatsApp chat, a Slack thread, and a screenshot of a Google Meet transcript. She has a Gmail export saved somewhere, and a video that she says was played on the office notice-board screen for half an hour. As the Presiding Officer, you have to decide what to do with all of this. You are running an inquiry, not a criminal trial, but you know the respondent will appeal under Section 18 and the record will end up in front of a judge. Everything you accept today must survive that reading tomorrow.

This is the practical shape of the digital-evidence problem in POSH in 2026. It is not new. What is new is the legal framework you now have to run it through. On the 1st of July 2024, the Indian Evidence Act 1872 was replaced in its entirety by the Bharatiya Sakshya Adhiniyam 2023. The old Section 65B, which every practitioner had spent twenty-four years learning, is gone [L1-C1]. In its place we have Section 63 of the BSA, and Section 63 is stricter [L1-C2].

Why the IC has to care about the Evidence Act at all

You will sometimes hear people say that the Evidence Act does not strictly bind an Internal Committee. Rule 7 of the POSH Rules 2013 says the inquiry is conducted according to the principles of natural justice, not the strict rules of evidence. That is technically correct. It is also practically misleading.

Here is why. Your report under Section 13 will be forwarded to the employer for action under Section 13(3) within sixty days. The aggrieved party or the respondent has ninety days to appeal under Section 18. If the appellate authority is a labour court or industrial tribunal, they read the record with a strict evidentiary eye. If the matter travels further, to a writ court, the record is read against fairness standards that pull heavily from the Evidence Act. The moment your finding turns on a digital exhibit that the IC accepted without authenticating, the appellate court has a clean handle to send the report back.

So the honest position is this. An IC is not bound by Section 63 the way a criminal court is. But an IC that runs its digital evidence workflow as if Section 63 does bind it will survive on appeal. An IC that treats digital exhibits casually will not. Every senior practitioner I know runs the strict framework.

What changed on the 1st of July 2024

Take a breath and internalise this. When you next open a POSH judgment written in 2024 or later that references "Section 65B", you are looking at a historical anchor [L1-C1]. It is still meaningful for incidents that occurred before the 1st of July 2024, under the transitional provisions of the BSA. For everything that happened after that date, you are working with Section 63 of the Bharatiya Sakshya Adhiniyam [L1-C2].

Section 63 keeps the core idea of the old 65B. Secondary evidence of an electronic record is admissible if it is accompanied by a proper certificate. What changes is the certificate itself. Under the old law, one signature by a responsible person in charge of the computer was enough. Under the new Section 63(4), the certificate has two parts. Part A is signed by the person in charge of the device. Part B is signed by an expert. And the certificate must disclose the hash value of the electronic record, computed under SHA-1, SHA-256 or MD5 [L1-C3].

This is not a cosmetic change. The old regime allowed an HR head to sign a certificate saying "this is the WhatsApp export from Ms X's phone, taken by me on such-and-such date". Under the new regime, that certificate is only Part A. You still need Part B from an expert who can attest that the export has not been tampered with, and both parts together must carry the hash value that anyone can recompute and verify.

The two Supreme Court rulings you must know

The transition from Section 65B to Section 63 has already been tested in the Supreme Court, and you should be comfortable with both cases as a senior practitioner.

The first is Kailash S/o Bajirao Pawar v. State of Maharashtra, decided in 2025 [L1-C4]. The Court held that a compact disc is admissible under Section 63 once its requirements are satisfied. Two nuances matter for us. First, when the electronic record is proved through the special statutory mode under Section 63, the certificate is mandatory. Second, when the record is proved through oral evidence, for example by examining the person who created or holds the record, the certificate may be treated as directory rather than mandatory. The Court also said, in a line that every IC member should memorise, that the hash value of an electronic record is synonymous with an "electronic fingerprint" and provides a sure way of identifying and verifying digital data.

