E-evidence in employment disputes.
1. Introduction
Electronic evidence (e-evidence) has become increasingly important in employment disputes because modern employment relationships generate enormous amounts of digital information.
Examples include:
- emails;
- WhatsApp messages;
- SMS;
- Teams/Slack communications;
- electronic attendance records;
- biometric records;
- GPS/location records;
- CCTV footage;
- access-control logs;
- payroll databases;
- HR-management systems;
- electronically signed employment contracts;
- cloud documents;
- computer logs;
- server records;
- social-media posts;
- recorded video conferences;
- electronic resignation letters; and
- digital performance records.
In an employment dispute, such evidence may establish:
- misconduct;
- unauthorised absence;
- resignation;
- termination;
- discrimination;
- sexual harassment;
- workplace communications;
- wage payments;
- overtime;
- employee performance;
- confidentiality breaches;
- theft of company data; or
- the existence of an employment relationship.
The central legal issue is not simply whether an electronic document exists, but:
Can the electronic evidence be authenticated, proved and admitted in accordance with Indian evidence law?
2. Meaning of E-Evidence
E-evidence means information having evidentiary value that is:
- created electronically;
- stored electronically;
- transmitted electronically; or
- reproduced from an electronic system.
Examples:
Communication evidence
- email;
- WhatsApp;
- SMS;
- Telegram;
- Teams;
- Slack;
- electronic letters.
System evidence
- attendance database;
- access-control records;
- biometric logs;
- payroll software;
- HRMS records.
Surveillance evidence
- CCTV;
- body-camera footage;
- vehicle GPS;
- computer monitoring.
Document evidence
- electronic employment contract;
- e-signed documents;
- scanned documents;
- electronic payslips.
3. Statutory Framework
The principal framework has historically consisted of:
- Indian Evidence Act, 1872, particularly Sections 65A and 65B;
- Information Technology Act, 2000;
- principles concerning electronic signatures and electronic records.
However, an important development is that the Bharatiya Sakshya Adhiniyam, 2023 (BSA) replaced the Indian Evidence Act with effect from 1 July 2024.
Therefore, for contemporary employment disputes, the BSA's provisions relating to electronic or digital records must be considered, while older precedents interpreting Sections 65A/65B of the Evidence Act remain highly relevant to understanding the evolution of the law and the principles of electronic-evidence admissibility.
4. Electronic Records as Evidence
Electronic records are not inherently inferior to paper documents.
An electronic record may include:
- a computer file;
- email;
- database entry;
- digital photograph;
- video;
- audio;
- server log;
- electronic communication.
The important question is proof and authenticity.
For example:
"The HR database shows that the employee was absent for 17 days."
The database entry alone may not be enough if the employee challenges its authenticity.
The employer may need to establish:
- what system generated the record;
- who controlled the system;
- how the record was stored;
- whether the system was functioning properly;
- whether the record was altered;
- how the record was extracted.
5. Electronic Evidence in Employment Disputes
E-evidence can be used by both sides.
Employer may rely upon:
- emails;
- attendance logs;
- CCTV;
- access-card records;
- WhatsApp messages;
- employee acknowledgements;
- computer logs;
- electronic resignation;
- recorded misconduct.
Employee may rely upon:
- emails showing discriminatory treatment;
- WhatsApp instructions;
- salary communications;
- electronic attendance;
- HR communications;
- termination emails;
- recorded workplace communications;
- digital evidence showing employer instructions.
Thus, e-evidence is not exclusively an employer's tool.
6. Important Categories of E-Evidence
A. Email evidence
Emails can establish:
- instructions;
- warnings;
- resignation;
- approval;
- salary negotiations;
- workplace harassment;
- disciplinary communications.
Example:
An employer argues:
"The employee was repeatedly warned."
The employee produces emails showing that the warnings were never communicated.
The email trail may become important evidence.
7. WhatsApp Messages
WhatsApp messages are increasingly used in labour and employment disputes.
They may establish:
- reporting instructions;
- absence;
- resignation;
- salary discussions;
- workplace disputes;
- harassment;
- admissions;
- communication between supervisor and employee.
But a screenshot raises an important question:
How do we know that the screenshot accurately represents the original conversation?
The party relying upon it may need to establish authenticity and satisfy applicable statutory requirements.
