Electronic Transactions Act

Section Commencement Section This Act shall come into force on a date appointed by the Minister by statutory instrument and different dates may be appointed for the commencement of different provisions.

Section Interpretation Section In this Act, unless the context otherwise requires— “ addressee ”, in respect of a data message , means a person who is intended by the person originating the data message to receive the data message , but not a person acting as an intermediary in respect of the data message ; “ advanced electronic signature ” means an electronic signature , which is— (a) uniquely linked to the signatory; (b) reliably capable of identifying the signatory; (c) created using secure signature creation device that the signatory can maintain under his sole control; and (d) linked to the data to which it relates in such a manner that any subsequent change of the data or the connections between the data and signature are detectable. “ automated transaction ” means an electronic transaction conducted or performed, in whole or in part, by means of a data message in which the conduct or data messages of one or both parties is not reviewed by a natural person in the ordinary course of the natural person ’s business or employment; “ computer ” means electronic, magnetic, optical, electrochemical, or other data processing device or a group of such interconnected or related devices...

Section Application Section This Act does not apply to the list of documents specified in Schedule 2. Nothing in this Act shall limit the operation of a law which expressly authorises, prohibits or regulates the use of electronic documents.

Section Object of the Act Section The object of this Act is to provide a legal and regulatory framework to— enable and facilitate electronic communication and transactions; remove and eliminate the legal and operational barriers to electronic transactions; promote technology neutrality in applying legislation to electronic communications and transactions; provide legal certainty and public confidence in the use of electronic communications and transactions; promote e-Government services through electronic communications and transactions with the Government, public and statutory bodies; ensure that electronic transactions in Uganda conform to the best practices by international standards; encourage investment and innovation in information communications and technology to promote electronic transactions; develops a safe, secure and effective environment for the consumer , business and the Government to conduct and use electronic transactions; promote the development of electronic transactions that are responsive to the needs of users and consumers; and foster economic and social prosperity.

Section Production of document or information Section For purposes of section 5 (3), a requirement to produce a document or information is fulfilled if a person produces the document or information in electronic form if— For the purposes of subsection (1), the authenticity of the information contained in a document is maintained if the information has remained complete and unaltered, except for— considering all the relevant circumstances at the time that the data message was sent, the method of generating the electronic form of that document provided a reliable means of assuring the maintenance of the integrity of the information contained in that document; and at the time the data message was sent, it was reasonable to expect that the information contained in the data message would be readily accessible so as to be usable for subsequent reference. the addition of an endorsement; or an immaterial change, which arises in the normal course of communication, storage or display.

Section Notarisation, acknowledgement and certification Section A requirement for a signature, statement or document to be notarised, acknowledged, verified or made under oath, is fulfilled if an advanced or secure electronic signature of a person authorised by law to sign or notarise the document is attached, incorporated or is logically associated with the electronic record . Where a person is required or permitted to provide a certified copy of a document which is in electronic form, the requirement is fulfilled if the person provides a printout certified to be a true copy of the document or information . Where a person is required or permitted to provide a certified copy of a document and the document exists in paper or other physical form, that requirement is fulfilled if an electronic copy of the document is certified to be a true copy of the document and the certification is confirmed with an advanced electronic signature .

Section Other requirements Section A requirement for multiple copies of a document to be submitted to a person at the same time is fulfilled by submitting a single data message which is capable of being reproduced by the person to whom the data message is submitted. Where a document is required to be sealed and the law does not prescribe the method or form in which it is to be the sealed, the document may be sealed by electronic means. For purposes of subsection (2) a document is sealed by electronic means if the document includes the advanced electronic signature of the person authorised to seal the document. Where a person is required or permitted to send a document or information by registered or certified mail, that requirement is fulfilled if an electronic copy of the document or information is sent to an authorised service provider and the document, is registered by the service provider and sent to the electronic address provided by the sender provided that such reproduction does not affect the integrity of the document.

Section Automated transactions Section In an automated transaction — A contract shall not be formed under subsection (1) where a person interacts directly with the electronic agent of another party and the electronic agent makes a material error when creating a data message unless— a contract may be formed where an electronic agent performs an action required by law in order to form a contract; or a contract may be formed by a party to the transaction using an electronic agent to enter into the contract. A party using an electronic agent to enter into a contract shall, subject to subsection (3), be bound by the terms of the contract irrespective of whether the party reviewed the actions of the electronic agent or the terms of the contract. A party interacting with an electronic agent to form a contract is not bound by the terms of the contract unless the terms are capable of being reviewed by a person representing that party before the formation of the contract. the other party notifies the natural person of the error as soon as practicable after he or she has learnt of the error; the electronic agent provides the natural person with an opportunity to prevent or correct the error;...

