Electronic evidence is essentially electronic data that can prove the facts of a case. In a narrow sense, electronic evidence refers to the electromagnetic records produced during the operation of a computer or computer system, which prove the facts of a case with the recorded contents [1]; Electronic evidence in a broad sense refers to all materials and their derivatives that exist in electronic form and can be used as evidence [2], including electronic information and its derivatives with evidential value or investigation function. Electronic information is data stored in electronic forms such as programs, texts, sounds and images. Derivatives are auxiliary materials for the formation of electronic information, including user names, passwords and printed materials recorded on paper. Therefore, electronic evidence can be expressed as all electronic data that prove the facts of a case by using electronic information technology.
Electronic evidence generally exists in computer systems, networks and other storage media. Electronic evidence in a computer system is generally manifested as system log files, backup media, intruder residues (such as programs, scripts, processes, memory impressions), exchange files, temporary files, unallocated space on the hard disk (some newly deleted files can be found here), system buffers, etc. In the network, electronic evidence is generally manifested as firewall logs, IDS logs, records and logs generated by other network tools, etc. Electronic evidence in other storage media is generally represented by removable storage, memory cards and various removable extended memory cards.
Second, the distinction between electronic evidence and confusing evidence types.
(A) and the difference between audio-visual materials
Before the revision of the new criminal procedure law, electronic evidence was classified as audio-visual materials by most theories. The theory that holds this view holds that audio-visual materials generally refer to visible and audible audio-visual products stored in non-paper media in electromagnetic or other forms. Electronic evidence also belongs to visual audio-visual products, and its existence form is similar to audio-visual materials, and it can also realize the value of electronic evidence itself. The definition of audio-visual materials is too broad, which makes new types of evidence easily classified as this kind of evidence without careful analysis. Some scholars point out that the name "audio-visual materials" is not rigorous because it is inconsistent with the classification standards of other types of evidence. Other types of evidence are named according to their existence and manifestations, while audio-visual materials are named according to people's feelings about such evidence. From the way people feel about evidence, almost all evidence can be called audio-visual materials, so some scholars think that audio-visual materials should be called' audio-visual materials' or' audio-visual evidence '[3]. "
There is a clear dividing line between audio-visual materials and electronic evidence, that is, audio-visual materials or audio-visual materials emphasize the use of sound and images to prove the facts of the case, and generally only include audio-visual materials, video materials and other audio-visual materials, but not all electronic forms of electronic evidence. Electronic evidence covers a wide range, such as the electronic chat records of the parties, which obviously cannot be classified as audio-visual materials that are usually supplemented by continuous audio-visual images.
(B) and the difference between documentary evidence
The confusion between electronic evidence and documentary evidence lies in that ordinary documentary evidence records a certain content on paper in the form of words and symbols, while electronic evidence records the same content on non-paper storage media in different ways (electromagnetic, optical and other physical ways). They have different recording methods and different recording media, but their functions are the same, that is, they can record exactly the same content; Moreover, electronic evidence usually uses its representative content to explain a certain problem of the case, and often needs to be printed on paper to form written materials such as computer printed materials before it can be used by people, so it has the characteristics of documentary evidence [4]. However, it is difficult to equate written form with written evidence. A written evidence can't draw a conclusion that it must be documentary evidence. For example, witness testimony, audio-visual materials, sometimes in written form, are obviously different from documentary evidence. The display mode of electronic evidence and the evidence attribute of electronic evidence itself are two categories, which cannot be confused.
Third, about the provisions of the evidence law.
Article 48 All materials that can prove the facts of a case are evidence.
Evidence includes:
(1) Physical evidence;
(2) Documentary evidence;
(3) Testimony of witnesses;
(4) the victim's statement;
(5) confessions and excuses of criminal suspects and defendants;
(6) Appraisal opinions;
(7) Records of the inquest, inspection, appraisal, investigation and experiment;
(8) Audio-visual materials and electronic data.
The evidence must be verified before it can be used as the basis for finalizing the case.
Article 49 The burden of proof that the defendant is guilty in a public prosecution case shall be borne by the people's procuratorate, and the burden of proof that the defendant is guilty in a private prosecution case shall be borne by the private prosecutor.
Article 50 Judges, prosecutors and investigators must, in accordance with legal procedures, collect all kinds of evidence that can prove the guilt or innocence of criminal suspects and defendants and the seriousness of crimes. It is strictly forbidden to extort confessions by torture and collect evidence by threats, enticements, deception or other illegal methods, and no one may be forced to prove his guilt. It is necessary to ensure that all citizens who are related to or know the case have the conditions to provide evidence objectively and fully, and they can be hired to assist in the investigation except in special circumstances.
Article 51 When a public security organ approves an arrest, a people's procuratorate brings a suit and a people's court makes a judgment, it must be faithful to the facts. Anyone who intentionally conceals the truth shall be investigated for responsibility.
