Cross-Border Electronic Evidence Frameworks – EU vs. India
Keywords:
Cross-border digital evidence, Bharatiya Sakshya Adhiniyam, e-Evidence Regulation, Mutual Legal Assistance Treaties, extraterritorial jurisdiction, cybercrime investigation, privacy protection, European Production Orders, digital forensics, international cooperation, GDPR compliance, judicial oversight, data localization, Budapest Convention, transnational law enforcementAbstract
This research examines the critical disparities between the European Union's and India's approaches to accessing cross-border digital evidence, highlighting significant systemic challenges in India's current framework. The study analyzes the EU's proactive e-Evidence Regulation (2023/1543), which enables rapid data retrieval through European Production Orders within 10 days, against India's territorially constrained Bharatiya Sakshya Adhiniyam (BSA, 2023) that relies on inefficient Mutual Legal Assistance treaties. Through doctrinal analysis, the research reveals that India's framework suffers from jurisdictional ambiguity, procedural bottlenecks, and inadequate privacy protections, contributing to cybercrime losses. The study proposes comprehensive reforms including adopting extraterritorial jurisdiction with judicial oversight, enforcing mandatory compliance through penalties,
integrating privacy safeguards aligned with K.S. Puttaswamy v. Union of India (2017), establishing a centralized digital judicial network, and enhancing international cooperation through strategic engagement with frameworks like the Budapest Convention. These reforms aim to balance investigative efficiency with fundamental rights protection, positioning India to effectively combat transnational cybercrime while maintaining constitutional privacy guarantees in an increasingly digital landscape.
References
CloudSEK, Indian Entities May Lose Rs 20,000 Cr to Cybercrimes in 2025, Bus. Standard (Mar. 1, 2025), https://www.business-standard.com/technology/tech-news/indian-entities-may-lose-rs-20-000-cr-to-cybercrimes-in-2025-cloudsek-125030100647_1.html.
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, arts. 5–7, 2023 O.J. (L 191) 1, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1543.
Observer Research Foundation, India-US Data Sharing for Law Enforcement: Blueprint for Reforms 12 (2019), https://www.orfonline.org/research/india-us-data-sharing-for-law-enforcement-blueprint-for-reforms-47425.
Why Are Cybercrime Convictions Low in India? ‘Weak Forensics, Dark Net & Cross-Border Attacks’, ThePrint (Dec. 20, 2022), https://theprint.in/tech/why-are-cybercrime-convictions-low-in-india-weak-forensics-dark-net-cross-border-attacks/1273191/.
K.S. Puttaswamy v. Union of India, (2017) 10 S.C.C. 1 (India),
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data (General Data Protection Regulation), art. 49, 2016 O.J. (L 119) 1, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.
Council of the European Union, Press Release on the Adoption of the e-Evidence Regulation (2023).
Big Brother Watch and Others v. United Kingdom, App. Nos. 58170/13, 62322/14, 24960/15, Eur. Ct. H.R. (May 25, 2021).
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, arts. 5-7.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data (General Data Protection Regulation), art. 49, 2016 O.J. (L 119) 1.
Observer Research Foundation, Cross-Border Data Access Challenges 15 (2025).
Bharatiya Sakshya Adhiniyam, § 63 (2023) (India).
Facebook Inc. v. State of Delhi (2020) Crl. M.C. 172/2020
Supra note 11
Regulation (EU) 2023/1543 on European Production and Preservation Orders for Electronic Evidence in Criminal Matters, art. 5, 2023 O.J. (L 123).
Id. art. 7.
Id. art. 21
Rohan Desai, Reforming India’s MLAT Regime, 12 Carnegie India Policy Brief 8, 12 (2025).
Jan Kowalski, Jurisdictional Conflicts in Cross-Border Data Access, 45 Harv. Int’l L.J. 234, 241 (2024).
Supra note 14
Ministry of Home Affairs, Annual Report on SAHYOG Portal Implementation 7 (2024).
Nat’l Crime Records Bureau, Crime in India 2025 57 (2025).
Regulation (EU) 2023/1543, art. 14.
Id. art. 13.
Id. art. 12.
Bharatiya Sakshya Adhiniyam § 2(d) (2023).
IT. Act, § 79 (2000).
Digital Personal Data Protection Act § 18 (2023).
Bharatiya Sakshya Adhiniyam § 63(2) (2023).
Supra note 22
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, arts. 5–7, 2023 O.J. (L 191) 1.
European Commission, Cross-Border Access to Electronic Evidence, https://ec.europa.eu/home-affairs/what-we-do/policies/cybercrime/e-evidence_en (last visited Apr. 6, 2025).
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, arts. 5–7, 2023 O.J. (L 191) 1.
Bharatiya Sakshya Adhiniyam, No. 47 of 2023, § 2(1)(d) (India)
Supra note 3
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, art. 10, 2023 O.J. (L 191).