Section Formation and validity of a contract Section A contract shall not be denied legal effect merely because it is concluded partly or wholly by means of a data message . A contract by means of a data message is concluded at the time when and the place where acceptance of the offer is received by the person making the offer.

Section Time of dispatch of data message Section Subject to an agreement to the contrary, where a data message enters a single information system outside the control of the person originating the data message or a person who sent the message on behalf of the person originating the message, the dispatch of the message occurs when the data message enters the information system . Where a data message successively enters two or more information systems outside the control of the person originating the data message , unless otherwise agreed between the person originating the message and the addressee , the dispatch of the message occurs when the data message enters the first of the information systems.

Section Time of receipt of data message Section Unless otherwise agreed between the person originating the data message and the addressee , the time of receipt of a data message is determined where the addressee designates an information system for receiving a data message the receipt of a data message occurs— at the time when the data message enters the designated information system ; or if the data message is sent to an information system of the addressee which is not the designated information system , at the time when the data message is received by the addressee . Where the addressee has not designated an information system , receipt occurs when the data message enters an information system of the addressee . Subsections (1) and (2) shall apply notwithstanding that the place where the information system is located is different from the place where the data message is received under section 17 .

Section Place of dispatch or receipt Section Unless otherwise agreed by the person originating a data message and the addressee , a data message is deemed to have been— For the purposes of subsection (1) the person originating the data message or the addressee — has more than one place of business— dispatched at the place of business of the originator ; and received at the place of business of the addressee . and one of the places can more closely be associated with the transaction, the place of business which can be closely associated with the transaction is presumed to be the place of business; but paragraph (a) does not apply, the principal place of business of the person originating the data message or the addressee is presumed to be the place of business; does not have a place of business, the place where the person originating the data message or the addressee ordinarily resides is presumed to be the place of business.

Section Expression of interest Section An expression of interest may be in the form of a data message and may be without an electronic signature as long as it is possible to infer the interest of the person from the data message .

Section Attributing a data message to person originating the message Section A data message is attributed to the person who originated the data message if the message is sent by— The addressee shall regard a data message as sent by the originator and to act on that assumption if— Subsection (2) shall not apply where— the person originating the message; an agent of the person originating the message or a person who has the authority to act on behalf of the person originating the data message ; or an information system which is programmed by the person originating the message or on behalf of the person originating the message to operate automatically unless it is proved that the information system did not execute the programming properly. in order to ascertain whether the data message is sent by the person originating the message, the addressee properly applies a method previously agreed to by the person originating the message for that purpose; the data message received by the addressee resulted from the action of a person whose relationship with the originator enabled the person to gain access to a method used by the originator to identify electronic records as records of the origi...

Section Acknowledgement of receipt of data message Section Where the originator specifies that the data message is conditional on receipt of an acknowledgement and the acknowledgement is not received by the originator within the time specified or agreed upon or, if no time has been specified or agreed upon, within a reasonable time, the originator may— Where the originator does not specify that the acknowledgement is to be given in a particular form or by a particular method, the acknowledgement may be given by— Subject to this section, an acknowledgement of receipt of a data message is not necessary to give legal effect to the data message . Where the originator specifies that the data message is conditional on receipt of the acknowledgement, the data message is taken as not sent, until the acknowledgement is received by the originator . give notice to the addressee stating that an acknowledgement has not been received and specify a reasonable time within which the acknowledgement should be received; and upon notice to the addressee , treat the data message as though it has never been sent or exercise any other rights that he or she may have in respect of the data message . any co...

Section Variation of conditions or requirements by agreement Section Sections 16 , 17 , 18 , 19 or 20 may be varied by an agreement made between the parties involved in generating, sending, storing or processing a data message.

Section Legal effect of electronic records Section Information incorporated into a contract that is not in the public domain is regarded as having been incorporated into a data message if the information is— Where— For purposes of subsection (3) the requirement for a document or information to be in writing is fulfilled if the document or information is— Information shall not be denied legal effect, validity or enforcement solely on the ground that it is wholly or partly in the form of a data message . referred to in a way that a reasonable person would have noticed the reference to the information or incorporation in the contract; and accessible in a form in which it may be read, stored and retrieved by the other party, whether electronically or as a computer printout as long as the information is reasonably capable of being reduced into electronic form by the party incorporating it. an act; a document; or information , in the form of a data message ; and accessible in a manner which is usable for subsequent reference.

Section Use of electronic signature Section Where a law requires a signature or provides for consequences where a document is not signed, the requirement is fulfilled if an electronic signature is used.

