Is an Electronic Signature Legally Valid in Sri Lanka?

The short answer is yes. Electronic signatures have been legally valid in Sri Lanka since 2006.

But here is what most guides skip: Sri Lanka's law makes a specific distinction between two types of electronic signature and that distinction matters more than most businesses realise. One type is accepted for the vast majority of commercial agreements. The other is required for high-stakes and regulated transactions. Using the wrong one for the wrong document is the kind of mistake that only surfaces when a contract is challenged in court.

This guide covers the legal framework, the two-tier system, what can and cannot be signed electronically, and what Sri Lankan businesses need in practice.

---

The legal foundation: Electronic Transactions Act No. 19 of 2006

Sri Lanka's primary law governing electronic signatures is the Electronic Transactions Act No. 19 of 2006, commonly referred to as the ETA.

The Act was substantially amended in 2017 by the Electronic Transactions (Amendment) Act No. 25 of 2017, which gave effect to Sri Lanka's ratification of the United Nations Convention on the Use of Electronic Communications in International Contracts making Sri Lanka the first country in the region to ratify that convention. This international alignment matters when you are signing contracts with counterparties in Singapore, Australia, the UK, or the EU.

Three things the ETA establishes clearly:

A written signature is not required for a valid contract. Under Sri Lankan law, contracts are generally valid when legally competent parties reach an agreement whether verbally, electronically, or in writing unless a specific statutory requirement demands otherwise.

A contract cannot be denied enforceability simply because it is electronic. The ETA explicitly prevents courts from rejecting a contract on the grounds that it was signed digitally rather than with pen and paper.

Electronic records are admissible as evidence in court. Under Section 21 of the ETA, electronically signed documents can be produced as evidence in legal proceedings. The Act creates three presumptions in favour of electronic evidence unless the contrary is proved including a presumption that the information in the electronic record is true, and a presumption relating to the identity of the maker of the document.

That last point is more significant than it sounds. It reverses the traditional burden: the party challenging an electronic signature has to prove it is unreliable, rather than the party relying on it having to prove it is genuine.

---

Sri Lanka's two-tier signature system

Sri Lanka has a formal two-tier approach to electronic signatures. Understanding the difference between them is the most practical thing this guide can give you.

Simple Electronic Signature (SES)

A Simple Electronic Signature is any electronic indication of a person's intent to sign. This includes a typed name at the bottom of an email, a scanned image of a handwritten signature, clicking an "I agree" checkbox, or drawing a signature with a finger on a touchscreen.

SES is legally valid in Sri Lanka for the vast majority of commercial agreements. It works for:

• Business contracts and commercial agreements between companies
• Service agreements and statements of work
• NDAs and confidentiality agreements
• Offer letters and most employment documents
• Rental and lease agreements (with an important exception for property transfers covered below)
• Client onboarding and account opening documents
• Contractor and consultant agreements

The important caveat: courts may require supplementary evidence to establish validity in a dispute. A 2023 Colombo Commercial Court ruling confirmed this a contract executed with SES was challenged, and the court required further authentication before accepting it. This is not unusual, and it is not a reason to avoid SES. It is a reason to use an eSign platform that captures a proper audit trail, IP address, timestamp, and authentication record with every signature.

Certified Electronic Signature (CES)

A Certified Electronic Signature the equivalent of a Qualified Electronic Signature (QES) in EU law is backed by a digital certificate issued by an accredited Certification Service Provider. In Sri Lanka, the only authorised CSP is LankaSign, operated by LankaPay (Private) Limited under Central Bank supervision.

The Sri Lanka Supreme Court confirmed in 2022 that a CES issued by an accredited provider is legally equivalent to a handwritten signature.

CES is required or strongly recommended for:

• High-value financial transactions and banking agreements
• Government filings and e-government services
• Tax submissions and regulatory documents
• Certain insurance contracts
• Any transaction where equivalence to a notarised signature is needed

For most businesses startups, SMEs, BPOs, HR teams, legal professionals handling commercial work SES with a strong audit trail is sufficient for the vast majority of documents.

---

What cannot be signed electronically in Sri Lanka

This is where most eSign guides go vague. Section 23 of the ETA explicitly excludes certain document types from electronic execution. Getting this wrong is not a minor issue it renders the signature unenforceable regardless of what platform you used.

The following documents require wet ink signatures and cannot be executed electronically under Sri Lankan law:

For real estate specifically: the property sale and conveyance restriction is firm. If a transaction involves the transfer of title to land or buildings, it requires a notarially executed deed under the Prevention of Frauds Ordinance. However, lease agreements, rental agreements, commercial tenancy agreements, and property management contracts are not excluded these can be signed electronically.

For HR specifically: internal employment documents offer letters, employment contracts for your own records, internal policies, code of conduct acknowledgements, contractor agreements can all be signed electronically. However, certain filings with the Labour Department historically require hardcopy documents with ink signatures and, in some cases, thumb impressions. If you are filing documents with the Labour Department, verify the current requirements before going fully digital.

---

What other laws intersect with eSign in Sri Lanka

The ETA is not the only law a Sri Lankan business needs to consider when adopting electronic signatures.

