Resources · Africa

Electronic signature laws in Africa: a country-by-country guide

Last reviewed 19 October 2026 · General information, not legal advice

Can you sign a contract electronically in Nairobi, Lagos, Accra, Johannesburg, Kampala, Dar es Salaam or Maputo? For most business documents, yes. This guide compares the electronic signature laws of eight African countries in plain language: what they recognize, which documents they exclude, when they ask for a stricter kind of signature, and what their data protection laws say about storing contracts in another country.

Key facts

• Rwanda, Kenya, Nigeria, Ghana, South Africa, Uganda, Tanzania and Mozambique all give electronic signatures legal effect and allow electronic records as evidence.^{1,3,6,8,9,11,14,16}
• Where a statute itself demands a signature, South Africa requires an advanced signature, Kenya an advanced one and Tanzania a secure one.^3,9,14
• Wills are excluded almost everywhere; many countries also exclude powers of attorney, negotiable instruments and land documents.
• Most data protection laws in the region let personal data leave the country on conditions; Rwanda requires storage in Rwanda unless certified otherwise.^{2,4,7,10,13,15}
• GewapeSign stores every customer's documents in Kigali, Rwanda. The first 5 documents are free and signers never pay.

As of 19 October 2026.

The short answer

All eight countries on this page have a law that says an electronic signature or record cannot be refused legal effect, or refused as evidence, only because it is electronic. For ordinary commercial agreements, such as service contracts, NDAs, offer letters, quotes and supplier agreements, an electronic signature is generally valid, and the question in a dispute is evidence: who signed, how they were identified and whether the document changed afterwards.

Two things vary by country. First, the documents each law excludes, which almost always include wills. Second, whether a stricter type of signature is needed where another statute specifically demands a signature.

At a glance

Ordinary and stricter signatures

Most of these laws recognize two levels. An ordinary electronic signature is any electronic method that identifies the signer and shows they approve the document: typing a name, drawing a signature, clicking to sign after opening a link sent to their email. A stricter signature (called advanced, secure or digital, depending on the country) is tied to the signer with more technical guarantees, often through a certificate from an accredited or licensed provider.

The stricter rule usually applies only where a statute itself requires a signature, not to every contract. An ordinary service agreement that no law requires to be signed is normally covered by the general rules. This point is often misstated: the stricter rule is not a requirement for all contracts.

Rwanda

Law N° 18/2010 of 12/05/2010 recognizes electronic messages, signatures and contracts. Where a law requires a signature, an electronic signature meets it if the method identifies the person, shows their approval and is reliable for the purpose (Article 20). The law excludes wills, negotiable instruments, powers of attorney and documents relating to immovable property (Article 1).¹ Law N° 058/2021 requires personal data to be stored in Rwanda unless the controller or processor holds a certificate authorizing storage outside Rwanda (Article 50).² Read the full guide: electronic signatures in Rwanda.

Kenya

Part VIA of the Kenya Information and Communications Act (Cap. 411A) gives electronic records legal recognition, and where a law requires a signature, an advanced signature satisfies it. The Business Laws (Amendment) Act, 2020 extended electronic signatures to more documents; after it, the Act's exclusions are wills and negotiable instruments.³ An advanced signature must be uniquely linked to the signer, identify them, be under their sole control and show any later change, and providers of certification services are licensed by the Communications Authority.

Data: the Data Protection Act, 2019 allows personal data to leave Kenya with proof of appropriate safeguards or where the transfer is necessary, for example for a contract (section 48); sensitive data also needs consent (section 49).⁴ The Data Protection (General) Regulations, 2021 (regulation 26) require data processed for the strategic interest of the state, such as civil registration, elections, public finance, protected computer systems, basic education and primary or secondary health care, to be processed on a server and data center in Kenya, or with at least one serving copy kept in Kenya.⁵

Nigeria

Section 17 of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2015 says an electronic signature in respect of purchases of goods and any other electronic transactions is binding, and a person who disputes a signature must prove it is not theirs.⁶ It excludes wills, codicils and other testamentary documents; death and birth certificates; family law matters such as marriage, divorce and adoption; court orders, affidavits, pleadings and other court documents; cancellation of utility services; documents that accompany dangerous materials; and orders to withdraw drugs or chemicals. Powers of attorney and land documents are not on the list, although they often appear in summaries online. The Evidence Act, 2011 (sections 84 and 93) governs how electronic records and signatures are proved in court.

