The legal framework for contracts and e-contracts is comprehensive and synchronous. Vietnam promulgated the Law on Electronic Transactions No.51/2005/QH11 in 2005 based on the model law of the United Nations Commission on International Trade Law on e-commerce in 1996.

On that basis, the government has issued guiding legal documents, notably Decree No.130/2018/ND-CP detailing the implementation of the Law on Electronic Transactions 2005 on digital signatures and digital signature authentication services and Decree No.52/2013/ND-CP on e-commerce.

Luu Xuan Vinh, founder and managing partner at Asia Legal

Legal documents guiding the Law on Electronic Transactions 2005 in specialised fields such as accounting, finance, banking, and insurance have also been promulgated, which ensure the legal validity of e-contracts as well as the safety and integrity of the data in them.

The validity relies on the criteria prescribed in the Civil Code 2015, including that parties in the transaction must have legal personality or legal capacity in conformity with such transaction; must act voluntarily; and the form of the contract must be in accordance with the provisions of the law, without relying entirely on how the contract is entered into. In other words, the engagement of the contract under the form of a written, oral, or electronic means is not a decisive factor affecting the legal validity of such a contract.

In addition, many enterprises have been concerned over the signing and executing of e-contracts as it is not so familiar to them. However, electronic transactions occur every minute and every day in our life. Transactions on e-commerce platforms such as Lazada, Shopee, Tiki, and Grab are typical examples of electronic transactions.

Confidentiality is another concern for enterprises as information of electronic transactions is not only stored on the enterprise’s system but also backed up on through digital signature service providers for maintenance and technical troubleshooting.

The current law does not clearly stipulate the obligations of the digital signature authentication service provider to secure confidentiality, hence, the enterprises should be aware of this matter and must include, in the service contract, the confidentiality obligation of the digital signature authentication service provider.

Also, a question that many enterprises raise is how to prove the legal validity of the e-contract as the original version when dealing with a third party such as a bank or state authorities. In practice, Article 9 of Decree 52 provides legal basics for this matter.

Accordingly, an e-document in a commercial transaction has legal validity as the original if it fully meets the following conditions: (i) there is a reliable assurance of the integrity of the information contained in the e-document from the time the information is first generated in the form of the e-document; and (ii) information contained in the e-document is accessible and usable in complete form when necessary. The criterion for assessing the integrity is that the information is complete and unaltered, apart from changes in the form arising in the process of communicating, storing or displaying the e-document. One of the criteria for reliability assurance is when the electronic document is signed with the digital signature granted by a licensed digital signature authentication service provider.

Thus, when (i) the e-contract is signed with a digital signature granted by a licensed digital signature authentication service provider; (ii) information contained in the e-contract is accessible and usable in complete form when necessary, and (iii) the information in the e-contract is intact, then the e-contract shall have legal validity as the original. In reality, it is not difficult for enterprises to prove these three factors to third parties. However, whether it is accepted by third parties remains a question.

The decree amending Decree 52, expected to be officially issued in the upcoming time, will stipulate the regulations on authenticating e-contracts by a service provider which is licensed by the Ministry of Industry and Trade. It means that when the amended decree 52 comes into force, in addition to a digital signature authentication services provider, there will be one more service provider providing authentication services to e-contracts, probably for the purpose of verifying that such e-contract has content integrity, without depending on the changes of technology and technicality.

The amended decree 52 is expected to complete the legal framework for e-contracts and address the concerns of enterprises when applying them to their business activities. However, there remains a question on the need to have another authentification services provider for e-contracts. In addition, this may also incur costs for the enterprises when they must pay for both services, just to make sure that the e-contract is reliable.