Electronic Transactions Law (Saudi Arabia)

What the Electronic Transactions Law Recognises

The Saudi Electronic Transactions Law is the foundational statute that gives electronic contracts, signatures, and records the same legal force as their paper equivalents. Without this framework, the digital signatures used for everyday banking, the contracts concluded by email, and the electronic notarisations issued through Najiz would all sit in legal uncertainty.

The law was a deliberate alignment with international standards — particularly the UNCITRAL Model Law on Electronic Commerce — adapted to Saudi-specific requirements around evidence, identification, and certain categories of transactions where the law retains a preference for paper form. Understanding what electronic transactions Saudi law fully recognises, and which categories require additional care, is fundamental for any business operating digitally in the Kingdom.

The Statute — Royal Decree M/18

The Electronic Transactions Law was issued by Royal Decree No. M/18 of 1428H, with implementing regulations issued shortly thereafter and substantive amendments to expand scope as the digital economy grew. The Communications and Information Technology Commission (CITC) administers the framework, working alongside the Ministry of Commerce, the Saudi Central Bank, and the Ministry of Justice on sector-specific applications.

The framework operates alongside the Anti-Cyber Crime Law (Royal Decree M/17 of 1428H) and the Personal Data Protection Law (Royal Decree M/19 of 1443H) to create the legal infrastructure for the digital economy. Together they address electronic-transaction validity, prohibited cyber conduct, and personal-data treatment.

The Functional Equivalence Principle

The law's core operating principle is functional equivalence: an electronic instrument that performs the function of a paper instrument should have the same legal effect. The principle applies to four categories:

• Writing — an electronic record satisfies any legal requirement of writing
• Signature — an electronic signature satisfies any legal requirement of signature, provided defined reliability criteria are met
• Original — an electronic record can satisfy requirements of an original document where its integrity is preserved
• Retention — electronic retention satisfies any legal requirement to retain records, subject to accessibility and integrity standards

This equivalence is not unconditional. The electronic instrument must meet the law's reliability criteria — the signature must be linked to the signer in a way that detects subsequent alterations, the record must be retained in a form that preserves accuracy, and so on. Properly executed electronic instruments meet these criteria; poorly executed ones may fail.

Electronic Signatures and Their Tiers

Saudi law recognises three tiers of electronic signature, with progressively stronger legal effect.

Simple electronic signature — any electronic mark associated with a record (typed name, scanned signature, click-to-agree). The simple signature is admissible as evidence but its weight depends on the surrounding context — the parties' identification, the security of the transaction system, and any later challenge.

Advanced electronic signature — a signature that uniquely identifies the signer, is created using means under their sole control, and detects subsequent alteration. Advanced signatures carry stronger evidentiary effect; courts treat them as the equivalent of handwritten signatures absent specific challenge.

Qualified (certified) electronic signature — an advanced signature backed by a digital certificate issued by a CITC-licensed certification authority. Qualified signatures have the highest evidentiary effect and are required for certain transactions where the law specifically calls for certified signature (some government filings, certain regulated-industry transactions).

For most commercial transactions, advanced electronic signatures suffice. Banking, government, and certain regulated transactions require qualified signatures backed by certified digital identities.

Excluded Transaction Categories

The Electronic Transactions Law explicitly excludes certain categories from its functional-equivalence framework — these still require paper form, in-person execution, or other traditional methods:

• Personal-status transactions — marriage contracts, divorce documentation, custody agreements
• Wills and inheritance instruments — testamentary dispositions
• Certain real-estate transactions — particularly those requiring direct registration with the General Authority for Real Estate
• Transactions related to commercial papers — promissory notes, cheques (now electronically supported through Nafith)
• Transactions specifically excluded by other sector-specific laws

The exclusions reflect either the formality the law historically attached to these matters (personal-status, wills) or the integration with sector-specific registration systems that follow their own electronic-equivalence rules.

Cross-Border Electronic Transactions

Cross-border electronic transactions involving Saudi parties are increasingly common — international e-commerce, cross-border business contracts, employment agreements with overseas workers. The Electronic Transactions Law handles these through three principles.

Choice of law — parties can specify which jurisdiction's law governs their contract, subject to Saudi mandatory rules. An international supply contract can specify English law, French law, or any other choice, and the choice is respected for matters not covered by Saudi mandatory rules.

Place of formation — where no choice is specified, the contract is treated as formed in the place agreed by the parties, defaulting to the place of the offeror's business if not specified.

Recognition of foreign certificates — digital certificates issued by foreign certification authorities can be recognised in Saudi Arabia subject to equivalent standards and reciprocal recognition arrangements. This recognition was substantially expanded by the 2024 Apostille accession.

Evidentiary Treatment in Court

Electronic records are admissible in Saudi courts under the Evidence Law (Royal Decree M/43 of 1443H), with evidentiary weight depending on the record's reliability indicators. Courts assess:

The security of the system that generated the record (was it protected against tampering); the integrity of the record from creation through presentation (chain of custody, hash verification); the identification of the signer (how was the person linked to the signature); and the nature of the transaction (routine commercial vs disputed high-value).

Courts have developed substantial experience with electronic evidence since the law's enactment. Bank statements, email correspondence, WhatsApp messages, electronic contracts, and platform-generated records are all routinely admitted. The party offering the electronic evidence carries the initial burden of showing reliability; the opposing party can challenge through specific evidence of tampering or unreliability.

Frequently Asked Questions

Can I sign a Saudi contract from abroad using DocuSign or similar? Yes for most commercial contracts — international electronic-signature services produce signatures recognised under Saudi law's electronic-signature provisions. The reliability tier depends on the service's certification status and the transaction type. For matters requiring qualified electronic signatures, a CITC-licensed Saudi certification authority is needed.

Are click-to-agree terms enforceable? Yes — click-through agreements meet the simple-electronic-signature standard and are routinely enforced for consumer and business-to-business contracts. The enforceability depends on the user having actually had the opportunity to read the terms (not hidden behind unclear links) and having made an affirmative action to accept.

How do I prove an electronic record was not tampered with? Through the system's integrity controls (hash values, audit logs), the chain of custody from creation through presentation, and where necessary expert forensic testimony. Modern transaction systems typically generate the necessary records automatically; the challenge is proper preservation when a dispute arises.

Can a contract be partially electronic and partially paper? Yes — hybrid contracts are common. A master agreement may be executed on paper while purchase orders are issued electronically; an electronic contract may be amended by a paper supplemental. Each instrument is evaluated for its own form requirements.

When You Need Counsel

Most routine electronic transactions do not require legal counsel — the standard infrastructure (Najiz, Absher, bank platforms, established e-commerce services) is designed to produce legally compliant transactions automatically. Counsel becomes valuable in three scenarios.

Drafting electronic contracting infrastructure. Businesses building their own electronic contracting workflows — for click-through terms, electronic procurement, e-signature platforms — benefit from counsel reviewing the framework for compliance with the Electronic Transactions Law's reliability criteria.

Cross-border electronic transactions. Where the contract crosses Saudi borders and choice-of-law questions arise, counsel coordinates the Saudi requirements with the foreign-law framework to ensure enforceability in both jurisdictions.

Disputes about electronic records. When the authenticity or reliability of an electronic record is challenged in litigation, specialist counsel familiar with electronic-evidence handling and CITC certification frameworks produces materially better outcomes than generalist litigators.

For commercial-contracting work generally, see Commercial Legal Services. For the cybercrime framework that runs alongside electronic-transactions law, see the Anti-Cyber Crime Law explainer. For data-protection rules that govern personal data in electronic transactions, see the PDPL explainer.