Cyber Forensic lab as Examiner of Electronic Evidence under section 79A of IT Act

## Report on Notification S.O. 4157(E) Regarding Examiner of Electronic Evidence **1. Executive Summary:** This report analyzes Notification S.O. 4157(E) issued by the Ministry of Electronics and Information Technology, published in the Gazette of India on September 5, 2022. The notification designates the Forensic Wing Lab, Defence Cyber Agency (DCyA) in New Delhi as an Examiner of Electronic Evidence within India, specifying its scope to include Computer Media Forensics (excluding Floppy Disk Drives) and Mobile Devices Forensics. This designation aims to provide a recognized authority for electronic evidence examination within the country, likely to impact legal proceedings and cybersecurity investigations. **2. Introduction:** The purpose of this report is to provide an informative overview of Notification S.O. 4157(E), issued by the Ministry of Electronics and Information Technology, based solely on the content of the provided text from the Gazette of India. This report will outline the key aspects of the notification and infer its potential implications based on the textual details. **3. Policy Overview:** * This notification establishes a *new* policy rather than amending an existing one. * **Core Objective(s):** The primary objective, as inferred from the text, is to establish and designate a specific entity (Forensic Wing Lab, DCyA) as a recognized Examiner of Electronic Evidence within India. This implies a need to provide expert analysis and validation of electronic evidence for use in legal or investigative contexts. **4. Background and Rationale:** As this is a new policy, the rationale likely stems from a recognized need for specialized expertise in the examination of electronic evidence. The increasing prevalence of digital data in legal and security matters necessitates qualified and certified examiners. The designation of the Defence Cyber Agency's Forensic Wing Lab suggests a focus on addressing cybersecurity concerns and supporting law enforcement with digital forensic capabilities. The exclusion of floppy disk drives hints at the policy's focus on contemporary, more prevalent forms of electronic storage and communication. **5. Key Provisions / Changes:** * The notification designates the **Forensic Wing Lab, Defence Cyber Agency (DCyA), Rajaji Marg, New Delhi**, as the **Examiner of Electronic Evidence within India.** * The scope of examination is explicitly defined as: * **Computer Media Forensics (excluding Floppy Disk Drives)** * **Mobile Devices Forensics** * This establishes a recognized and potentially authoritative source for expert analysis of electronic evidence related to computers and mobile devices (excluding obsolete floppy disks). It formalizes the agency's role in this domain. **6. Target Audience and Stakeholders:** The primary target audience and stakeholders for this policy include: * **Law Enforcement Agencies:** Will likely rely on the designated Examiner for evidence analysis in criminal investigations involving electronic devices. * **Judicial System:** Courts and legal professionals will likely consider the Examiner's findings as expert testimony. * **Cybersecurity Professionals:** May collaborate with the Examiner on incident response and forensic investigations. * **Defence Cyber Agency (DCyA):** The designated Examiner is part of this agency, giving it increased prominence in digital forensics. * **Individuals and organizations involved in legal cases where electronic evidence is relevant.** **7. Implementation Aspects (Inferred):** * **Responsible Agency/Bodies:** The **Defence Cyber Agency (DCyA)** is the primary responsible body, specifically the Forensic Wing Lab within it. * **Timelines or Procedures:** The text does not specify any particular timelines or procedures for implementation. It simply designates the agency and defines its scope. However, it can be inferred that the DCyA will need to establish internal procedures for handling evidence requests, conducting examinations, and producing reports. * The responsibility for evidence handling and request procedure will fall upon the DCyA to be set. **8. Expected Outcomes / Impact of Changes:** The intended outcomes of this policy likely include: * Enhanced capacity for examining and analyzing electronic evidence in legal and security matters. * Increased reliability and credibility of electronic evidence presented in court. * Improved support for law enforcement and cybersecurity investigations. * Clearer definition of the scope and authority of electronic evidence examination. * A more standardized approach to digital forensics within the specified scope. **9. Conclusion:** Notification S.O. 4157(E) is a significant step in establishing a recognized framework for electronic evidence examination in India. By designating the Forensic Wing Lab of the Defence Cyber Agency as an Examiner of Electronic Evidence, the policy provides a clear point of authority for computer and mobile device forensics. While the text is limited, it's reasonable to anticipate that this policy will have a positive impact on the handling of digital evidence within the legal system and contribute to improved cybersecurity incident response. Future analysis could benefit from understanding the specific procedures, standards, and certifications that the designated Examiner will adhere to in practice.

Key Entities Referenced