[This Article has been authored by Nandana Shenoy, a 2nd Year B.A. LL.B. (Hons.) student at BITS Law School.]

Introduction

Grounded in the principle Nemon Tenetor Seipsum Accusare, the Right against Self-Incrimination, is a cornerstone principle of criminal law, upholding the presumption of innocence until proven guilty. Self-incrimination is the conveyance of information based upon personal knowledge of that person through oral or written statements. The Universal Declaration of Human Rights and the International Covenant on Civil and Political Rights, under Article 14(3)(g), protect the right of an accused to deny testifying against himself or admit guilt. Recognized as a fundamental right under Article 20(3) of the Indian Constitution which reads as “No person shall be compelled to be a witness against himself”, it is supplemented by Section 180 (2) of Bharatiya Nagarik Suraksha Sanhita (“BNSS”) stipulating that “No person is bound to answer truly any questions that would have a tendency to expose him to a criminal charge” meaning that a person has the right to keep silent to not incriminate himself.

Indian Jurisprudence Analysis

Indian jurisprudence vis-à-vis the right against self-incrimination has seen a gradual but marked shift from a utilitarian to a deontological approach for a stronger purposive appraisal of the right. 

One of the earliest interpretations was expounded in State of Bombay v. Kathi Kalu Oghad  which restricted the scope of testimonial compulsion and invented the testimonial-physical dichotomy providing that while verbal-testimonial evidence could not be extracted the police could compel: a) the production of documents from the personal knowledge of the accused and b) physical evidence such as fingerprints, handwriting, etc. which is not incriminatory ‘by itself. The basal utilitarian logic ranked the rights of the accused below the efficiency of the investigation and the reliability of evidence 

A departure towards deontological interpretation was first marked in Selvi v. State of Karnataka, which considered the issue of forcible administration of advanced scientific measures (narco-analysis, lie-detector test, brain-wave mapping) for evidence vis-à-vis self-incrimination. The Court struck down the involuntary subjection of these tests as it would amount to an intrusion into the mental faculties and bodily autonomy of the accused and an infringement of his privacy and personal liberty under Article 21. This deontological approach was solidified in Nandini Satpathy v. PL Dani, the case explicitly recognised the right to silence as part of the right against self-incrimination during custodial interrogations and linked it to personal dignity and liberty It is a question of fact; the onus is upon the accused to prove that while in custody, he was subjected to treatment which would merit the inference of compulsion.

Social Media and the Challenges to Self-Incrimination

The dominant test of the testimonial-physical divide,  which was curated in an era of physical documents and tangible objects, is dissolving and becoming increasingly anachronistic, it is ill-equipped to deal with the challenges of the modern digital landscape. The ubiquitousness of social media has introduced a new category of evidence which pokes holes at the binary. 

Further, K.S. Puttaswamy v. Union of India established that the right to privacy is a fundamental right under Article 21, with informational privacy as one of its core facets. Social media, which aggregates location, communication, associations, and personal expression, is precisely the kind of data that informational privacy is designed to protect. The intersection of self-incrimination and privacy in the digital context is not merely additive; the two rights are mutually reinforcing. Compelling access to social media data forces the accused to betray potentially incriminating information. The over-breadth of such compelled disclosure makes it simultaneously corrosive of the right to privacy and the right against self-incrimination.

The Evidentiary Character of Social Media Data 

It becomes analytically uneasy to place social media in the testimonial-physical divide. Proponents of the framework would argue that screenshots, GPS location history, online profiles, etc. exist independently of any forced act of communication and does not, by itself, require the accused to speak. While such evidence may superficially appear physical, social media has simultaneously evolved into a curated archive of one’s thoughts, beliefs, associations, relationships, movements, and private expressions, rather a digital extension of the mind. 

Unlike a fingerprint or a blood sample, social media content is generated through deliberate cognitive acts of expression. It is not, in any meaningful sense, evidence that is merely ‘physical and not incriminatory by itself’¹; it is the product of the accused’s personal knowledge and mental faculties, placing it squarely within the class of evidence the right against self-incrimination was designed to protect.

