India's New Criminal Laws (BNS, BNSS, BSA): Impact on Foreign Businesses

The Biggest Overhaul of Indian Criminal Law in 164 Years

On July 1, 2024, India completed the most significant overhaul of its criminal justice system since the British Raj. Three new laws replaced the foundational statutes that had governed criminal law in India since the 1860s and 1870s:

For foreign companies operating in India through subsidiaries, branch offices, or contractual arrangements, these changes are not merely academic. The new laws introduce 21 new criminal offences, significantly expand provisions for digital evidence, create new organized crime categories that can capture corporate misconduct, and establish mandatory timelines for trials and investigations. Understanding these changes is essential for compliance planning, internal investigations, and managing criminal exposure in India.

BNS: New Substantive Criminal Offences Affecting Business

The Bharatiya Nyaya Sanhita comprises 358 sections (compared to the IPC's 511 sections), reflecting a consolidation of provisions while adding entirely new offence categories. For foreign businesses, the following changes are most significant.

Section 318: Cheating and Corporate Fraud (Replaces IPC Section 420)

Section 318 of the BNS consolidates multiple IPC provisions on cheating (Sections 415, 417, 418, and the famous "420") into a single comprehensive provision. The offence of cheating — deceiving a person and fraudulently or dishonestly inducing them to deliver property or do something they would not otherwise do — carries a punishment of up to 7 years imprisonment and fine.

For foreign companies, this provision is relevant in several contexts:

• Fraudulent vendors or partners: If an Indian counterparty induces your company to enter a transaction through misrepresentation, they are liable under Section 318
• Employee fraud: Indian employees who misappropriate company funds or make false claims to obtain benefits can be prosecuted under this section
• Investment fraud: If your company is induced to make an FDI investment based on fraudulent representations about the target company's financials, Section 318 provides criminal remedies beyond civil litigation

Section 316: Criminal Breach of Trust (Enhanced from IPC Section 406)

Section 316 criminalizes the dishonest misappropriation or conversion of property entrusted to a person. The punishment structure is tiered based on the relationship:

This provision is particularly important for foreign companies whose Indian subsidiaries entrust funds, inventory, or assets to Indian employees, agents, or partners. The criminal breach of trust remedy provides enforcement teeth beyond contractual remedies, especially when dealing with defaulting Indian partners in joint ventures.

Section 111: Organized Crime — A New and Powerful Provision

Section 111 of the BNS introduces a comprehensive definition of organized crime that did not exist in the IPC. This is one of 21 entirely new offences added by the BNS. Organized crime is defined as any continuing unlawful activity carried out individually or jointly, as a member of or on behalf of an organized crime syndicate, by use of violence, threat of violence, intimidation, coercion, corruption, or any other unlawful means to obtain direct or indirect material benefit, including a financial benefit.

Critically, the definition of "economic offence" within Section 111 includes:

• Criminal breach of trust
• Forgery
• Counterfeiting of currency notes and government stamps
• Hawala transactions
• Mass-marketing fraud

The punishment for organized crime is severe — imprisonment for not less than 5 years (extendable to life imprisonment) and fine of not less than INR 5 lakh. For foreign companies, the concern is not that they would be directly charged with organized crime, but that their Indian counterparties, vendors, or even employees could be. The broader reach of Section 111 means that investigations into organized economic crime may sweep in foreign companies as witnesses or co-accused if their business relationships are connected to the underlying activity.

Section 61: Criminal Conspiracy (Consolidated from IPC Sections 120A and 120B)

The BNS consolidates criminal conspiracy provisions into Section 61, which retains the essential elements of the IPC provisions but links them to the new organized crime framework. An agreement between two or more persons to commit an illegal act constitutes criminal conspiracy. For foreign businesses, the key risk is vicarious exposure — if an Indian employee or agent enters into a conspiracy to commit fraud or bribery, the foreign parent company may face investigation under Section 61 if it is alleged that the company benefited from or was aware of the conspiracy.

BNSS: Procedural Changes That Affect Foreign Business Operations

The Bharatiya Nagarik Suraksha Sanhita increases the old CrPC's 484 sections to 531 sections, introducing substantial procedural modernization. For foreign businesses, the most impactful changes relate to digital proceedings, mandatory timelines, and investigation procedures.

Digital and Electronic Proceedings

The BNSS represents a fundamental shift toward technology-enabled criminal proceedings:

• E-FIR filing: First Information Reports can now be filed electronically through the Crime and Criminal Tracking Network Systems (CCTNS), allowing complaints in multiple languages without visiting a police station. This is significant for foreign companies that may need to report crimes committed against their Indian operations
• Electronic summons: Summons and warrants can be served through electronic communication, reducing delays. Foreign directors of Indian companies should ensure their contact details are current with the MCA to receive electronic communications
• Video conferencing for trials: Trials, inquiries, appeals, and related proceedings may be conducted via electronic mode. This is a major benefit for foreign directors and witnesses who can now participate in proceedings without traveling to India for every hearing
• Audio-video recording of searches: BNSS mandates audio-video recording of search and seizure operations. This provides transparency and reduces the risk of fabricated evidence — a historical concern for foreign companies facing investigation in India

Mandatory Trial Timelines

The BNSS introduces strict timelines designed to accelerate the criminal justice process:

While these timelines are aspirational and courts may not always meet them due to caseload pressures, they represent a significant improvement over the previous regime where trials could stretch for 5-15 years. For foreign directors and officers facing criminal proceedings in India, the reduced timeline means faster resolution — whether through acquittal, conviction, or settlement.

