Legality of eSignatures in Zambia

Background

As technology advances, the need for modern methods of verifying document signatures continues to grow. This has increased the adoption of electronic signatures, which enable faster and more sustainable signing processes, reduce paper use, and accelerate transactions. This trend extends beyond Zambia and is evident worldwide. Businesses seeking to implement electronic signatures in Zambia must understand the applicable legal requirements.

It is crucial to select an electronic signature tool that aligns with Zambia's legal stipulations, especially the Electronic Communications and Transactions Act No.4 of 2021, for successful adoption.¹ This is to ascertain the legal validity of electronic signatures compared to their handwritten counterparts within Zambia. Despite the progressive acceptance, it's essential to recognize that some documents may still need a physical signature, and seeking legal consultation is advisable to navigate variable regional laws.²

The importance of security surrounding electronic signature platforms cannot be overstated. Services must integrate robust protection features such as data encryption, verification of signer identities, and audit trails to deter unauthorized access and guarantee document authenticity. For instance, BoldSign offers these imperative security features and complies with legal and security protocols.

Zambian enterprises must emphasize legal conformity, elevate security measures, and choose user-friendly platforms for integrating electronic signatures into their business frameworks. This approach boosts productivity and ensures the protection of their business exchanges.

Overview of the eSignature regulations in Zambia

The Electronic Communications and Transactions Act, 2021 regulates electronic signatures in Zambia. The Act provides that an electronic signature is not without legal force and effect merely on the grounds that it is in electronic form. Additionally, where the signature of a person is required by law, and that law does not specify the type of signature, the requirement in relation to a data message is met if an advanced electronic signature is used.³

Zambian regulation grants all individuals the freedom to execute contracts electronically, upon agreement by the contracting parties.⁴ Such agreements shall, however, not be denied admissibility in legal proceedings merely because they were completed electronically or if it is the best evidence that can be reasonably obtained, even if they are not in their original form, provided their content remains unchanged.⁵

The regulations categorize electronic signatures into:

1. Simple electronic signature
2. Digital signature
3. Advanced electronic signature

A simple electronic signature is any data, including a sound, symbol, or process, executed or adopted to identify a person and indicate that person's approval or intention regarding the information contained in a data message and which is attached to or logically associated with that data message.⁶

A digital signature is an electronic signature consisting of a transformation of an electronic record using an asymmetric cryptosystem and a hash function such that a person with the original untransformed electronic record and the signer’s public key can accurately determine whether the:⁷

• Transformation was created using the private key that corresponds to the signer's public key
• Initial electronic record has been altered since the transformation was made

An advanced electronic signature is a digital signature based on a certificate designed so that, together with a security procedure, it is possible to verify that the signature:⁸

• Uniquely linked to the signer
• Capable of identifying the signatories
• Created using means that the signer can keep their sole control
• Linked to the data it relates to so that any subsequent change to the data is detectable

Additionally, an advanced electronic signature is granted an original use in all transactions mandated to be signed by law.

Uniquely linked to the signer

An advanced electronic signature must be uniquely connected to the person using it. The signature must be created with methods only the signer can access, like a private key and confidential information, to verify their identity.

Use and incorporation remain in their sole control

The person using the advanced electronic signature must have sole control over the means of creating the signature. Typically, this requires managing a key pair or two-factor authentication, with the signer exclusively holding the private key to prevent signature forgery.

Ability to identify the signatories

The process used to create the signature must be capable of identifying the person signing. This may include using a biometric signature, a personal identification number (PIN), an email address, or a company registration number.

Track down any alterations made after signing

Preserving the authenticity of the signed document is essential. Modifications made to the document post-signature should be identifiable. This is commonly accomplished through an audit trail. Audit trails record the signer's IP address, timestamps of key signing events, and location, providing proof of identity, timing, and signature place.

Summary analysis

Assessment of evidentiary weight of electronic information

In an assessment of an electronic record, the following set of standards are taken into consideration:¹⁰

• Reliability of the generation and storage of information
• Reliability of the mode used to maintain the integrity of the record
• The manner in which the signatory was identified
• Any other factor necessary

Recognition of foreign certification authorities

The National Root Certification Authority (NRCA) has the power to recognize licenses, accreditations, or recognitions issued to foreign certification authorities by their own countries. This recognition is made official through a notice in the gazette and depends on conditions set by the NRCA. If a foreign certification authority falsely claims that its products or services are recognized by the NRCA, it commits a crime. If convicted, it could be fined up to 200,000 penalty units, imprisoned for up to two years, or both.¹¹

Scope and limitations of eSignature transactions

The use of electronic signatures is not legally recognized for all document types. Some transactions are appropriate for eSignatures, while others are not. Below is a brief analysis and a summary table of these transactions.

