Can the police seize my company's laptops during an investigation?

Police and authorised investigators in Pakistan may seize laptops and electronic records when lawful investigative powers justify the action. Company ownership does not create an automatic exemption. The legal issues concern authority, statutory procedure, the scope of relevant material and preservation of evidence.

The Code of Criminal Procedure, 1898 provides search and seizure procedures. Cybercrime cases can engage the Prevention of Electronic Crimes Act, 2016 as amended in 2025. The business should verify the legal basis and protect relevant confidential information without interfering with a lawful investigation.

Identify the investigating authority

Request the case or inquiry reference, the officer's identification and the statutory power being used.

Different agencies have different jurisdictions. A general request from a police officer does not by itself establish authority to search every corporate server.

Record the names of officers, premises visited and relevant communications.

Search warrants and statutory exceptions

Some searches require judicial authority while others can be carried out under defined statutory conditions.

Ask to inspect the instrument relied upon and note the issuing authority, scope and date. Where an exception is asserted, record the legal explanation.

Do not obstruct a lawful search while challenging it; use competent legal procedures.

CrPC safeguards

The CrPC contains rules relevant to search, seizure, witnesses and custody of property.

Compliance must be assessed according to the particular search power. An incorrect inventory or defect in authorisation can become important later.

A company should not assume that the precise procedure for one offence necessarily governs every investigation.

Digital investigation under PECA

Allegations of unauthorised access, data copying or interference may engage PECA and its specialised investigative arrangements.

The 2025 amendments changed aspects of the institutional framework, making verification of the currently empowered agency important.

The company should preserve access logs and electronic evidence in its original form.

The device inventory

Prepare a list of each laptop, drive, server component and accessory taken. Record serial numbers and visible condition.

Ask for the seizure memo or receipt prescribed by law. Note the individuals present during collection.

A receipt lacking device identifiers can complicate later disputes about custody or return.

Forensic preservation

Electronic records can change when devices are used, copied or improperly stored.

A defensible forensic procedure should preserve provenance and an auditable chain of custody.

The business may request lawful preservation measures, including copies or imaging where feasible, without altering evidence.

Scope of relevant records

Devices may contain material relevant to the inquiry alongside private customer or employee data.

The authorised investigation should remain within its lawful power. A company can identify sensitive unrelated material and request appropriate safeguards.

Commercial confidentiality is not necessarily an absolute bar to valid investigative access.

Privileged advice

Communications with advocates may engage legal professional privilege under the Qanun-e-Shahadat Order, 1984.

Identify specific communications and the basis of privilege accurately. Copying a lawyer on a routine invoice does not automatically turn that invoice into privileged legal advice.

Where disputed, protection may need judicial determination.

Employee-owned devices

An employee's personal laptop may hold company work and unrelated private information.

Ownership of hardware and rights concerning the stored information are distinct. The employer should not assume control over every personal account merely because work files are present.

The investigative authority should identify the legal relevance of the device and preserve privacy safeguards consistent with the applicable statute.

Operational continuity

Seizure of a payroll server or finance computer may disrupt the business.

The company can ask whether a forensic image or lawful access to non-evidentiary records will preserve essential operations without compromising the investigation.

A valid evidentiary purpose can justify temporary custody, but continuing retention should still be supported by applicable law.

Return and custody of property

The actual owner may seek return, interim custody or other directions under relevant CrPC provisions.

Obtain corporate purchase documents, asset registers and evidence that the device is no longer reasonably required, where relevant.

A pending investigation does not necessarily give the company an unconditional right to immediate physical return.

Challenging an unlawful seizure

A criminal court or the High Court may offer an appropriate remedy depending on the statute, jurisdiction and stage.

The claimant should identify the exact lack of authority, procedural error or unlawful excess rather than make general objections to the inconvenience of investigation.

An effective challenge often relies on the warrant, seizure memo and record of the actual search.

Customer-data investigation example

A company alleges that a departing employee copied a private customer database. Investigators seek the former employee's assigned laptop and account access logs.

Preserving the laptop and relevant cloud audit records may be a lawful evidentiary step if statutory conditions are met.

An investigation must still distinguish copying from authorised use and consider how sensitive third-party records are handled.

Forged-invoice example

Officers investigate allegedly fabricated supplier invoices and request an accounts department laptop.

The device might contain relevant purchase documents, messages and metadata. The business should preserve matching bank and supplier records and identify privileged communications separately.

A company's denial of the allegation does not by itself eliminate all investigative powers.

A responsible company protocol

Assign a senior staff representative to communicate with the investigators and counsel.

Record what was taken, preserve duplicate business information lawfully and give truthful explanations.

Staff should not delete, conceal or modify evidence or interfere with officers executing lawful functions.

Limits of the company's consent

An officer might ask an employee informally to unlock unrelated personal accounts or provide unrestricted administrator credentials.

The company should establish what authority actually exists and who may lawfully consent on behalf of the relevant person or entity.

A response through legal counsel should protect the investigation's legitimate purpose while avoiding unnecessary disclosure.

Evidence later used in court

The prosecution must establish admissibility, authenticity and relevant legal proof under the Qanun-e-Shahadat framework and applicable electronic evidence law.

The defence may question chain of custody, integrity and the inference investigators draw from files.

Seizure alone does not prove that the laptop owner committed the charged offence.

Opinion and recommended course

Company electronics may be lawfully seized during a properly authorised investigation, but investigative powers are subject to jurisdiction, scope, procedure and evidentiary safeguards.

Verify the statutory basis, obtain an accurate inventory, preserve legal privilege and privacy, and use the competent court where a demonstrable defect or unjustified continued retention exists.

Principal authorities: Code of Criminal Procedure, 1898, relevant search, seizure and property-custody provisions; Prevention of Electronic Crimes Act, 2016 as amended in 2025; Qanun-e-Shahadat Order, 1984; Constitution of Pakistan, Articles 4, 10A and 14 as applicable.