Can police make you unlock your phone?

Unlocking means gaining access to a phone’s protected contents. It may involve telling police a memorised password, unlocking the device personally, or allowing access through an authorised technical process. These actions are not necessarily treated alike under law.

Seizing means taking control of the physical device. Searching or examining means looking through data such as messages, photos, documents, or records. The article stresses that permission to seize does not automatically answer how investigators may examine the phone or bypass its security.

This distinction matters because each step affects different rights. A phone can be an object police hold, a store of existing evidence, and a window into private life. Nepal needs rules identifying the authority, safeguards, and procedures required for each step, including what happens when an owner refuses access.

A phone may contain private conversations, bank records, work emails, photos, documents, and information showing where someone has been. That makes it more than an ordinary physical object. It can hold a detailed record of a person’s communications, work, finances, movements, and personal activities.

The article uses these examples to explain why access matters. Investigators may believe the device contains evidence relevant to an alleged offence. Yet opening it may also expose information unrelated to that allegation. The existence of data on the phone does not by itself decide how police may reach it.

Privacy protections therefore matter alongside investigative powers. A lawful investigation may justify examining relevant digital material, but police should protect unrelated information and document each step. The proposed framework would address safeguards for personal data, evidence preservation, and the limits of access.

The article does not state a complete, settled rule for Nepalese police. It says police powers must be read with Article 28 of the Constitution and the Privacy Act, 2075 BS. A lawful investigation can justify examining relevant digital material, but the required procedure and permitted methods depend on what the law actually provides.

The key distinction is between four actions: seizing a device, examining it, demanding a password, and using technical tools to bypass security. Authority for one should not be assumed to cover the others. The article specifically asks which actions require legal authority and when a judge’s approval is necessary.

It describes this as an area needing clearer legislation, court rulings, or procedures. Nepal Police and relevant bodies should check current rules and create a standard operating procedure if compelled access is not adequately covered. Police should also explain the legal basis for demands.

Article 20(7) says a person accused of an offence cannot be compelled to be a witness against themselves. The article connects this protection to password demands because giving a password or unlocking a device may require the person’s own participation in obtaining evidence. That is different from simply collecting evidence already available.

Article 28 protects privacy, and the Privacy Act, 2075 BS, adds protections for personal information and communications, subject to other laws. These protections do not necessarily block every digital search. They require police powers, procedures, and methods to have a lawful basis and reasonable safeguards.

The result is not an automatic answer for every case. Whether a demand is compelled self-incrimination depends on what police ask, how they ask, and the circumstances. Police should explain their authority, while the affected person should be able to challenge the demand through available legal remedies.

The article asks what happens when investigators can obtain the same data through a legally authorised forensic process. That possibility matters because it separates access to existing digital evidence from compelling the owner to participate in opening the device. The article does not answer whether the alternative always defeats a password demand.

For example, police might hold a phone and use an authorised technical process to examine relevant data. Alternatively, they might ask the owner to disclose a memorised password or unlock the device. Those routes involve different actions by the owner. The legal treatment may therefore differ even if both routes reach similar information.

The answer must come from legislation and court rulings, not assumptions about police power. If compulsion is allowed in some situations, the law should specify safeguards. A clear framework should identify required authority, possible judicial approval, data protections, evidence preservation, and the consequences of refusal.

If police access a phone without proper authority or safeguards, the evidence may be challenged. The article says vague rules about compelled access to encrypted devices create inconsistent practice and lead to disputes over evidence. That can affect whether digital material holds up in court.

The risks are broader than losing one piece of evidence. A phone may contain communications, financial information, work material, location records, and personal data unrelated to the alleged offence. Without rules for limiting access, preserving evidence, and recording each step, investigators may expose or mishandle information they did not need.

The article does not predict one automatic legal consequence for every unauthorised search. Instead, it calls for a framework stating the required authority, judicial approval, safeguards, and consequences of refusal. Clear procedures would support good policing by making digital evidence more reliable and defensible in court.

Self-incrimination protection focuses on what the accused is compelled to do. Messages, photos, and documents stored on a phone existed before the investigation began. Collecting those materials is different from making the owner provide information or perform an action that enables police to reach them.

For example, telling police a memorised password or unlocking the phone personally requires the owner’s participation. The article contrasts this with access through a separately authorised technical process. Even when both methods reveal the same data, they may raise different legal questions because one depends on the accused’s own action.

This distinction matters under Article 20(7), which prevents compelling an accused person to be a witness against themselves. It does not automatically protect every refusal. The exact request and circumstances matter. Nepal’s laws and courts must clarify when compulsion is allowed and what safeguards apply.