Enhanced Investigation Powers

The BNSS expands investigation powers in ways that directly affect businesses:

• Forensic investigation for serious offences: For offences punishable with 7+ years imprisonment, forensic experts must visit the crime scene and collect forensic evidence. This professionalizes investigations and reduces reliance on confessions
• Electronic evidence seizure: Investigating officers have explicit authority to seize electronic devices, clone hard drives, and access cloud-stored data. Foreign companies should ensure their Indian subsidiaries have clear data retention and preservation policies
• Witness protection: BNSS includes enhanced witness protection provisions, which may encourage whistleblowers within Indian operations to report corporate misconduct

BSA: The New Evidence Framework and Digital Records

The Bharatiya Sakshya Adhiniyam replaces the Indian Evidence Act, 1872, with a modernized framework that gives comprehensive legal recognition to digital evidence. For foreign businesses, this has profound implications for compliance, internal investigations, and litigation strategy.

Electronic Records as Primary Evidence

Under the BSA, electronic records — including emails, chat logs, social media posts, CCTV footage, GPS data, cloud exports, and EXIF metadata — are recognized as primary evidence, not merely secondary or derivative evidence. This is a fundamental shift from the old Evidence Act, where electronic records occupied an uncertain evidentiary status.

Section 57 of the BSA provides comprehensive guidelines for admissibility of electronic evidence, including:

• Authentication requirements: Electronic records must be accompanied by a certificate from a person with knowledge of the computer system, confirming the record's integrity
• Chain of custody: The BSA establishes clear chain-of-custody requirements for digital evidence, elevating what was previously best practice to a legal mandate
• Hash values and metadata: Courts can now rely on hash values, metadata, and digital forensic analysis to establish the authenticity and integrity of electronic records

Implications for Foreign Companies

• Email and communication policies: All electronic communications of your Indian subsidiary are potentially admissible as primary evidence. Implement clear email retention policies and ensure employees understand that business communications can be used in court proceedings
• Data preservation obligations: When anticipating any legal dispute or regulatory investigation in India, implement a litigation hold on all relevant electronic data. Under the BSA framework, failure to preserve electronic evidence when litigation is reasonably anticipated can result in adverse inference — the court may presume the destroyed evidence was unfavorable to your case
• Cloud-stored data: The BSA recognizes cloud-stored data as admissible evidence. If your Indian subsidiary uses cloud-based ERP, CRM, or accounting systems hosted outside India, this data may be requested by Indian authorities during investigations
• WhatsApp and social media: In India, WhatsApp is commonly used for business communications. The BSA explicitly recognizes social media content as admissible evidence. Foreign companies should implement policies governing business use of messaging platforms and ensure critical business discussions are documented through official channels

White-Collar Crime Enforcement Under the New Framework

The new criminal laws have significantly strengthened India's white-collar crime enforcement architecture. According to National Crime Records Bureau (NCRB) data, reported white-collar crime cases increased 37% between 2020 and 2024. The new laws provide law enforcement with enhanced tools and stricter penalties.

Key Changes for White-Collar Crime Prosecution

• Organized economic crime (BNS Section 111): Financial crimes that were previously prosecuted as standalone offences can now be charged as organized crime if they involve a pattern of continuing unlawful activity, carrying significantly harsher penalties
• Enhanced digital investigation: The BSA's recognition of electronic evidence combined with the BNSS's expanded seizure powers means that digital financial records, emails, and electronic communications are now the primary pathway for white-collar crime prosecution
• Faster trial timelines: BNSS's mandatory trial timelines (1-year target for regular trials) mean that white-collar crime cases should resolve faster than under the old CrPC, where trials routinely took 5-10 years
• Corporate liability framework: The BNS retains and strengthens provisions for corporate criminal liability. Where an offence is committed by a company, every person in charge of the company at the time of the offence can be prosecuted — similar to Section 141 of the Negotiable Instruments Act

Compliance Action Items for Foreign Companies

Foreign companies operating in India should take the following steps to align their compliance frameworks with the new criminal laws:

1. Update Internal Compliance Policies

• Revise your India compliance manual to reference BNS section numbers instead of IPC section numbers — all prior legal references are now obsolete
• Update your anti-bribery and corruption policies to reflect the BNS framework, particularly the organized crime provisions under Section 111
• Review your compliance calendar to incorporate BNSS timeline requirements