Section Authenticity of data message Section Where a law requires information to be presented or retained in its original form, the requirement is fulfilled by a data message if— For the purposes of subsection 1(a), the authenticity of a data message shall be assessed— the integrity of the information from the time when it was first generated in its final form as a data message or otherwise has passed assessment in terms of subsection (2); and that information is capable of being displayed or produced to the person to whom it is to be presented. by considering whether the information has remained complete and unaltered, except for the addition of an endorsement and any change which arises in the normal course of communication, storage or display; in light of the purpose for which the information was generated; and having regard to all other relevant circumstances.

Section Admissibility and evidential weight of a data message or an electronic record Section In legal proceedings, the rules of evidence shall not be applied so as to deny the admissibility of a data message or an electronic record — When assessing the evidential weight of a data message or an electronic record , the court shall have regard to— The authenticity of the electronic records system in which an electronic record is recorded or stored shall, in the absence of evidence to the contrary, be presumed where— merely on the ground that it is constituted by a data message or an electronic record ; if it is the best evidence that the person adducing the evidence could reasonably be expected to obtain; or merely on the ground that it is not in its original form. A person seeking to introduce a data message or an electronic record in legal proceeding has the burden of proving its authenticity by evidence capable of supporting a finding that the electronic record is what the person claims it to be. Subject to subsection (2), where the best evidence rule is applicable in respect of an electronic record , the rule is fulfilled upon proof of the authenticity of the electronic records s...

Section Retention of information or record Section Where a law requires that a document, record or information be retained, the requirement is fulfilled by retaining the document, record or information in electronic form if— Nothing in this section shall— the information contained in the electronic record remains accessible and can be used for subsequent reference; the electronic record is retained in the format in which it was originally generated, sent or received or in a format which can be demonstrated to accurately represent the information originally generated, sent or received; the information which is retained enables the identification of the origin and destination of an electronic record and the date and time when it was sent or received; and the consent of the department or ministry of the Government, or the statutory corporation, which has supervision over the requirement for retaining the record, has been obtained. The obligation to retain a document, record or information in accordance with subsection (1) (c) shall not extend to information generated solely for the purpose of enabling a document, record or information to be sent or received. Subsection (1) may be fulf...

Section Electronic filing and issuing of documents Section Where a law provides that a public body may— accept the filing of a document or requires that a document be created or retained; issue a permit, licence or an approval; or provide for the making of a payment, the public body may, accept the document to be filed, created or retained in the form of a data message; issue the permit, licence or approval in electronic form; or make or receive payment by electronic means.

Section Specific requirements by public body Section A public body may for the purposes of section 22 by notice in the Gazette, specify— the manner and format in which the data message shall be filed, created or retained; the manner and format in which the permit, licence or approval shall be issued; where the data message has to be signed, the type of electronic signature required; the manner and format in which the electronic signature shall be attached to or incorporated into the data message ; the criteria that shall be met by an authentication service provider used by the person filing the data message or that the authentication service provider shall be a preferred authentication service provider ; the appropriate control process and the procedure to ensure adequate integrity, security and confidentiality of a data messages or a payment; and any other requirements in respect of the data message or payment. For the purposes of subsection (1) (e) a relevant generic service provider shall be a preferred authentication service provider .

Section Information to be provided by suppliers or sellers Section A person offering goods or services for sale, hire or exchange through an electronic transaction shall provide to the consumers on the web site or electronic communication where the goods or services are offered, the following— A person offering goods or services for sale, hire or exchange through an electronic transaction shall also provide a consumer with an opportunity— Where a transaction is cancelled under subsection (3)— Subsection (3) does not apply to an electronic transaction — where the goods— the full name and legal status of the person ; the physical address and telephone number of the person ; the web site address or e-mail address of the person ; membership of any self-regulatory or accreditation bodies to which the person belongs or subscribes and the contact details of that body; any code of conduct to which that person subscribes and how the consumer may access that code of conduct electronically; in the case of a legal person , the registration number, names of directors and place of registration; the physical address where the person may be served with documents; a description of the main characte...

Section Cancelling electronic transaction after receipt of goods or services Section Subject to sub section (2), a consumer may cancel an electronic transaction and any related credit agreement for the supply of goods or services— within seven days after the date of receipt of the goods or services; or within seven days after the date of conclusion of the agreement. A consumer who returns goods after cancelling an electronic transaction under subsection (1) shall not be charged for the returning of the goods other than the direct cost of returning the goods Where payment for the goods or services has been effected before a consumer exercises the right to cancel the transaction under subsection (1), the consumer is entitled to a full refund of money paid within thirty days of the date of the cancellation. This section shall not be construed as prejudicing the rights of a consumer which are provided for in any other law.

