Electronic Transactions Act

The Act comes into force on a date appointed by the Minister.

This section provides definitions of key terms used in the Act (for example: addressee, advanced electronic signature, automated transaction, computer, consumer).

The Act does not apply to the list of documents specified in Schedule 2, and it does not limit the operation of any law that expressly authorises, prohibits, or regulates the use of electronic documents.

States the Act's object: to provide a legal and regulatory framework to enable and facilitate electronic communications and transactions and to promote related goals such as legal certainty, technology neutrality, e‑Government services, consumer protection, investment and innovation.

A person satisfies a requirement to produce a document or information by producing it in electronic form where authenticity and accessibility conditions are met.

Specifies ways an electronic signature or certified copy satisfies notarisation, acknowledgement, verification or certification requirements.

The text defines when a document is "sealed by electronic means" as including the advanced electronic signature of the person authorised to seal the document.

Contracts are generally not formed when an electronic agent of another party makes a material error, subject to specified exceptions; parties using electronic agents are bound by contracts they enter unless terms cannot be reviewed beforehand.

A contract cannot be denied legal effect merely because it is concluded partly or wholly by means of a data message.

Specifies when a data message is considered dispatched: when it enters an information system outside the sender's control (single-system), or if it passes through multiple external systems, when it enters the first such system, subject to any agreement to the contrary.

If not otherwise agreed between the originator and the addressee, the time of receipt of a data message is determined by where the addressee has designated an information system (receipt when the message enters that system), or if sent to a different system of the addressee, when received by the addressee; if no system is designated, receipt occurs when the message enters an information system of the addressee.

Unless the originator and addressee agree otherwise, a data message is deemed dispatched at the originator's place of business and received at the addressee's place of business.

An expression of interest may be a data message and may be submitted without an electronic signature if the person's interest can be inferred from the data message.

A data message is treated as coming from the person who originated it if sent by the originator, the originator's agent, or an automated information system programmed by the originator; an addressee must regard and act on that assumption when agreed identification methods are properly applied, except where specified notice, knowledge, or reasonableness exceptions apply.

If the originator conditions sending a data message on receiving an acknowledgement and no acknowledgement arrives within the specified, agreed or a reasonable time, the originator may notify the addressee and treat the message as though it was never sent or exercise other rights.

Sections 16, 17, 18, 19 or 20 may be varied by agreement between the parties involved in generating, sending, storing or processing a data message.

Electronic records and data messages must not be denied legal effect solely because they are in data message form; information can be incorporated into a data message if it is referred to in a way a reasonable person would notice and is accessible in a readable, storable and retrievable form.

An electronic signature satisfies a legal signature requirement or avoids consequences for an unsigned document.

Where a law requires information to be in its original form, that requirement is satisfied by a data message if the authenticity is assessed by considering integrity from when it was first generated and whether it can be displayed or produced to the recipient.

The court must consider specified reliability and identification factors when assessing the evidential weight of an electronic record, and a person seeking to introduce a data message or electronic record must prove its authenticity.

A legal requirement to retain a document, record or information may be fulfilled by retaining it in electronic form if certain conditions are met.

When a law allows or requires these actions, a public body may accept documents as data messages, issue permits/licenses/approvals electronically, and make or receive payments electronically.

A public body may, by notice in the Gazette for the purposes of section 22, specify detailed requirements (manner, format, signatures, authentication, controls) for data messages, permits/licenses/approvals and payments.

Suppliers selling, hiring or exchanging goods/services by electronic transaction must publish specified information on their website or electronic communication and give consumers an opportunity to review, correct and withdraw; consumers may cancel in specified circumstances and sellers must refund payments (with limited deductions) and use secure payment systems.

A consumer may cancel an electronic transaction (and related credit agreement) within seven days of receiving goods or within seven days of concluding the agreement; if payment was made before cancellation the consumer is entitled to a full refund within thirty days; returning consumers shall not be charged except for direct return costs.

People who send unsolicited commercial communications to consumers must provide the communication at no cost and must give consumers a free option to cancel the sender's mailing list; sending to someone who has asked not to receive communications is prohibited and is an offence with criminal penalties.

When a person orders goods or services electronically, the supplier must execute the order within thirty days; if the supplier fails to do so the consumer may cancel after seven days' written notice; if goods or services are unavailable the supplier must notify the consumer and refund payments within thirty days.

A term in an agreement that excludes any rights provided in this Part is void.

Service providers are not liable for civil or criminal claims arising from third‑party electronic material that they merely provide access to, subject to specific exceptions and obligations.

A service provider is not liable for user damage from linked or referred infringing data messages if it lacks actual knowledge or awareness of infringement, does not profit from the infringement, or removes/disables the link within a reasonable time after being informed.

A person who complains must notify the service provider or its designated agent in writing and include specified contact, identity, description and declarations; knowingly making a false statement on that notification makes the complainant liable for the provider's loss or damage.

Service providers are not obliged to monitor or actively seek facts about data they transmit or store; the Minister (in consultation with NITA‑Uganda) may, by statutory instrument, prescribe procedures for service providers concerning monitoring, seeking unlawful-activity indicators, reporting alleged illegal activity, and disclosing identifying information to competent authorities.

The Act applies to any person regardless of nationality or whether they are inside or outside Uganda; offences committed outside Uganda may be treated as if committed within Uganda.

A court presided over by the Chief Magistrate or Magistrate Grade 1 has jurisdiction to hear and determine all offences in this Act and may impose the penalty or punishment for any such offence.

The Minister may, by statutory instrument, make regulations concerning matters required to be prescribed and administrative or procedural matters necessary to give effect to the Act.

The Minister may amend the Schedules in consultation with the National Information Technology Authority-Uganda, by statutory instrument, with the approval of Cabinet.