Documents that can be signed

Electronic signatures can be employed to affix signatures and provide countersignatures on a diverse array of documents, such as:

• Legal opinions
• Offer letters
• Memoranda and internal correspondences
• Non-disclosure agreements
• Purchase orders
• HR
• Procurement
• Employee onboarding, etc.

Unique considerations

An advanced electronic signature can be used in place of a handwritten signature in:¹²

• Certification of documents
• Oaths
• Notarizations
• Acknowledgments
• Any other legal requirement for a signature

Exemptions

In limiting the scope of use of electronic signatures, it’s prudent to exercise caution when dealing with the following transactions:

• Wills
• Declarations of trust
• Powers of attorney
• Conveyancing contracts

Summary scope

Electronic signature validity and authenticity

To ensure the authenticity of an eSignature, it is advisable to follow these best practices while also complying with all applicable legal requirements:

• Ascertain the identity of the signatory and, for transactions involving companies, verify that the individual is duly empowered to bind the corporation with their signature.
• Secure explicit agreement from the signatory, which may be incorporated in the contract or a separate consent form, recognizing their intention to use the specified electronic signature method for the document.
• Protect the document from any changes after the electronic signature has been affixed.
• Maintain a comprehensive log of the signing process, recording each step taken by the individual signing.

How does BoldSign help

The following elements of compliance available within BoldSign can be used to comply with Zambian eSignature laws:

• Secure and unique signing link: A secure and unique link to sign a document is sent directly to the signer's email address. This ensures that the document is only accessed by the intended signer and cannot be tampered with.
• Password protection: Senders can specify a password that needs to be entered before viewing and signing a document. This adds another layer of security to the signing process.
• Audit trail: The IP address of the signer and timestamps for all significant events in the signing process are recorded in an audit trail. This provides a record of who signed the document, when, and where.
• Digital signature: The final document is digitally signed with an AATL-compliant certificate. This ensures that the document cannot be tampered with without invalidating the signature.
• Consent: Signers are asked to confirm their intent to sign electronically and are informed that they could opt out. This ensures that the signer is aware of the implications of signing electronically and has given their consent.
• Custom terms: Get your signers to agree to a custom set of terms. This can be useful to ensure additional security and that the signer understands the terms of the document.
• QES compliance: BoldSign offers qualified electronic signatures (QES) that verify the signer's identity and help ensure documents are legally binding. These signatures provide the highest level of e-signature security, protecting important documents from unauthorized changes. For cross-border transactions involving Zambia, BoldSign helps users manage and sign documents electronically while supporting compliance with applicable Zambian legal requirements. 

Disclaimer: The information on this page is intended to help businesses understand the legal framework of electronic signatures for this particular country.

However, Syncfusion’s officers, directors, stockholders, affiliates, attorneys, accountants, employees, or agents cannot provide legal advice. You should consult your personal attorney regarding your specific legal questions. Laws and regulations are subject to frequent changes, and the information may not be current or accurate. To the maximum extent permitted by law, Syncfusion provides this material on an “as-is” basis. Syncfusion disclaims and makes no representation or warranty of any kind with respect to this material, express, implied, or statutory, including representations, guarantees, warranties of merchantability, fitness for a particular purpose, or accuracy.

Syncfusion makes no warranties of any kind, including but not limited to the information or the product, whether express, implied, statutory, or otherwise. To the maximum extent permitted by law, Syncfusion disclaims all conditions, representations, and warranties, whether express, implied, or statutory, with respect to this information, without limitation of any implied warranty of merchantability, fitness for a particular purpose, accuracy, or currentness of this information.

Neither Syncfusion nor its officers, directors, stockholders, employees, affiliates, attorneys, accountants, or agents shall be liable for indemnification, nor does this create an express or implied, contractual or statutory, equitable or otherwise, under this agreement. The officers, directors, stockholders, affiliates, attorneys, accountants, or agents will not have any liability in any form.