2. Implement Digital Evidence Readiness

• Establish clear data retention policies for your Indian subsidiary — emails, financial records, and electronic communications should be preserved in accordance with BSA requirements
• Implement litigation hold procedures that can be activated when any legal dispute or regulatory investigation is anticipated
• Ensure your IT systems can produce certified electronic records that meet BSA authentication requirements
• Train Indian management on the evidentiary implications of WhatsApp, email, and social media communications

3. Review Employment and Contractor Agreements

• Update employment contracts to include provisions about employee conduct under the new criminal laws
• Include specific clauses requiring employees to comply with the company's anti-fraud, anti-bribery, and data handling policies
• Ensure whistleblower protections are aligned with BNSS provisions on witness protection

4. Brief Your Board and Indian Directors

• Conduct a board-level briefing on the new criminal laws and their implications for director liability
• Ensure all Indian directors understand the enhanced investigation powers under BNSS — particularly electronic evidence seizure and mandatory forensic investigation
• Review board meeting compliance procedures and director indemnification provisions in light of the new framework

5. Update Dispute Resolution Clauses

• Review all commercial contracts with Indian counterparties to ensure dispute resolution clauses account for the BNSS procedural framework
• Consider including specific provisions about electronic evidence preservation and production obligations in commercial agreements
• Ensure alternative dispute resolution clauses are updated to reference BNSS provisions instead of CrPC

Data Protection and Privacy Implications

The new criminal laws intersect significantly with India's evolving data protection framework under the Digital Personal Data Protection (DPDP) Act, 2023. Foreign companies must navigate both regimes simultaneously.

Cross-Border Data in Criminal Investigations

Under the BNSS, investigating officers can now seize electronic devices and access cloud-stored data as part of criminal investigations. If your Indian subsidiary's data is stored on servers outside India — which is common for global ERP, CRM, and email systems — the BNSS provisions create potential conflicts with data localization requirements and cross-border data transfer restrictions. Foreign companies should establish clear protocols for responding to Indian law enforcement requests for data stored overseas, including legal review procedures and escalation paths to the parent company's legal team.

Employee Data in Criminal Proceedings

The BSA's recognition of electronic records as primary evidence means that employee communications — including internal emails, Slack messages, and video call recordings — can be subpoenaed and admitted in criminal proceedings. Foreign companies should include clear notices in their Indian employment contracts informing employees that their business communications may be disclosed in legal proceedings, and implement data retention policies that balance legal preservation obligations with data minimization principles under the DPDP Act.

Cybersecurity Incident Reporting

Under the BNS framework, cyber crimes carry enhanced penalties. Section 303 of the BNS addresses data theft and computer-related offences. Foreign companies must ensure their Indian operations have robust CERT-In cybersecurity incident reporting procedures — CERT-In mandates that cybersecurity incidents be reported within 6 hours of discovery. Failure to report can result in both regulatory penalties and criminal exposure under the BNS.

Transitional Issues and Pending Cases

The transition from the old laws to the new framework raises several practical questions for foreign companies with pending matters in India:

• Cases registered before July 1, 2024: Cases filed under the IPC, CrPC, and Evidence Act before July 1, 2024 continue to be governed by the old laws. No re-filing under BNS is required
• Investigations initiated before transition: Investigations that began under the old laws continue under the old procedural framework, but evidence collected after July 1, 2024 will be governed by BSA standards
• Contractual references to old laws: Contracts that reference IPC or CrPC sections remain valid — courts will apply the corresponding BNS/BNSS provisions
• Appeal of pre-transition judgments: Appeals from judgments under the old laws will be governed by BNSS procedural timelines

Key Takeaways

• Three new laws — BNS, BNSS, and BSA — replaced India's colonial-era criminal statutes on July 1, 2024, representing the most significant criminal law reform in 164 years. All prior IPC/CrPC references in your India compliance documents are now obsolete
• BNS Section 111 introduces organized crime as a new offence category with severe penalties (5 years to life imprisonment). The definition includes economic offences like criminal breach of trust and forgery, potentially exposing corporate misconduct to organized crime charges
• BNSS mandates digital proceedings including e-FIRs, electronic summons, video conferencing for trials, and audio-video recording of searches. Foreign directors can now participate in proceedings remotely, significantly reducing the travel burden of Indian criminal cases
• BSA recognizes electronic records as primary evidence, making emails, WhatsApp messages, cloud data, and social media content fully admissible. Foreign companies must implement robust data retention and preservation policies for their Indian operations
• Mandatory trial timelines under BNSS — 1 year for regular trials, 6 months for appeals — aim to end the decade-long criminal case durations that previously plagued foreign companies. While aspirational, these timelines provide a basis for seeking expedited hearings
• Immediate action required: Update compliance policies to reference BNS sections, implement digital evidence readiness, brief Indian directors on enhanced liability, and review all FEMA and commercial contracts for outdated legal references