8. Screenshots
A screenshot is essentially a copy or representation of electronic information.
For example:
Screenshot of a WhatsApp message saying "You are terminated."
A screenshot can be useful, but it should not automatically be treated as conclusive proof.
Questions include:
- Who took the screenshot?
- From which device?
- Does the original conversation still exist?
- Has the message been altered?
- Is the sender identified?
- Can the device/account be connected to the person?
- Can the electronic record be independently verified?
9. CCTV Evidence
CCTV can be extremely important in employment disputes involving:
- theft;
- violence;
- workplace misconduct;
- unauthorised access;
- attendance;
- safety violations;
- harassment.
However, the employer should preserve:
- original footage;
- date and time information;
- relevant camera identification;
- storage information;
- extraction method.
The longer the employer waits, the greater the risk that CCTV footage will be overwritten.
10. Biometric Attendance
Biometric systems can produce evidence concerning:
- attendance;
- entry;
- exit;
- working hours.
But biometric evidence should be accompanied by appropriate system records.
An employee may challenge it by arguing:
- fingerprint malfunction;
- system error;
- incorrect clock setting;
- shared access;
- database manipulation;
- technical failure.
Therefore, electronic attendance should preferably be corroborated by other evidence where material facts are disputed.
11. GPS and Location Data
For drivers, field employees and delivery workers, GPS evidence can establish:
- location;
- route;
- vehicle movement;
- working hours;
- unauthorised use.
But location data also raises privacy issues.
The employer should have a legitimate employment-related purpose and should avoid excessive surveillance unrelated to the employment.
12. Computer and Server Logs
Employers may rely on:
- login records;
- file-access logs;
- download records;
- server logs;
- USB/device records;
- cloud access records.
These may become particularly important where an employee is accused of:
- stealing confidential information;
- downloading customer databases;
- copying intellectual property;
- deleting company data.
13. Electronic Resignation
An employee may resign through:
- email;
- HR portal;
- electronic signature;
- WhatsApp;
- company application.
The employer should establish that the communication actually represents the employee's intention to resign.
A message such as:
"I am done with this company. I don't want to work anymore."
may require contextual interpretation.
It may not automatically constitute a legally effective resignation in every circumstance.
14. Electronic Termination
Similarly, employers may issue termination communications electronically.
Important questions include:
- Was the communication authorised?
- Was it actually sent?
- Was it received?
- Did it comply with the employment contract?
- Did applicable labour law require a particular procedure?
An email is evidence of communication, but electronic delivery does not automatically cure an otherwise unlawful termination.
15. Authentication
Authentication means establishing that the electronic evidence is what the party claims it to be.
For example:
Employer produces a WhatsApp screenshot and claims that it was sent by the employee.
Authentication may involve:
- the original device;
- account information;
- metadata;
- witness testimony;
- admissions;
- server records;
- certificate/other statutory compliance;
- corroborating evidence.
16. The Landmark Case: Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473
This is one of India's most important electronic-evidence decisions.
Principle
The Supreme Court held that electronic records must be proved in accordance with the special statutory framework applicable to electronic evidence.
The Court emphasised the importance of Section 65B of the Indian Evidence Act for computer-generated electronic records.
Employment relevance
Suppose an employer produces:
An electronically generated attendance report.
The opposing party may challenge its admissibility.
The party relying upon the electronic record must comply with the applicable requirements for proving such electronic evidence.
Importance
Anvar fundamentally changed the way courts approached electronic evidence.
17. Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1
This is another major Supreme Court authority.
Principle
The Supreme Court reaffirmed the importance of the statutory certification mechanism under Section 65B for electronic evidence derived from computer systems, while clarifying several practical aspects concerning the certificate.
The Court also explained that the requirement relates to the admissibility of secondary electronic evidence, while the original electronic record/device may stand on a different footing.
Employment relevance
This case is particularly useful when an employer or employee relies upon:
- server-generated records;
- CCTV;
- email records;
- computer files;
- electronic databases.
The party should determine whether it is producing the original electronic record or a copy/output requiring statutory proof.
18. Shafhi Mohammad v. State of Himachal Pradesh, (2018) 2 SCC 801
Principle
The Supreme Court addressed difficulties surrounding the production of electronic evidence and the requirement of certificates.