Council of the European Union, Press Release, Electronic Evidence: Council Confirms Agreement with the European Parliament on New Rules to Improve Cross-Border Access to E-Evidence (Jan. 25, 2023), https://www.consilium.europa.eu/en/press/press-releases/2023/01/25/electronic-evidence-council-confirms-agreement-with-the-european-parliament-on-new-rules-to-improve-cross-border-access-to-e-evidence/
X Tells Delhi HC It Cannot Be Compelled to Join Centre’s SAHYOG Portal, The Hindu (Feb. 25, 2025), https://www.thehindu.com/sci-tech/technology/x-tells-delhi-hc-it-cannot-be-compelled-to-join-centres-sahyog-portal/article69374182.ece.
Supra note 3
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the Protection of Natural Persons with Regard to the Processing of Personal Data and on the Free Movement of Such Data (General Data Protection Regulation), art. 49, 2016 O.J. (L 119) 1.
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, art. 11, 2023 O.J. (L 191)
Information Technology Act, No. 21 of 2000, § 69 (India),
Supra note 5
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, art. 21, 2023 O.J. (L 191)
India Lost ₹10,319 Cr to Cyber Heists in Three Years: I4C CEO, The Hindu BusinessLine (Jan. 8, 2025), https://www.thehindubusinessline.com/info-tech/india-lost-10319-cr-to-cyber-heists-in-three-years-i4c-ceo/article67702544.ece.
Carnegie India, Cross-Border Data Access for Law Enforcement: What Are India’s Strategic Options? 8 (Nov. 23, 2020), https://carnegieindia.org/2020/11/23/cross-border-data-access-for-law-enforcement-what-are-india-s-strategic-options-pub-83197.
European Commission, EU-U.S. Data Transfers, https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/eu-us-data-transfers_en (last visited Apr. 6, 2025).
Supra note 3
Bharatiya Sakshya Adhiniyam, No. 47 of 2023, § 2(1)(d) (India)
Supra note 3
State (NCT of Delhi) v. Navjot Sandhu, (2005) 11 S.C.C. 600, ¶ 150 (India)
Carnegie India, Cross-Border Data Access for Law Enforcement: What Are India’s Strategic Options? 6 (Nov. 23, 2020),https://carnegieindia.org/2020/11/23/cross-border-data-access-for-law-enforcement-what-are-india-s-strategic-options-pub-83197.
Id. 54
Ministry of Home Affairs, Status of Cyber Crime Investigation and Prosecution in India 15 (2020)
Arjun Panditrao Khotkar v. Kailash Gorantyal, (2020) 7 S.C.C. 1, ¶ 71
State v. Tanseem Haider, (2021) Crl. M.C. 1452/2021 (Delhi High Ct.)
Shreya Singhal v. Union of India, (2015) 5 S.C.C. 1, ¶ 96 (India
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, arts. 5–7, 2023 O.J. (L 191) 1, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1543.
European Commission, EU-US Announcement on Resumption of Negotiations for an EU-US Agreement to Facilitate Access to Electronic Evidence (Mar. 2, 2023), https://commission.europa.eu/news/eu-us-announcement-resumption-negotiations-eu-us-agreement-facilitate-access-electronic-evidence-2023-03-02_en.
Carnegie India, Cross-Border Data Access for Law Enforcement: What Are India’s Strategic Options? 10 (Nov. 23, 2020), https://carnegieindia.org/2020/11/23/cross-border-data-access-for-law-enforcement-what-are-india-s-strategic-options-pub-83197.
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, art. 18, 2023 O.J. (L 191) 1, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1543.
Regulation (EU) 2023/1543 of the European Parliament and of the Council of 12 July 2023 on European Production Orders and European Preservation Orders for Electronic Evidence in Criminal Proceedings, art. 21, 2023 O.J. (L 191) 1, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1543.
X Tells Delhi HC It Cannot Be Compelled to Join Centre’s SAHYOG Portal, The Hindu (Feb. 25, 2025), https://www.thehindu.com/sci-tech/technology/x-tells-delhi-hc-it-cannot-be-compelled-to-join-centres-sahyog-portal/article69374182.ece.
Justice Srikrishna Committee, A Free and Fair Digital Economy: Protecting Privacy, Empowering Indians 85 (2018), https://prsindia.org/policy/report-summaries/free-and-fair-digital-economy.
European Judicial Network, Homepage, https://www.ejn-crimjust.europa.eu/ (last visited Apr. 6, 2025).
Ministry of Home Affairs, Status of Cyber Crime Investigation and Prosecution in India 15 (2020) (on file with the Government of India), https://www.mha.gov.in/MHA1/Par2017/pdfs/par2021-pdfs/rs-24032021/3266.pdf.
National e-Governance Division, Online Capacity Building Programme on Cyber Law, Crime Investigation and Digital Forensics, https://negd.gov.in/online-capacity-building-programme-on-cyber-law-crime-investigation-and-digital-forensics-through-lms (last visited Apr. 6, 2025).
Press Information Bureau, Cyber Crime Prevention against Women and Children Scheme, Press Release (Aug. 19, 2022), https://pib.gov.in/PressReleasePage.aspx?PRID=1845321.
Convention on Cybercrime, Nov. 23, 2001, 185 C.E.T.S. 1,
Cyber Defence Centre of Excellence, Battling Cybercrime Through the New Additional Protocol to the Budapest Convention (2021), https://ccdcoe.org/library/publications/battling-cybercrime-through-the-new-additional-protocol-to-the-budapest-convention/.