Are electronic signatures legal in Malaysia?

What does the Electronic Commerce Act 2006 require?

The Electronic Commerce Act applies to commercial transactions conducted electronically, including those by federal and state governments (section 2). Section 3 makes clear that nobody is obliged to use electronic messages without consent, and that consent may be inferred from conduct.

Section 9(1) sets out when an electronic signature satisfies a law requiring a signature:

• It is attached to or logically associated with the electronic message
• It adequately identifies the person and adequately indicates their approval of the information
• It is as reliable as is appropriate given the purpose and the circumstances in which the signature is required

Electronic signatures and digital signatures

Malaysia runs two regimes side by side. Section 9(2) of the Electronic Commerce Act says a signature is as reliable as appropriate if the means of creating it is linked to and under the control of the signer only, and any change to the signature or the document after signing is detectable. Section 9(3) keeps the Digital Signature Act 1997 in force for digital signatures.

Under the Digital Signature Act, a digital signature is created with a key pair and verified against a certificate issued by a licensed certification authority. Section 62 gives a digital signature that meets the Act's conditions the same legal effect as a handwritten signature. The Malaysian Communications and Multimedia Commission oversees the licensed certification authorities. So an ordinary electronic signature can be valid under section 9, but a licensed digital signature carries a clearer statutory footing.

What does the Schedule exclude?

The Electronic Commerce Act does not apply to four kinds of transaction or document, listed in its Schedule. Other statutes, such as the National Land Code for registrable land dealings, also prescribe their own forms and attestation, so a land transfer follows that process.

• Powers of attorney
• The creation of wills and codicils
• The creation of trusts
• Negotiable instruments

Evidence to keep

If a section 9 signature is challenged, the court will look at reliability: was the signing method linked to this person alone, and would a change have been detected? Keep evidence that answers both.

• The final signed PDF and proof it has not changed
• How each signer was identified and that only they could complete the step
• Timestamps, IP address and device for each signer
• Each signer's consent to sign electronically (section 3)

Where Sign PDF fits

Sign PDF gives you a section 9 electronic signature with the evidence that test asks for. Each signer confirms a six-digit code sent to their email and agrees to sign electronically; the certificate of completion lists IP address, approximate location, device and UTC times; and the PDF is sealed with a SHA-256 fingerprint, a hash-chained audit trail and an independent DigiCert timestamp, so changes after signing are detectable.

We are not a licensed certification authority under the Digital Signature Act and do not issue digital signature certificates. If a regulator, government portal or counterparty asks for a licensed digital signature, use a provider licensed in Malaysia. For NDAs, employment contracts, service agreements and purchase orders, Sign PDF fits; for powers of attorney, wills, trusts and negotiable instruments it does not. This page is general information, not legal advice; ask a Malaysian advocate and solicitor for property or regulated documents.