The decision considered circumstances where the party seeking to rely on electronic evidence did not have possession or control of the relevant device.
Later development
The legal position was subsequently clarified and effectively reconsidered in Arjun Panditrao Khotkar.
Employment relevance
Suppose an employee seeks:
CCTV footage stored on the employer's server.
The employee may not possess the server or control the system.
The case is relevant to understanding the practical difficulties involved in obtaining electronic evidence from another party.
19. Tomaso Bruno v. State of Uttar Pradesh, (2015) 7 SCC 178
Principle
The Supreme Court recognised the importance of electronic evidence, particularly CCTV footage, in modern litigation.
The Court emphasised that technological evidence can be important for determining the truth.
Employment relevance
In workplace disputes involving:
- physical assault;
- theft;
- misconduct;
- workplace incidents;
CCTV may provide objective evidence.
An employer should therefore have appropriate preservation mechanisms for potentially relevant footage.
20. Sonu @ Amar v. State of Haryana, (2017) 8 SCC 570
Principle
The Supreme Court discussed objections concerning electronic evidence and the procedural requirements for challenging admissibility.
The judgment illustrates the importance of raising objections to electronic evidence at the appropriate stage.
Employment relevance
In an employment proceeding, a party should not simply argue:
"This WhatsApp record is fake."
It should identify the specific issue:
- authenticity;
- admissibility;
- source;
- integrity;
- statutory compliance;
- relevance.
21. K.S. Puttaswamy v. Union of India, (2017) 10 SCC 1
Although not primarily an evidence case, this judgment is extremely important for electronic workplace surveillance.
Principle
The Supreme Court recognised privacy as a fundamental right under Article 21.
Privacy includes informational privacy.
Employment relevance
Employers increasingly monitor:
- emails;
- internet activity;
- GPS;
- CCTV;
- biometric data;
- employee devices.
The employer's ability to collect such information must be considered alongside privacy principles and applicable data-protection law.
Thus:
Admissibility and legality of collection are separate questions.
Evidence may exist, but the method of obtaining it can itself raise legal issues.
22. State (NCT of Delhi) v. Navjot Sandhu, (2005) 11 SCC 600
Principle
The Supreme Court considered electronic evidence in the context of computer-generated records.
Although later developments, particularly Anvar, changed the approach to Section 65B, the case remains important historically because it dealt with the evidentiary treatment of electronic records.
Employment relevance
It demonstrates the evolution of Indian law from treating electronic records through general evidentiary principles toward a more specific statutory framework.
23. Electronic Evidence and the Bharatiya Sakshya Adhiniyam, 2023
For current proceedings after the commencement of the new evidence law, practitioners must consider the Bharatiya Sakshya Adhiniyam, 2023.
The new framework expressly addresses electronic and digital records.
The important practical lesson is:
Do not automatically apply old Evidence Act section numbers to a current proceeding without checking the governing statutory provision.
Older Supreme Court cases remain highly valuable for understanding:
- authenticity;
- integrity;
- computer-generated records;
- certification;
- primary/secondary electronic evidence;
- evidentiary reliability.
But the applicable statutory provision must be identified according to the date and nature of the proceeding.
24. Primary and Secondary Electronic Evidence
A crucial distinction is between the original electronic record/device and a copy/output.
Example 1
The actual mobile phone containing a WhatsApp conversation is produced.
This raises one category of evidentiary question.
Example 2
A printed screenshot of the WhatsApp conversation is produced.
This may raise different requirements concerning proof of the electronic record.
Similarly:
Original server data ≠ printed report generated from the server.
The evidentiary treatment can differ.
25. Employer's Electronic Evidence Policy
Employers should maintain a clear policy concerning:
- company email;
- company devices;
- CCTV;
- biometric systems;
- employee monitoring;
- data retention;
- access logs;
- cloud storage;
- investigation procedures.
A proper policy helps establish:
- legitimate purpose;
- authorised monitoring;
- system reliability;
- chain of custody;
- data retention;
- employee awareness.
26. Chain of Custody
For important electronic evidence, the employer should document:
Collection → Preservation → Extraction → Storage → Production
For example:
CCTV incident → footage preserved → copy extracted → hash/technical information preserved where appropriate → secure storage → produced in proceedings.
This makes it easier to answer allegations that evidence was:
- altered;
- deleted;
- manipulated;
- selectively extracted.