Article 52 People's courts, people's procuratorates and public security organs have the right to collect and obtain evidence from relevant units and individuals. The relevant units and individuals shall truthfully provide evidence.
Evidence materials such as physical evidence, documentary evidence, audio-visual materials and electronic data collected by administrative organs in the process of administrative law enforcement and case investigation can be used as evidence in criminal proceedings.
Evidence involving state secrets, commercial secrets and personal privacy shall be kept confidential.
Whoever forges, conceals or destroys evidence, and whoever the evidence belongs to, will be investigated by law.
Article 53 In sentencing all cases, emphasis should be placed on evidence, investigation and study, and confessions should not be trusted. If only the defendant confesses and there is no other evidence, the defendant cannot be found guilty and punished; If there is no confession from the defendant and the evidence is true and sufficient, the defendant may be found guilty and punished.
If the evidence is true and sufficient, the following conditions shall be met:
(1) There is evidence to prove the fact of conviction and sentencing;
(2) The evidence on which the final decision is based has been verified through legal procedures;
(3) According to the evidence of the whole case, the ascertained facts have been beyond reasonable doubt.
Article 54 confessions of criminal suspects and defendants collected by illegal methods such as extorting confessions by torture, witness testimony and victim statements collected by illegal methods such as violence and threats shall be excluded. If the collection of material evidence and documentary evidence does not conform to legal procedures and may seriously affect judicial justice, it shall be corrected or a reasonable explanation shall be made; If it cannot be corrected or a reasonable explanation cannot be given, the evidence shall be excluded.
Evidence that should be excluded during investigation, examination, prosecution and trial shall be excluded according to law and shall not be used as the basis for prosecution opinions, prosecution decisions and judgments.
Article 55 If a people's procuratorate receives a report, charges, reports or finds that investigators have collected evidence by illegal means, it shall investigate and verify it. If the evidence collected by illegal means is true, it shall put forward rectification opinions; If a crime is constituted, criminal responsibility shall be investigated according to law.
Article 56 In the course of court hearing, if a judge thinks that there may be cases of collecting evidence by illegal means as stipulated in Article 54 of this Law, he shall conduct a court investigation on the legality of collecting evidence.
The parties, their defenders and agents ad litem have the right to apply to the people's court to exclude evidence collected by illegal means according to law. When applying for the exclusion of illegally collected evidence, relevant clues or materials shall be provided.
Article 57 The people's procuratorate shall prove the legality of evidence collection in the process of court investigation.
If the existing evidence materials cannot prove the legality of evidence collection, the people's procuratorate may request the people's court to notify the relevant investigators or other personnel to appear in court to explain the situation; The people's court may notify the relevant investigators or other personnel to appear in court to explain the situation. Relevant investigators or other personnel may also request to appear in court to explain the situation. Upon notification by the people's court, the relevant personnel shall appear in court.
Article 58 If the evidence collected by illegal means as stipulated in Article 54 of this Law is confirmed or cannot be ruled out after hearing, the relevant evidence shall be ruled out.
Article 59 The testimony of a witness must be cross-examined and verified by the public prosecutor, the victim, the defendant and the defender in court before it can be used as the basis for finalizing the case. If the court finds that a witness intentionally perjures or conceals criminal evidence, it shall deal with it according to law.
Article 60 Anyone who knows the circumstances of a case has the obligation to testify.
A person who is physically and mentally defective or young, can't distinguish right from wrong and can't express correctly, can't be a witness.
Article 61 People's courts, people's procuratorates and public security organs shall ensure the safety of witnesses and their near relatives.
Threatening, insulting, beating or retaliating against witnesses and their close relatives, which constitutes a crime, shall be investigated for criminal responsibility according to law; If it is not serious enough for criminal punishment, it shall be given administrative punishment for public security according to law.
Sixty-second cases of crimes endangering national security, terrorist activities, organized crimes of underworld nature, drug crimes, etc. The people's court, people's procuratorate and public security organ shall take one or more of the following protective measures if the personal safety of witnesses, expert witnesses, victims or their close relatives is threatened because they testify in litigation:
(1) Not disclosing personal information such as real name, address and work unit;
(2) Taking measures such as not revealing appearance and true voice to testify in court;
(3) Prohibiting specific personnel from contacting witnesses, expert witnesses, victims and their close relatives;
(four) to take special protective measures for individuals and houses;
Qingdao lawyer web page link
(5) Other necessary protective measures.
Witnesses, expert witnesses and victims who think that they or their close relatives are threatened by their personal safety because of testifying in court may request protection from the people's courts, people's procuratorates and public security organs.
People's courts, people's procuratorates and public security organs shall take protective measures according to law, and relevant units and individuals shall cooperate.