Personal Data Protection Act No. 9 of 2022 (PDPA)

Sri Lanka was the first country in South Asia to enact comprehensive data protection legislation modelled on the GDPR. The PDPA became enforceable in 2023 and was amended again by Act No. 22 of 2025.

Every time a document is sent for electronic signature, the signing platform collects personal data about the signer: their name, email address, IP address, device information, and timestamp. Under the PDPA, this counts as processing personal data which means your business has obligations around how that data is stored, retained, and transferred.

The data residency question is particularly relevant for Sri Lankan businesses. If you use a platform that stores signing data on overseas servers, you may be subject to cross-border data transfer restrictions under the PDPA. Using a platform with a bring-your-own-storage (BYOS) option where documents and signing data stay in your own Google Drive, OneDrive, or private cloud keeps you aligned with PDPA data residency principles.

Evidence (Special Provisions) Act No. 14 of 1995

Predates the ETA but remains relevant. Section 21 of the ETA supersedes this Act for electronic evidence matters, creating a specific admissibility regime for digital documents. The ETA's three presumptions that the information in an electronic record is true, that the identity of the maker is as stated, and a third presumption relating to the integrity of the record provide a stronger evidentiary foundation than the older Act.

Payment and Settlement Systems Act No. 28 of 2005

Governs electronic transactions specifically in the banking and payments sector. This is where LankaSign's role becomes important the Central Bank of Sri Lanka requested LankaPay (Private) Limited to act as the financial sector Certification Service Provider, and LankaSign was launched in 2009 under this framework.

---

Two court decisions Sri Lankan businesses should know

Sri Lanka Supreme Court, 2022: Confirmed that a Certified Electronic Signature issued by an accredited Certification Service Provider was legally binding and equivalent to a handwritten signature. This ruling establishes that the CES infrastructure in Sri Lanka LankaSign has full judicial backing.

Colombo Commercial Court, 2023: Ruled that a contract executed using a Simple Electronic Signature required further authentication before it could be accepted. This does not mean SES contracts are invalid it means that the audit trail and supporting evidence behind the signature matter. A well-documented signing workflow with IP capture, timestamp, email verification, and a tamper-evident audit trail provides exactly that supporting evidence.

The takeaway from both rulings: the type of signature matters, and the quality of the evidence behind the signature matters. An SES backed by a proper audit trail is in a very different position from a scanned signature image pasted into a Word document.

---

How this applies to your business

For the majority of Sri Lankan businesses commercial companies, startups, BPOs, HR teams, legal professionals, financial services firms operating below the threshold of high-value regulated transactions the practical position is:

SES is legally valid for most of what you sign. Offer letters, NDAs, client agreements, service contracts, contractor engagements, policy acknowledgements, rental agreements all of these are within the scope of the ETA and do not require CES.

What matters most is the audit trail. The 2023 Commercial Court ruling makes clear that if an SES is challenged, the supporting evidence needs to stand up. Using an eSign platform that captures a timestamped, tamper-evident record of who signed, when, from what device, and with what authentication is not optional it is what makes your SES commercially reliable.

CES is for regulated sectors and high-value transactions. If your business is in banking or financial services, engages with government procurement, or handles transactions where you need the equivalent of a notarised signature, CES issued through LankaSign is the appropriate tool.

The PDPA is not optional. If you are collecting signatures on contracts with employees, clients, or contractors, you are processing their personal data. Your eSign workflow needs to be PDPA-compliant which means understanding where that data is stored, how long it is retained, and whether it crosses borders.

---

Frequently asked questions

Are electronic signatures legally binding in Sri Lanka?

Yes. The Electronic Transactions Act No. 19 of 2006 explicitly recognises electronic signatures as legally valid and enforceable. Contracts cannot be denied legal effect solely because they were executed electronically.

What is the difference between SES and CES in Sri Lanka?

A Simple Electronic Signature (SES) is any electronic indication of intent to sign a typed name, a checkbox, a drawn signature. A Certified Electronic Signature (CES) is backed by a digital certificate issued by an accredited Certification Service Provider (in Sri Lanka, this is LankaSign, operated by LankaPay (Private) Limited). CES carries stronger legal weight and is required for regulated transactions.

Can I sign a property contract electronically in Sri Lanka?

No, not for the transfer of ownership. Contracts for the sale or conveyance of immovable property are excluded from electronic execution under Section 23 of the ETA, and require notarial execution under the Prevention of Frauds Ordinance. Lease and rental agreements, however, can be signed electronically.

Does Sri Lanka's PDPA affect how I use an eSign platform?

Yes. When you use an eSign platform, personal data about signers is collected and processed. Under the PDPA, you have obligations around how this data is stored and whether it can be transferred internationally. Using a platform that keeps data in your own storage is the cleanest approach.

Does the Sri Lankan government accept electronic signatures?

Section 8 of the ETA provides that government institutions and statutory bodies are required to accept electronic records and signatures but implementation varies. Several government agencies accept electronic documents, while others still require physical copies for certain filings.

---

This article is for general informational purposes and does not constitute legal advice. For specific legal questions about electronic signatures in Sri Lanka, consult a qualified Sri Lankan attorney.