The Supreme Court has treated social media content as a form of ‘document’ admissible in evidence, through the lens of reliability rather than rights. In Anvar P.V. v. P.K. Basheer (2014), the Court held that electronic records, messages and social media content, constitute secondary evidence admissible only upon obeyance of the certification requirement under Section 65B of the erstwhile Indian Evidence Act. This position was fixated by Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal (2020), where the Court ruled that the Section 63(4) certificate is a  sine qua non for the admissibility of any electronic record, and in its absence, even WhatsApp messages or social media posts are inadmissible. This could create a statutory and structural self-incrimination problem: when the accused is the owner or operator of the device on which the original record is stored, he becomes handheld to produce the Section 65B certificate. This amounts to an implicit act of testimonial self-authentication where the accused’s knowledge is used to pit his fall. 

Pressing the accused to divulge such data through passwords, biometric unlocking, impugns both the act of production and the content accessed. Even if one considers the underlying content as pre-existing and ‘physical’, the act of forcing the accused to produce it is itself communicative and ‘testimonial’, it requires an inherent affirmation of the accused’s control over the data. This forms the premise of the ‘act of production’ doctrine, developed in the United States in Fisher v. United States, where the Apex Court regarded that the act of producing documents could be self-incriminating even where the documents themselves were not.

Passwords v. Biometrics – Compelled Access

The question of whether an accused can be compelled to disclose the password or biometric credential remains res integra before the Supreme Court.

This intersectional issue of digital device access and Article 20(3) was first formally addressed by Karnataka High Court in Virendra Khanna v. State of Karnataka (2021). The Court held that compelling an accused to disclose a password or biometric to unlock a mobile phone or email account did not violate the right against self-incrimination, reasoning that the mere provision of a password, unaccompanied by any oral or written statement, was not the kind of ‘testimonial compulsion’ that Article 20(3) was designed to prohibit. By analogising a password to a physical key, the Court placed it within the Oghad exception for physical evidence not incriminatory by itself.  A similar view was endorsed by the Kerala High Court in P. Gopalkrishnan v. State of Kerala, where the Court held that the prosecution is entitled to access the data on an accused’s mobile phone and it does violate Article 20(3). 

The contrary and constitutionally sounder position was taken by the Delhi Special CBI Court in CBI v. Mahesh Kumar Sharma (2022). The Court ruled rejected CBI’s application for access to the accused’s computer password, in recognizing that a password is elicited from the accused’s personal knowledge and forcibly extracting it would equal testimonial compulsion within the meaning of Article 20(3) and Section 161(2) CrPC. The Court expressly declared Virendra Khanna per incuriam, noting that the Karnataka High Court had failed to engage with the binding ratio of Selvi that any information which ‘furnishes a link in the chain of evidence’ attracts the bar of Article 20(3). Parallelly, the Court drew a crucial distinction: while passwords were testimonial, biometrics, fingerprints and facial recognition could be compelled under the Criminal Procedure (Identification) Act, 2022, which specifically authorizes the collection of biological samples and physical measurements from an accused. The Act conspicuously omits ‘passwords’ from its ambit, and this legislative gap reinforces the inference that password disclosure cannot be compelled. The question lingers: what of passwords that are biometric?

The Kerala and Karnataka ruling versus Delhi CBI courts reveals a judicial disagreement on this issue across High Courts, a disagreement that has serious consequences for the accused’s rights. Until binding clarity is provided by the Supreme Court, the right against self-incrimination in the digital context remains hostage to the accident of geography. 

Conclusion

While the recent judicial trend on Article 20(3) and Section 183 is inclined towards the accused, a simultaneous tilt towards investigation is caused by the admissibility of forensic and biometric evidence through the testimonial-physical divide, with the burden of proof shifted on the accused to prove compulsion in the custodial backdrop. The strength of that divide is dwindling in the digital age, social media may seem physical in nature, yet it is intimately reflective of one’s mind, and stands unprotected by any coherent doctrinal or legislative rule in India. A purposive and harmonious of Articles 20(3) and 21 informed by the deontological turn in Selvi and the informational privacy principle in Puttaswamy would provide a formidable constitutional ground to extend the right against self-incrimination to compelled digital disclosure. After all, in the digital age, passwords speak louder than words.