The second is Pune Bar Association v. Union of India, decided by a three-judge Bench on the 22nd of May, 2026 [L1-C5]. The Pune Bar Association had challenged Section 63(4) as unconstitutional on the ground that the dual-certification and hash-value requirements imposed undue hardship on ordinary litigants, and that the "expert" for Part B was undefined. The Supreme Court dismissed the challenge. It held that the requirement is constitutional and has a legitimate objective. On the "who is an expert" question, the Court gave us the working answer. The expert who signs Part B is not confined to examiners notified under Section 79A of the Information Technology Act. Any individual possessing special skills and expertise in computer science and cyber forensics can validly sign Part B, provided the Court trying the case is satisfied on the expert's credentials on the facts.

Read those two sentences again. As a senior practitioner, they should shape your entire evidence strategy. You do not need to route every WhatsApp export through a Section 79A notified examiner. You can build a bench of credible private experts, provided the credentials are documented and can be defended.

The one live question the Supreme Court has not answered

Section 61 of the BSA classifies electronic records within the ordinary evidence framework and says such records have the same legal effect, validity and enforceability as any other document, subject to Section 63 [L1-C6]. Some commentators have argued that Section 61 opens the door to oral proof of electronic records, notwithstanding the "certificate is condition precedent" holding of Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal [L1-C7]. The Supreme Court has not yet ruled on this. My advice as a practitioner is not to bet the case on Section 61. Run the Section 63(4) certificate route as your primary strategy. Keep the oral-proof-of-authorship route as a backup, only where the certificate is genuinely unavailable and you can call the person who created the record.

How this changes your first-hearing checklist

By the end of the first hearing on a POSH complaint that has digital exhibits, you should have done four things. One, you should have identified every digital exhibit the complainant wants to rely on, and put it in your evidence log. Two, you should have decided how each exhibit will be authenticated. If the complainant produced it, is she going to depose to its origin herself, or is a Section 63(4) certificate the safer route? Three, you should have identified who will sign Part A and who will sign Part B for each exhibit. Four, you should have started the preservation clock. Slack retention rules, WhatsApp storage limits, and CCTV overwrite schedules do not wait for your inquiry to finish.

The remaining four lessons in this module walk you through each of these decisions. Lesson 2 handles the choice between screenshots, device exports and platform data dumps. Lesson 3 goes deep on the Section 63(4) certificate mechanics and the chain of custody. Lesson 4 handles the deepfake and AI-manipulated media problem, which now has its own regulatory regime under the IT Amendment Rules 2026 [L1-C8]. Lesson 5 covers how you present the digital evidence in the hearing without breaking Section 16 confidentiality [L1-C9].

By the end of the module you should feel that if a complaint arrives tomorrow with a phone full of exhibits, you know exactly what to do on day one.

Every claim in this lesson is cited. Yellow markers like [L1-C1] are clickable. Click any to see the verbatim text of the Section, Rule or judgment we're relying on. Learn how we verify content ›

Preview in progress 11 more modules waiting behind enrolment

Enjoying the preview? Here's what enrolment unlocks.

