eDiscovery for Indian Litigation and Arbitration: A Practical Guide for Law Firms

eDiscovery in India is the process of identifying, preserving, collecting, reviewing and producing electronically stored information for a dispute, and in commercial litigation it is driven by a strict statutory disclosure duty. The Order XI that the Commercial Courts Act 2015 substitutes into the Code of Civil Procedure for commercial suits requires parties to disclose all relevant documents in their power, possession, control or custody, including those that hurt their case, and treats electronic records as documents. In arbitration the rules are more flexible, but the same practical discipline decides whether the right evidence is found and can be proved.

This guide is written for law firms and in-house counsel. It covers the legal framework, the stages of an eDiscovery exercise and the points at which Indian matters most often go wrong.

Does Indian law require eDiscovery?

India has no American-style pre-trial discovery, and no statute uses the word "eDiscovery". But two developments have made structured handling of electronic data unavoidable.

First, the Commercial Courts Act 2015 defines "document" in s. 2(1)(f) to include matter expressed or described by electronic means. Section 16 applies the Code of Civil Procedure, as amended by the Schedule to the Act, to commercial disputes of a specified value. Second, the Bharatiya Sakshya Adhiniyam 2023 treats electronic and digital records as documents and governs how they are proved.

What does Order XI require in commercial suits?

The substituted Order XI, titled "Disclosure, Discovery and Inspection of Documents in Suits before the Commercial Division of a High Court or a Commercial Court", front-loads the disclosure obligation.

The phrase "line of custody" is significant. For electronic records, a party that cannot explain where a file came from and who held it is at a disadvantage from the outset.

Electronic records under Order XI Rule 6

Rule 6 deals specifically with electronic records as defined in the IT Act 2000. Printouts are sufficient compliance for disclosure and inspection, and electronic copies may be furnished where the parties choose or where audio or video content is relied on. Where electronic records form part of the disclosure, the declaration on oath must specify:

• the parties to the record and how and by whom it was produced;
• the dates and times of preparation, storage, issuance or receipt;
• the source of the record and when it was printed;
• for email accounts, details of ownership, custody and access;
• for data on a computer resource, including external servers or cloud, details of ownership, custody and access;
• the deponent's knowledge of the contents and their correctness;
• whether the system was functioning properly; and
• that the printout or copy was taken from the original computer or computer resource.

The court may also direct further proof of any electronic record, including metadata or logs, before admitting it (r. 6(6)). These requirements are much easier to meet if the data was collected forensically in the first place.

How does document production work in arbitration?

Section 19(1) of the Arbitration and Conciliation Act 1996 provides that the arbitral tribunal is not bound by the Code of Civil Procedure 1908 or the Indian Evidence Act 1872 (now replaced by the Bharatiya Sakshya Adhiniyam). Document production is therefore set by the parties' agreement and the tribunal's procedural orders, typically through requests for specific documents or categories of documents.

Where a party or third party will not produce material voluntarily, s. 27(1) allows the tribunal, or a party with the tribunal's approval, to apply to the court for assistance in taking evidence. In practice, tribunals expect requests to be targeted, proportionate and supported by an explanation of relevance, so a party that already understands its own data is better placed to argue for, and resist, production.

What are the stages of an eDiscovery exercise?

The Electronic Discovery Reference Model (EDRM) is the most widely used framework. The current EDRM model shows analysis as a continuous activity across identification, preservation, collection, processing, review, production and presentation, with disposition at the end of the matter.

Preservation and the legal hold

A legal hold should go out as soon as a dispute is reasonably anticipated. It identifies the custodians, describes the categories of data, suspends deletion and asks IT to stop recycling relevant devices and accounts. Because Order XI requires disclosure of adverse documents and allows exemplary costs and adverse inferences, losing data through routine clean-up after a dispute was foreseeable is difficult to explain.

Collection that will stand up later

Collection is where most evidential risk is created. Forensic imaging of laptops and phones, and forensic export of cloud mailboxes and chat accounts, preserve metadata that screenshots and forwarded emails lose. Each collection should be hashed at the time it is made and logged in a chain of custody record. A hash value taken at acquisition is also what the BSA certificate form asks for. Our guide on preserving digital evidence in internal investigations covers these steps in more detail.

Processing and review

Large collections are reduced through de-duplication, date and custodian filters, email threading and search terms, before human review for relevance and privilege. Search terms should be tested against samples and refined, and the methodology recorded so that it can be explained if the other side challenges completeness. Privileged communications with counsel need to be identified and logged before anything is produced.

Production and proof

Producing data is not the same as proving it. In court, computer output relied on as evidence must generally be accompanied by a certificate under s. 63 of the Bharatiya Sakshya Adhiniyam, signed by the person in charge of the device and an expert, recording hash values. Our guide to s. 63 certificates and the section 63 certificate entry explain what the certificate must contain.

How does data protection affect eDiscovery?

The Digital Personal Data Protection Act 2023 and the DPDP Rules 2025 are being brought into force in phases, with most Data Fiduciary obligations applying from around 13 May 2027. Section 17(1)(a) of the Act exempts processing necessary for enforcing any legal right or claim from much of Chapter II, but the duty to maintain reasonable security safeguards continues to apply. Collected data should therefore be held securely, access-controlled and limited to what the matter needs. How the exemption applies to a specific collection needs specific legal advice.

What are the most common eDiscovery mistakes in Indian matters?

1. Late legal holds that allow mailboxes, chats or devices to be wiped.
2. Self-collection by custodians, who forward selected emails and lose metadata.
3. Ignoring messaging apps and personal devices that carry the real conversation.
4. No record of method, so search terms and filters cannot be defended.
5. Disclosure declarations drafted without checking custody facts, which then unravel in cross-examination.

How Spectra Forensics can help

Spectra Forensics has 19+ years of investigation experience across 1,250+ investigations and 10+ countries. Our eDiscovery for legal professionals and digital forensics and eDiscovery services cover data mapping, legal hold support, forensic collection from devices and cloud sources, processing, review support and documentation for Order XI declarations and s. 63 certificates. Our litigation support for legal firms assists counsel through disclosure and hearing. For background on the discipline, see our eDiscovery and digital forensics entries.

To discuss a matter, contact us.