Treaties, laws and e-signatures
Electronic signature laws compared
Short answer
- EU law
- Regulation (EU) No 910/2014 (eIDAS), applies from 1 July 2016 1
- EU tiers
- Electronic, advanced and qualified electronic signature, plus electronic seals 1
- US federal law
- Electronic Signatures in Global and National Commerce Act, enacted 30 June 2000 2
- UK statute
- Electronic Communications Act 2000, section 7 3
- Canada federal tier
- Secure electronic signature, PIPEDA section 48 4
- India
- Information Technology Act 2000, sections 3, 3A and 5 5
- UN model law
- UNCITRAL Model Law on Electronic Signatures, adopted 5 July 2001 7
The shared starting point
The US ESIGN Act says that a signature, contract or other record relating to a transaction in or affecting interstate or foreign commerce may not be denied legal effect, validity or enforceability solely on the grounds that it is in electronic form 2. The EU eIDAS Regulation says an electronic signature shall not be denied legal effect or admissibility as evidence solely on the grounds that it is electronic or does not meet the requirements for qualified signatures 1.
Singapore's Electronic Transactions Act defines a signature as a method, electronic or otherwise, used to identify a person and to indicate that person's intention 6. That definition puts the focus on what a signature does, not on the medium.
The EU three-tier model
Regulation (EU) No 910/2014 was adopted on 23 July 2014 and applies from 1 July 2016, with some provisions applying earlier 1. It defines three levels of electronic signature and a separate electronic seal for legal persons 1.
| Tier | Definition | Legal effect |
|---|---|---|
| Electronic signature 1 | Data in electronic form attached to or logically associated with other electronic data and used by the signatory to sign 1 | Not to be denied legal effect or admissibility solely on the grounds that it is electronic 1 |
| Advanced electronic signature 1 | Uniquely linked to and capable of identifying the signatory, created with data under the signatory's sole control, linked so any later change is detectable 1 | Same general rule as an electronic signature 1 |
| Qualified electronic signature 1 | An advanced signature created by a qualified signature creation device and based on a qualified certificate 1 | Equivalent legal effect of a handwritten signature, recognised in all Member States 1 |
| Electronic seal 1 | Data used to show the origin and integrity of electronic data 1 | A qualified seal is presumed to show integrity and correct origin 1 |
The United States
ESIGN is Pub. L. 106-229, enacted on 30 June 2000, with a general effective date of 1 October 2000 2. It adds consumer protections. When a law requires information to be given to a consumer in writing, an electronic record meets that rule only if the consumer has affirmatively consented after receiving disclosures about the right to paper copies, the right to withdraw consent and the hardware and software needed 2.
ESIGN does not create signature tiers. The question is whether a record is valid as an electronic record, not which technology produced it 2.
The United Kingdom and Canada
Section 7 of the UK Electronic Communications Act 2000 makes an electronic signature, and its certification, admissible in evidence on questions of the authenticity or integrity of a communication or data 3. It defines an electronic signature as anything in electronic form linked to a communication or data that purports to be used by the individual creating it to sign. Parts of the section were substituted on 22 July 2016 by S.I. 2016/696 3.
Canada's federal Personal Information Protection and Electronic Documents Act lets the Governor in Council prescribe technologies or processes for a secure electronic signature 4. A technology can be prescribed only if it is proved that the signature is unique to the person, under the person's sole control, able to identify the person and able to show whether the document changed after signing 4.
India, Singapore and the UN model law
India's Information Technology Act 2000 lets a subscriber authenticate an electronic record with a digital signature based on an asymmetric crypto system and hash function, under section 3 5. Section 3A, inserted by the 2009 amending Act, adds electronic signatures and techniques considered reliable and specified in the Second Schedule 5. Under section 5, a legal requirement for a signature is deemed satisfied by an electronic signature affixed in the manner the Central Government prescribes 5.
Singapore's Electronic Transactions Act 2010, 2020 Revised Edition, has a separate category of secure electronic signature, defined by reference to section 18 6. Its First Schedule lists matters to which the writing and signature provisions do not apply 6.
Many national laws draw on UN work. The UNCITRAL Model Law on Electronic Signatures was adopted on 5 July 2001. UNCITRAL says it sets criteria of technical reliability for equivalence between electronic and handwritten signatures and takes a technology-neutral approach 7.
Common questions
Is an electronic signature legally binding?
In the US, a signature may not be denied legal effect solely on the grounds that it is electronic 2. The EU eIDAS Regulation has the same rule for legal effect and admissibility as evidence 1.
What is a qualified electronic signature?
Under eIDAS, an advanced electronic signature created by a qualified signature creation device and based on a qualified certificate. It has the equivalent legal effect of a handwritten signature 1.
What makes an electronic signature advanced under eIDAS?
It must be uniquely linked to the signatory, capable of identifying the signatory, created with data under the signatory's sole control and linked to the data so any later change is detectable 1.
Does ESIGN require consumer consent?
Yes, where a law requires information to be given to a consumer in writing. The consumer must affirmatively consent after receiving set disclosures 2.
What is a secure electronic signature in Canada?
A signature made with a technology or process prescribed under PIPEDA section 48, which must be unique to the person, under their sole control, able to identify them and able to show later changes 4.
Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@whosignedwhat.com.
Sources
- EUR-Lex: Regulation (EU) No 910/2014 on electronic identification and trust services for electronic transactions in the internal market (23 July 2014)
- Legal Information Institute: 15 U.S. Code 7001, General rule of validity
- legislation.gov.uk: Electronic Communications Act 2000, section 7
- Justice Laws Website: Personal Information Protection and Electronic Documents Act, section 48
- PRS Legislative Research: The Information Technology Act, 2000
- Singapore Statutes Online: Electronic Transactions Act 2010
- UNCITRAL: UNCITRAL Model Law on Electronic Signatures (2001)
Related
- What a signature attests to
A signature can mean agreement, authentication, certification of accuracy or a decision. How laws in the US, EU, UK and at the UN define each meaning.
- Notarisation and the apostille explained
What an apostille certifies under the 1961 Hague Convention, how it differs from legalisation and notarisation, and how the UK and US issue them.
- Company signing authority compared
Who may sign documents for a company under the UK Companies Act 2006 sections 43 and 44 and Delaware corporate law, and what a buyer may assume.
- Assent and enactment of legislation compared
Who signs a bill into law in the US, UK, Canada and Germany, what that signature attests to, and what happens if the head of state does not sign.