In our two previous blogs we looked at the history and purpose of e-Signing and the key supporting technical mechanisms. This blog focuses on the legal and regulatory considerations. We will guide you through the applicable European regulation before detailing the different types of e-Signature authenticity, as well as the admissibility of e-Signature from an international perspective. Lastly, we will share recommendations on how to manage the legal and regulatory aspects to be considered when implementing an e-Signature solution.
European Union law, under the "Electronic Identification, Authentication and trust Services regulation" (eIDAS), provides comprehensive governance of electronic signatures. eIDAS establishes the requirements for each type of electronic signature, as identified in the following section, and regulates the services for electronic certification. In addition, the regulation also refers to the so-called qualified Trust Service Providers (TSPs) that are entitled to issue the qualified digital certificates used to create qualified e-Signatures. While eIDAS is applicable throughout the entire EU, there are currently no comparable international regulations governing e-Signature globally.
In Switzerland, the Electronic Signature Act outlines similar requirements to those of eIDAS, allowing a supplementary type of e-Signature (regulated e-Signature) which is a compromise between advanced and qualified e-Signature (defined in the next section of this blog).
Certain types of electronic signatures have a higher corroborative value than handwritten signatures due to the enhanced ability to validate the signature’s authenticity. The eIDAS regulation states that “a qualified electronic signature shall have the equivalent legal effect of a handwritten signature”. In eIDAS we can identify three types of e-Signatures offering different levels of protection and security:
The admissibility of e-Signature greatly depends on the type of document as well as the jurisdiction. Each jurisdiction has a different approach to e-Signing. Nevertheless, most countries around the world recognise e-Signatures, with differences in the type(s) of accepted e-Signature.
In many countries if local laws provide strictly for a handwritten or wet ink signature, only QES, or the local equivalent of QES, possibly associated with a qualified time stamp/qualified certificate issued by a qualified TSP, will have the same legal value.
Moving to e-Signature raises several legal challenges at a global and local level. Although many countries accept the e-Signature, as explained above, the conditions of acceptance are hugely different between and even within countries. In addition, mutual recognition of e-Signatures across countries is very infrequent.
A comprehensive assessment of the situation is therefore essential to make sure that e-Signature is admissible, notably covering the following aspects:
Once defined, we recommend assessing the impact of different criteria as follows:
In this blog we established that the absence of international regulation globally on e-Signature can greatly complicate organisations’ efforts to roll-out e-Signature across multiple countries and regions. If you would like help navigating the local and international regulations applicable to your organisation, please reach out to our key contacts below.