Section Unsolicited goods, services or communications Section A person who sends an unsolicited commercial communication to a consumer , shall provide— it at no cost; the consumer with the option to cancel his or her subscription to the mailing list of that person at no cost. A person who contravenes subsection (1) commits an offence and is liable, on conviction to a fine not exceeding seventy two currency points or to imprisonment not exceeding three years or both. A person who sends an unsolicited commercial communication to a person who has advised the sender that he or she should not send the communication, commits an offence and is liable on conviction, to a fine not exceeding one hundred and twenty currency points or imprisonment not exceeding five years or both.

Section Performance of electronic transaction Section Where a person makes an order for goods or services by electronic means, unless otherwise agreed by the parties, the supplier shall execute the order within thirty days. Where the supplier fails to execute the order within thirty days or within the agreed period, the consumer may cancel the order after giving written notice of seven days. Where the supplier is not able to supply the goods or services, on the ground that the goods or services ordered are not available, he or she shall notify the consumer before the expiry of the agreed time and refund any payment made in respect of the goods or services within thirty days.

Section Invalidity of provisions excluding consumer rights Section A provision in an agreement, which excludes any rights provided for in this Part, is void.

Section Liability of a service provider Section A service provider shall not be subject to civil or criminal liability in respect of third-party material which is in the form of electronic records to which he or she merely provides access if the liability is founded on— This section shall not affect— the making, publication, dissemination or distribution of the material or a statement made in the material; or the infringement of any rights subsisting in or in relation to the material. an obligation in a contract; the obligation of a network service provider under a licencing or regulatory framework which is established by law; or an obligation which is imposed by law or a court to remove, block or deny access to any material. For the purposes of this section, provides access, in relation to third-party material, means providing the necessary technical means by which third-party material may be accessed and includes the automatic and temporary storage of the third-party material for the purpose of providing access.

Section Information location tools Section Where a service provider refers or links users to a data message containing an infringing data message or infringing activity, the service provider is not liable for damage incurred by the user if the service provider — does not have actual knowledge that the data message or an activity relating to the data message is infringing the rights of the user; is not aware of the facts or circumstances from which the infringing activity or the infringing nature of the data message is apparent; does not receive a financial benefit directly attributable to the infringing activity; or removes or disables access to the reference or link to the data message or activity within a reasonable time after being informed that the data message or the activity relating to the data message infringes the rights of the user.

Section Notification of infringing data message or activity Section A person who complains that a data message or an activity relating to the data message is unlawful shall notify the service provider or his or her designated agent in writing and the notification shall include— the full name and address of the person complaining; the written or electronic signature of the person complaining; the right that has allegedly been infringed; a description of the material or activity which is alleged to be the subject of infringing activity; the remedial action required to be taken by the service provider in respect of the complaint; telephone and electronic contact details of the person complaining; a declaration that the person complaining is acting in good faith; and a declaration that the information in the notification is correct to his or her knowledge. A person who knowingly makes a false statement on the notification in subsection(1) is liable to the service provider for the loss or damage suffered by the service provider .

Section Service provider not obliged to monitor data Section For the purposes of complying with this Part, a service provider is not obliged to— The Minister in consultation with the National Information Technology Authority—Uganda may by statutory instrument, prescribe the procedure for service providers to— monitor the data which the service provider transmits or stores; or actively seek for facts or circumstances indicating an unlawful activity, inform the competent public authorities of any alleged illegal activities undertaken or information provided by recipients of their service; and communicate information enabling the identification of a recipient of the service provided by the service provider , at the request of a competent authority

Section Territorial jurisdiction Section Subject to subsection (2), this Act shall have effect, in relation to any person , whatever his or her nationality or citizenship and whether he or she is outside or within Uganda. Where an offence under this Act, is committed by any person in any place outside Uganda, he or she may be dealt with as if the offence had been committed within Uganda.

Section Jurisdiction of courts Section A court presided over by the Chief Magistrate or Magistrate Grade 1 has jurisdiction to hear and determine all offences in this Act and, notwithstanding anything to the contrary in any written law, has power to impose the penalty or punishment in respect of any offence under this Act.

Section Regulations Section The Minister may, by statutory instrument make regulations for any— matter which is required to be prescribed; administrative or procedural matter which is necessary to give effect to this Act; or matter which is necessary and expedient to give effect to this Act.

Section Power of the Minister to amend Schedule Section The Minister in consultation with the National Information Technology Authority- Uganda may, by statutory instrument, with the approval of Cabinet amend the Schedules.