27. Metadata
Metadata can provide information such as:
- creation date;
- modification date;
- author;
- file location;
- device information.
Metadata can be useful for authentication, but it should not automatically be treated as conclusive.
Technical evidence should be interpreted alongside other evidence.
28. Emails in Disciplinary Proceedings
Suppose an employee is accused of sending confidential data to a competitor.
The employer produces:
- email;
- attachment;
- server logs;
- access logs.
A strong evidentiary chain would establish:
- employee's account;
- date/time;
- recipient;
- attachment;
- server record;
- employee's access to the computer;
- relevant system integrity.
The more serious the allegation, the more important corroboration becomes.
29. WhatsApp Evidence in Misconduct Cases
Suppose an employee is accused of threatening a supervisor.
The employer produces a WhatsApp screenshot.
A stronger case may involve:
- original phone;
- WhatsApp conversation;
- phone number;
- identification of sender;
- surrounding messages;
- witness evidence;
- technical verification.
A single isolated screenshot may be challenged on authenticity or context.
30. Social Media Evidence
Social-media posts may become relevant where they concern:
- disclosure of confidential information;
- workplace harassment;
- threats;
- competing business;
- misconduct;
- unauthorised disclosure.
But the employer should establish:
- ownership of the account;
- authenticity of the post;
- date;
- context;
- relevance.
A screenshot alone may not always establish authorship.
31. Audio Recordings
Secret audio recordings can present complex questions.
Issues include:
- authenticity;
- voice identification;
- completeness;
- editing;
- relevance;
- manner of acquisition;
- privacy.
A recording should ideally be preserved in its original form.
32. Video Conferences
Modern employment disputes may involve recordings of:
- Zoom meetings;
- Microsoft Teams;
- Google Meet;
- internal meetings.
Such recordings can establish:
- instructions;
- admissions;
- workplace conduct;
- disciplinary meetings;
- employee communications.
Again, authenticity and integrity must be established where disputed.
33. E-Evidence in Wrongful Termination Claims
An employee may use:
- emails;
- HR communications;
- WhatsApp messages;
- termination letters;
- electronic attendance;
- performance reviews.
For example, if the employer says:
"The employee was terminated for poor performance."
the employee may produce emails showing:
"Your performance is excellent and you are being considered for promotion."
This can create a factual dispute concerning the employer's stated reason.
34. E-Evidence in Wage Disputes
Electronic evidence can establish:
- salary payments;
- payroll;
- overtime;
- attendance;
- bonus;
- incentives.
Useful evidence includes:
- bank records;
- electronic payslips;
- HRMS;
- attendance systems;
- emails;
- payroll databases.
35. E-Evidence in Sexual-Harassment Cases
Electronic communications can be extremely important in POSH proceedings.
Evidence may include:
- WhatsApp messages;
- emails;
- social-media messages;
- recordings;
- screenshots;
- electronic meeting records.
However, confidentiality is especially important.
The employer should avoid unnecessary disclosure of:
- complainant identity;
- sensitive communications;
- inquiry records.
The POSH process requires careful handling of confidentiality and procedural fairness.
36. E-Evidence in Employee Data Theft
Where an employee is accused of stealing company data, relevant evidence may include:
- download logs;
- email records;
- USB connection logs;
- cloud access;
- file-access logs;
- DLP alerts;
- CCTV;
- laptop forensic images.
A good investigation should preserve evidence before the employee's device is altered or wiped.
37. Artificial Intelligence and E-Evidence
Modern employment disputes may increasingly involve AI-generated or AI-assisted evidence.
Examples:
- AI-generated transcripts;
- automated attendance analysis;
- algorithmic performance reports;
- automated HR decisions;
- deepfake audio/video.
The central question remains:
Can the source, integrity and authenticity of the evidence be established?
AI-generated content should therefore not be treated as inherently reliable merely because it appears technologically sophisticated.
38. Privacy Versus Evidence Collection
There are two separate questions:
Question 1
Was the information legally and properly collected?
Question 2
Is the information admissible/relevant in the proceeding?
These questions should not be confused.
For example, an employer may have access to an employee's personal messaging account. That does not automatically mean the employer has an unrestricted right to search every private message.
Privacy, contractual policies, applicable data-protection law and proportionality must be considered.