Data: the Nigeria Data Protection Act, 2023 allows transfers abroad where the recipient is bound by adequate law, binding corporate rules, contract clauses or a certification, or on grounds such as consent or contract necessity, and the basis of each transfer must be recorded (sections 41 to 43).⁷

Ghana

The Electronic Transactions Act, 2008 (Act 772) accepts electronic records as writing and as evidence (sections 5 and 7). Where a law requires a signature, the requirement is met by a digital signature (section 10), and parties may also agree another recognized, secure and verifiable way to sign (section 12).⁸ Section 4 excludes negotiable instruments, powers of attorney, trusts, wills, contracts for the sale or conveyance of immovable property, bills of lading, company, partnership and sole proprietorship registration documents, and affidavits and statutory declarations.

Data: the Data Protection Act, 2012 (Act 843) does not set specific rules for transferring personal data abroad.¹⁷

South Africa

The Electronic Communications and Transactions Act 25 of 2002 says an electronic signature is not without legal force only because it is electronic (section 13(2)). Where the parties require a signature without agreeing a type, any method that identifies the person and is as reliable as appropriate will do (section 13(3)). Data messages must be given due evidential weight (section 15).⁹ Where a law requires a signature, only an advanced signature, made through a process accredited under the Act, satisfies it (section 13(1)). The Act does not validate agreements to sell immovable property, long leases of more than 20 years, wills and codicils, or bills of exchange (Schedule 2).

Data: the Protection of Personal Information Act (POPIA) allows transfers abroad where the recipient is bound by an adequate law, binding corporate rules or a binding agreement, with consent, or where needed for a contract (section 72). It has no general requirement to store data in South Africa.¹⁰

Uganda

The Electronic Transactions Act, 2011 says information cannot be denied legal effect because it is electronic (section 5), and where a law requires a signature, the requirement is fulfilled if an electronic signature is used (section 6). Electronic records are admissible as evidence (section 8).¹¹ The Act excludes wills and codicils, trusts created by will, powers of attorney, documents that create or transfer an interest in property and must be registered, and negotiable instruments (Schedule 2). Under the Electronic Signatures Act, secure and advanced signatures carry a presumption that they belong to the signer; other electronic signatures do not carry that presumption.¹²

Data: under the Data Protection and Privacy Act, 2019, a controller or processor in Uganda that stores personal data outside Uganda must ensure the other country offers at least equivalent protection, or the person has consented (section 19).¹³

Tanzania

The Electronic Transactions Act (Cap. 442) gives data messages legal effect (section 4), accepts them as writing (section 5) and as evidence (section 18). Where a law requires a person's signature, that requirement is met by a secure electronic signature (section 6(1)), one that is unique to its purpose, identifies the signer, is under the signer's control and shows any change (section 7); parties may also agree their own method (section 6(3)). The Act has no general list of excluded documents.¹⁴

Data: the Personal Data Protection Act, 2022 allows transfers abroad on conditions such as consent or contract necessity, and the Commission may prohibit transfers (sections 31 and 32).¹⁵

Mozambique

Lei n.º 3/2017 (the Electronic Transactions Law) gives electronic documents the same legal effect as paper where they meet the formalities required for paper (Article 20). Where the law requires a signed document, it may be signed electronically with a reliable method that identifies the signer and shows approval, and electronic signatures are subject to certification by the competent authority (Article 22). Data messages are admissible as evidence (Article 24). The rules on forming contracts electronically do not apply where the law requires a notary or another formality (Article 26).¹⁶

Data: Mozambique does not yet have a comprehensive data protection law.¹⁷ Banks and other regulated institutions have their own rules from Banco de Moçambique; check them with your compliance team.

Where your documents are stored

GewapeSign stores every customer's documents, signer details and audit records in Kigali, Rwanda, with encrypted backups in a second location in Rwanda, wherever the customer is. For a company outside Rwanda, that is a transfer of personal data abroad, and most of the laws above allow it on conditions: adequate protection in the receiving country, a binding agreement with the provider, or the person's consent. Some data must stay at home, such as the public-interest categories in Kenya's 2021 regulations, and banks and insurers usually have outsourcing rules from their regulator.

If your sector or regulator requires your documents to stay in your own country, talk to us before you start, and we will tell you plainly whether GewapeSign fits.

How GewapeSign fits

• Evidence for every document. An audit trail of each step with the time, the signer's name, email and network address; a sealed PDF that shows any later change; a SHA-256 fingerprint; and an independent timestamped proof anyone can check at gewapesign.com/verify. See audit trail and proof.
• Confidential. Only you, your team and the people you send a document to can open it. No AI reads your documents.
• Easy for signers anywhere. Signers in any country need no account and never pay. They sign on any phone or computer.
• What it is not. GewapeSign is not an accredited or licensed certification provider in any country and does not issue advanced, secure or qualified signatures. Where a statute demands that kind of signature, check before you rely on GewapeSign.