  • All 11 paid modules (55 lessons)
  • Complete citation register — every claim linked to the primary source
  • Final exam: 40 questions, 2 attempts per round
  • Verifiable certificate with public verify URL and LinkedIn share
  • Lifetime access plus every future update
Inclusive of 18% GST. Certificate on pass. LinkedIn-shareable. Lifetime access. Course updates included.
Citations
IEA 1872, Section 65B (Historical: IEA Section 65B (repealed with effect from 1 July 2024)) L1-C1
Section 65B of the Indian Evidence Act 1872 governed the admissibility of secondary electronic evidence between 2000 and 1 July 2024. The section was the subject of the Anvar P.V. and Arjun Panditrao rulings. On 1 July 2024 the Indian Evidence Act was replaced in its entirety by the Bharatiya Sakshya Adhiniyam 2023, and the equivalent provision is now Section 63 of the BSA. Historical incidents pre-dating 1 July 2024 may still be governed by Section 65B under the transitional provisions of the BSA.
BSA 2023, Section 63 (Admissibility of electronic records (post 1 July 2024)) L1-C2
Section 63 of the Bharatiya Sakshya Adhiniyam 2023 came into force on 1 July 2024, replacing Section 65B of the Indian Evidence Act 1872. Any information contained in an electronic record which is printed on paper, stored, recorded or copied in optical or magnetic media or semiconductor memory produced by a computer or communication device shall be deemed to be a document, and is admissible without further proof or production of the original, if the conditions in sub-sections (2) to (4) are satisfied. Sub-section (4) requires a certificate — Part A signed by the person in charge of the device, and Part B signed by an expert — that identifies the electronic record, describes the manner of production, gives device particulars, and discloses the hash value of the record (SHA-1, SHA-256 or MD5).
BSA 2023, Schedule — Certificate (Prescribed certificate format under Section 63(4)) L1-C3
The Schedule to the Bharatiya Sakshya Adhiniyam 2023 sets out the prescribed certificate under Section 63(4). It has two parts. Part A is filled by the person in charge of the device — identifying the electronic record, the device, the manner of production, and disclosing the hash value using one or more of SHA-1, SHA-256 or MD5. Part B is filled by an expert — declaring that the electronic record has not been tampered with, and confirming the technical particulars.
POSH Case Law, Kailash Pawar 2025 (Kailash S/o Bajirao Pawar v. State of Maharashtra (2025)) L1-C4
The Supreme Court held that a compact disc is an electronic record admissible once Section 63 BSA requirements are satisfied. Where electronic evidence is proved through the special statutory mode under Section 63, the certificate is mandatory. Where the record is proved through oral evidence, the certificate may be treated as directory rather than mandatory. Transcripts of video evidence are not strictly necessary. The Court observed that the hash value of an electronic record is synonymous with an "electronic fingerprint" and provides a sure way of identifying and verifying digital data.
POSH Case Law, Pune Bar Assn 2026 (Pune Bar Association v. Union of India, WP(C) 599/2026 (SC, 22 May 2026)) L1-C5
A three-judge Bench of the Supreme Court dismissed a constitutional challenge to Section 63(4) BSA and the accompanying Schedule. The Court held that the certificate requirement — including dual signatures by the person in charge of the device and an expert, and the mandatory disclosure of the hash value — is constitutional and has a legitimate objective of ensuring authenticity and integrity of electronic records. The Court clarified that "expert" in Part B is not restricted to examiners notified under Section 79A of the IT Act. Any individual possessing special skills and expertise in computer science and cyber forensics may validly sign Part B, provided the Court trying the case is satisfied on the expert's credentials.
BSA 2023, Section 61 (Admissibility of electronic or digital records) L1-C6
Section 61 of the Bharatiya Sakshya Adhiniyam 2023 recognises electronic and digital records as documents having the same legal effect, validity and enforceability as any other document, subject to the conditions set out in Section 63. Section 61 in effect classifies electronic records within the ordinary evidence framework, and this drafting has generated a live academic debate on whether it permits oral proof of electronic records notwithstanding Arjun Panditrao Khotkar's "certificate is sine qua non" holding. The Supreme Court has not yet ruled on the question.
POSH Case Law, Arjun Panditrao 2020 (Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1) L1-C7
The Supreme Court, by a three-judge Bench, reaffirmed Anvar P.V. and clarified that a certificate under Section 65B(4) is a condition precedent to admissibility of electronic evidence. The Court held that the certificate must be produced along with the electronic record, and cannot be dispensed with. Where the party seeking to rely on the electronic record cannot itself produce the certificate, it may seek the court's assistance to summon the certificate from the appropriate person.
IT Rules 2021, IT Amdt Rules 2026 (IT (Intermediary Guidelines) Amendment Rules 2026 — Deepfake & SGI) L1-C8
