Digital forensics in cybercrime investigation: a comparative legal and institutional analysis of the United States and India

Digital forensics has become indispensable to cybercrime investigations, yet the reliability and admissibility of digital evidence depend on legal rules, institutional capacity, and procedural safeguards as well as technical competence. This study conducts a qualitative comparative doctrinal and institutional analysis of digital forensics in the United States and India. It examines legislation, judicial decisions, evidentiary rules, official institutional materials, and relevant scholarly literature through five analytical dimensions: legal authority, procedural safeguards, institutional capacity, cross-border cooperation, and fundamental rights. The analysis identifies a specific divergence in the procedural role of electronic-evidence certification. In the United States, Federal Rules of Evidence 901 and 902(13)–(14) provide a plural authentication framework in which certification operates as an optional self-authentication pathway for qualifying electronic evidence, while Rule 702 separately governs expert testimony. In India, Section 63 of the Bharatiya Sakshya Adhiniyam 2023 integrates certification more directly into the statutory admissibility pathway for qualifying computer output. Both jurisdictions face challenges involving cloud-based evidence, encryption, institutional disparities, cross-border access, privacy, and due process. The study argues that effective digital forensic governance requires coordination among legal authorization, technical integrity, institutional competence, judicial oversight, and international cooperation. It recommends modernized evidentiary rules, standardized forensic procedures, professional training, stronger institutional capacity, and rights-protective mechanisms for obtaining and using electronic evidence.