Legality of eSignatures in Brunei

Background

Electronic signatures in transaction completion as an eco-friendly alternative to wet-ink signatures have been widely accepted worldwide, and the Republic of Brunei hasn’t been left behind.

It is crucial for those in Brunei to comprehend the critical factors involved in implementing electronic signatures. Selecting a service that adheres to local laws, especially the Electronic Transaction Act¹, is essential to ensure that electronic signatures carry the same legal weight as manual signatures within the nation. While electronic signatures are generally accepted, it is essential to note that some documents may still need a physical signature, and consulting legal experts is advisable due to possible differences in local laws.

The security of electronic signature platforms is a paramount consideration. Services need to implement protective security measures such as encryption, identity checks, and comprehensive audit logs to prevent unauthorized access and validate the authenticity of signed documents. For instance, BoldSign offers these vital security guarantees, meeting both legal and safety requirements.

For businesses in Brunei to effectively incorporate electronic signatures into their workflows, focusing on legal compliance, emphasizing security, and selecting user-friendly services are essential steps. This approach enables a seamless transition to electronic signatures, enhancing operational efficiency and protecting transactions.

Overview of the regulatory framework

The Electronic Transactions Act regulates the use of electronic signatures and transactions within the Republic of Brunei.²

The governing regulations in Brunei grant electronic signatures and transactions the same legal validity granted to manual signatures and transactions³ provided that such use was consented to by both parties⁴. These transactions completed electronically cannot be denied the evidentiary value solely on the grounds of being in electronic form.⁵

Where there exists a legal obligation or requirement for information to be in writing, an electronic record is deemed to meet that requirement if the electronic data is accessible and capable of retention for subsequent reference.⁶

In instances where a signature is mandated by law or where the absence of a signature determines specific outcomes, the use of an electronic signature is deemed compliant with such legal requirements. Moreover, the validity of an electronic signature can be established through various means. This includes the demonstration that there was a system in place that required an individual to perform an action, such as using a unique symbol or engaging in a security protocol that confirms their association with an electronic record, thereby facilitating the advancement of the related transaction.

The regulation categorizes electronic signatures into:

1. Standard electronic signature
2. Digital signature
3. Secure electronic signature

A standard electronic signature is any letters, characters, numbers, or other symbols in digital form attached to or logically associated with an electronic record and executed or adopted with the intention of authenticating or approving the electronic record.

A digital signature is an eSignature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person having the initial untransformed electronic record and the signer's public key can accurately determine

1. Whether the transformation was created using the private key that corresponds to the signer's public key and
2. Whether the initial electronic data has been altered since the signing.

Verify a digital signature, in relation to a given digital signature, record, and public key, means to determine accurately that

1. The digital signature was created using the private key corresponding to the public key listed in the certificate.
2. The record has not been altered since its digital signature was created.

A secure electronic signature is an eSignature that is:

1. Uniquely linked to the signer
2. Capable of identifying the signatories
3. Created using means which the signer can keep in his/her sole control
4. Linked to the data it relates to so that any subsequent change to the data is detectable.

Scope and limitations of eSignature transactions

The use of electronic signatures is not legally recognized for all document types. Some transactions are appropriate for eSignature, while others are not. Below is a brief analysis and a summary table of these transactions.

Documents that can be signed

Electronic signatures can be employed to affix signatures and provide countersignatures on a diverse array of documents, such as:

• Legal opinions
• Offer letters
• Public petitions
• Memoranda and internal correspondences
• Non-disclosure agreements
• Purchase orders
• H.R
• Procurement
• Employee onboarding
• End user agreements, etc.

Exemptions

1. Creation of any legal instrument under any written law relating to Islamic law.
2. Creation or execution of a will.
3. Negotiable instruments.
4. Creation, performance or enforcement of an indenture, declaration of trust or power of attorney with the exception of constructive and resulting trusts.
5. Conveyance of immovable property/transfer of any interest.
6. Documents of title relating to immovable property.

Summary list

To ensure the authenticity of an eSignature, it's advisable to follow these best practices in addition to complying with all applicable legal requirements:

1. Confirm the signer's identity and, in situations involving business dealings, verify that the individual is duly authorized to act on behalf of the company in affixing their signature.
2. Secure an explicit agreement from the individual signing, which may be incorporated in the contract itself or in a separate accord, to signify their intention to use the specified electronic signature for the document in question.
3. Safeguard the document to prevent any modifications after the signature is applied.
4. Keep an exhaustive log of the signing procedure, recording each step the signer performs.

How does BoldSign help?

The following elements of compliance available within BoldSign can be used to comply with the Republic of Brunei’s eSignature laws:

• Secure and unique signing link: A secure and unique link to sign a document is sent directly to the signer's email address. This ensures that the document is only accessed by the intended signer and cannot be tampered with.
• Password protection: Senders can specify a password that needs to be entered before viewing and signing a document. This adds another layer of security to the signing process.
• Audit trail: The IP address of the signer and timestamps for all significant events in the signing process are recorded in an audit trail. This provides a record of who signed the document, when, and where.
• Digital signature: The final document is digitally signed with an AATL-compliant certificate. This ensures that the document cannot be tampered with without invalidating the signature.
• Consent: Signers are asked to confirm their intent to sign electronically and informed that they could opt out. This ensures that the signer is aware of the implications of signing electronically and has given their consent.
• Custom terms: Get your signers to agree to a custom set of terms. This can be useful to ensure additional security or that the signer understands the terms of the document.

Disclaimer: The information on this page is intended to help businesses understand the legal framework of electronic signatures for this particular country.

However, Syncfusion’s officers, directors, stockholders, affiliates, attorneys, accountants, employees, or agents cannot provide legal advice. You should consult your personal attorney regarding your specific legal questions. Laws and regulations are subject to frequent changes, and the information may not be current or accurate. To the maximum extent permitted by law, Syncfusion provides this material on an “as-is” basis. Syncfusion disclaims and makes no representation or warranty of any kind with respect to this material, express, implied, or statutory, including representations, guarantees, warranties of merchantability, fitness for a particular purpose, or accuracy.

Syncfusion makes no warranties of any kind, including but not limited to the information or the product, whether express, implied, statutory, or otherwise. To the maximum extent permitted by law, Syncfusion disclaims all conditions, representations, and warranties, whether express, implied, or statutory, with respect to this information, without limitation of any implied warranty of merchantability, fitness for a particular purpose, accuracy, or currentness of this information.

Neither Syncfusion nor its officers, directors, stockholders, employees, affiliates, attorneys, accountants, or agents shall be liable for indemnification, nor does this create an express or implied, contractual or statutory, equitable or otherwise, under this agreement. The officers, directors, stockholders, affiliates, attorneys, accountants, or agents will not have any liability in any form.