The Ministry of Electronics and Information Technology notified the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026 on 10 February 2026, with effect from 20 February 2026. The amendment introduces the concept of "synthetically generated information" (SGI) and imposes obligations on intermediaries. Unlawful AI-generated content must be taken down within three hours. Non-consensual intimate imagery, including deepfake intimate content, must be taken down within two hours. Intermediaries must ensure SGI carries a "continuous and clearly visible label" throughout the duration of the content. Reliance on user self-reporting is insufficient; automated detection tools are required.
POSH Act 2013, Section 16 (Prohibition of publication or making known contents of complaint) L1-C9
Section 16 of the POSH Act imposes a statutory duty of confidentiality. Notwithstanding anything in the Right to Information Act 2005, the contents of the complaint, the identity and addresses of the aggrieved woman, respondent and witnesses, any information relating to conciliation and inquiry proceedings, and recommendations of the Internal or Local Committee, shall not be published, communicated or made known to the public, press or media in any manner. The recommendations of the Committee and the action taken by the employer may be disseminated in general terms to the extent necessary.
Free preview
The first lesson is open. Add your email to read the rest of Module 1 free.
Module 1: Digital Evidence and Forensics for the POSH IC
Module 2: Complaints Against Senior Leadership
  • When the respondent is the employer under Section 2(g)
  • Conflict of interest and IC recusal
  • Independent external inquiry
  • Board governance safeguards: Section 177, 178 and the SEBI LODR interface
  • The politics of the senior-leadership complaint
Module 3: LGBTQIA+ and Gender-Neutral Complainants
  • The Section 2(a) boundary and the trans-woman doctrine
  • Navtej Johar and Supriyo: the constitutional overlay
  • The Transgender Persons Act 2019 as amended in 2026
  • Designing the employer's parallel anti-harassment policy
  • Best-practice handling of male, non-binary, trans and same-sex complaints
Module 4: Anonymous and Third-Party Complaints
  • The Section 9 written-complaint gate after Abraham Mathai
  • Section 9(2) representative filings: family, co-worker, NCW, and Rule 6
  • The IC suo-motu question: can the Committee initiate on its own motion?
  • Whistleblower channels and their POSH intersection
  • The practitioner's threshold-decision framework
Module 5: Criminal Parallel Proceedings under BNS
  • Section 19(g) and 19(h): the employer's criminal-assistance duties
  • BNS 74, 75, 79 and IPC 354, 354A, 509: the 2026 mapping
  • The standard-of-proof gap and why divergent outcomes are legitimate
  • Evidence sharing between the IC and the police
  • Divergent outcomes: what each combination means for the employer
Module 6: Cross-Examination and Inquiry Technique
  • Written versus oral cross-examination: reading Rule 7 properly
  • Witness protection during cross: Section 16 in the hearing room
  • Reluctant, hostile and adverse witnesses
  • Marshalling documentary and electronic evidence
  • Building the Section 18 appellate record from Day 1
Module 7: Post-Inquiry Reintegration and the Retaliation Protocol
  • The X v. Akademi retaliation doctrine
  • Managed return-to-work: sequencing and role separation
  • Role redesign, team restructuring, and location transfer
  • The 12-month retaliation-monitoring plan
  • Managed separation under the IR Code 2020
Module 8: Section 15 Compensation Advanced
  • The Section 15 five factors: a deep dive with three worked cases
  • Reading the quantum anchors: Global Health Indore and LNIPE 2026
  • Three compensation models: lost-earnings, career-impairment, dignity-harm
  • Insurance and civil damages: set-off and the no-double-recovery rule
  • Payment structuring and the honest reading of the tax question
Module 9: The IC Report Drafting Workshop
  • What a defensible IC report actually looks like
  • Eight defects that survive appeal
  • Fact, evidence, law, conclusion: the four-step drafting technique
  • Drafting the Section 15 compensation recommendation
  • Drafting the Section 14 false-complaint finding: the narrow gate
Module 10: Insurance, D&O and Regulated-Industry Interfaces
  • D&O insurance and POSH claims: what it covers and what it does not
  • Employment Practices Liability Insurance (EPLI) in India
  • The RBI, SEBI and IRDAI fit-and-proper regime
  • Sectoral secondary exposures: CDSCO, FSSAI, DoT, DGCA and others
  • Disclosure reconciliation: Section 22, insurance and regulator streams
Module 11: Case Management Systems and IC Tooling
  • The IC tooling landscape in 2026
  • DPDP-compliant document management: Rule 6 and Rule 8 in practice
  • Workflow automation and the statutory clock
  • Analytics dashboards and reporting reconciliation
  • Vendor selection: the 15-criteria rubric and pilot design
Module 12: Case-Law Tracker and Practice Foundations
  • Reading a POSH judgment as a practitioner
  • Building and maintaining a personal case-law index
  • The Aureliano enforcement layer: district survey, SHe-Box, MCA
  • The POSH Amendment Bill 2024 watchlist
  • The Lead Practitioner community and the 12-month protocol