39. Best Practices for Employers
Employers should:
1. Have a written electronic-communications policy
Employees should understand how company systems may be monitored.
2. Maintain reliable systems
Attendance, payroll and access-control systems should have appropriate audit trails.
3. Preserve originals
Do not rely exclusively on screenshots.
4. Record chain of custody
Document who collected and stored evidence.
5. Preserve metadata where possible
Especially for important electronic records.
6. Avoid selective deletion
Preserve relevant material once litigation or an investigation becomes reasonably foreseeable.
7. Use independent technical experts when necessary
Particularly for disputed forensic evidence.
40. Best Practices for Employees
Employees facing disciplinary action should preserve:
- employment emails;
- appointment letters;
- salary records;
- WhatsApp messages;
- HR communications;
- attendance records;
- performance documents.
However, employees should not unlawfully copy or disclose:
- trade secrets;
- customer databases;
- confidential company information;
- privileged material;
- other employees' sensitive personal information.
41. Common Mistakes in E-Evidence
Mistake 1 — Producing only a screenshot
A screenshot may be challenged for authenticity.
Mistake 2 — Altering the original
Editing or cropping can raise serious credibility concerns.
Mistake 3 — Destroying the original device
This can complicate proof.
Mistake 4 — Ignoring statutory certification/proof requirements
Electronic evidence must satisfy the applicable evidence law.
Mistake 5 — Treating metadata as conclusive
Metadata is useful but not infallible.
Mistake 6 — Excessive employee surveillance
Monitoring should have a legitimate purpose and comply with applicable legal requirements.
42. Practical Evidentiary Checklist
Before relying upon electronic evidence, ask:
| Question | Importance |
|---|---|
| What is the original source? | Very high |
| Who created the record? | High |
| Who controlled the system? | High |
| Is the record authentic? | Essential |
| Has it been altered? | Essential |
| Is the original available? | Important |
| Is statutory certification/proof required? | Essential |
| Can metadata be produced? | Useful |
| Is there corroborating evidence? | Highly useful |
| Was it lawfully obtained? | Important |
| Is it relevant? | Essential |
| Has it been securely preserved? | Essential |
43. Six Core Principles from the Case Law
The principal lessons from the cases discussed can be summarised as follows:
1. Electronic evidence is legally recognised
Anvar P.V. v. P.K. Basheer
Electronic records can constitute evidence, but the statutory requirements governing proof must be followed.
2. Certification requirements matter
Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal
The Supreme Court clarified the operation of the electronic-evidence certification framework.
3. Access to the original source matters
Shafhi Mohammad
The courts have recognised practical problems where the relevant electronic device or system is controlled by another party, although the subsequent jurisprudence clarified the applicable framework.
4. CCTV can be important objective evidence
Tomaso Bruno
Technological evidence may play an important role in establishing what actually occurred.
5. Electronic evidence must be challenged properly
Sonu @ Amar v. State of Haryana
Questions of admissibility and procedural objection should be addressed appropriately.
6. Digital surveillance implicates privacy
K.S. Puttaswamy v. Union of India
Collection and processing of personal information must be considered in light of constitutional privacy principles.
44. Conclusion
E-evidence has become indispensable in modern employment disputes.
The employment relationship now produces an extensive digital trail:
Email → WhatsApp → HRMS → biometric attendance → CCTV → access logs → payroll → cloud systems → GPS → electronic documents.
These records can be decisive in disputes involving:
- termination;
- misconduct;
- absenteeism;
- wages;
- harassment;
- confidentiality;
- data theft;
- discrimination;
- resignation; and
- performance.
But digital availability does not automatically equal legal admissibility.
The party relying upon e-evidence must pay attention to:
- authenticity;
- integrity;
- source;
- preservation;
- chain of custody;
- applicable statutory requirements;
- relevance;
- corroboration; and
- privacy and lawful collection.
The leading cases—Anvar P.V., Arjun Panditrao Khotkar, Shafhi Mohammad, Tomaso Bruno, Sonu @ Amar, Navjot Sandhu and Puttaswamy—provide the principal judicial framework for understanding these issues.
Core takeaway
In an employment dispute, the strongest electronic evidence is not simply the most convenient screenshot; it is evidence whose source, authenticity, integrity, preservation and statutory admissibility can be convincingly established.

comments