(..9..)
E-Contracts
Question Bank
Q.1. Explain in detail Authentication and legal recognition of Electronic record and digital signature.
Q.2. Explain in detail special provisions as to Evidence relating to electronic record.
Short Notes
1. E-Contract.
2. E- Commerce.
3. Digital Signature.
SYNOPSIS
(..9..)
E-Contracts
Question Bank
Q.1. Explain in detail Authentication and legal recognition of Electronic record and digital signature.
Q.2. Explain in detail special provisions as to Evidence relating to electronic record.
Short Notes
1. E-Contract.
2. E- Commerce.
3. Digital Signature.
SYNOPSIS
I] Introduction
II] Different forms of e-commerce
III] E-commerce employs some or all of the following practices
IV] Kinds of E-contracts
(a) Electronic Data Interchange
(b) Cyber Contracts
(c) Click Wrap Agreements
(d) Browse Wrap
V] The Information Technology Act 2000
a) Digital Signature
b) Legal Recognisation of electronic Record (S.4)
c) Legal Recognisation of electronic signature (S. 5)
d) Retention of electronic records (S. 7)
e) Communication and revocation of offer and acceptance
i) Attribution of electronic Records (S. 11)
ii) Acknowledgment of Receipt (S. 12)
iii) Time and place of dispatch and receipt (13)
(1) Time of dispatch of an electronic record
(2) Time of receipt of an electronic record
(3) Place of receipt and dispatch
VI] Indian Evidence Act 1872
A) Admissibility of electronic record
B) Presumptions as to electronic records
a) Presumption as to Gazettes in electronic forms (S. 81 A)
b) Presumption as to electronic agreements (S. 85A)
c)Presumption as to electronic records and digital signatures (S.85B)
d) Presumption as to Digital Signature Certificate (S. 85 C)
e) Presumption as to electronic messages (S. 88 A)
f) Presumption as to electronic records five years old (S. 90 A)
SYNOPSIS
I] Introduction
II] Different Forms of E-Commerce
1. Mobile Commerce (M-Commerce)
2. Electronic Fund Transfer (EFT)
3. Supply Chain Management
4. Internet Marketing
5. Online Transaction Processing (OLTP)
6. Electronic Data Interchange (EDI)
7. Inventory Management System
8. Automated Data Collection Systems
III] E-Commerce Practices and Operations
1. Virtual Storefronts and Catalogues
2. Digital Marketplaces and Transaction Hubs
3. Data Analytics and Demographics
4. Standardized Business-to-Business (B2B) Exchanges
5. Direct Customer Outreach
6. Collaborative B2B Procurement
7. Secured Transaction Infrastructure
IV] Kinds of E-Contracts
A) Electronic Data Interchange (EDI)
B) Cyber Contracts / Email Contracts
C) Click-Wrap Agreements
D) Browse-Wrap Agreements
V] The Information Technology Act, 2000
Statutory Validation of E-Contracts (Section 10A)
A) Authentication: Digital and Electronic Signatures
1. Digital Signature (Section 2(p) & Section 3):
2. Electronic Signature (Section 3A):
B) Legal Recognition of Electronic Records (Section 4)
C) Legal Recognition of Electronic Signatures (Section 5)
D) Retention of Electronic Records (Section 7)
E) Communication, Attribution, and Revocation of Offer and Acceptance
1) Attribution of Electronic Records (Section 11)
2) Acknowledgment of Receipt (Section 12)
3) Time and Place of Dispatch and Receipt (Section 13)
a. Time of Dispatch
b. Time of Receipt
c. Place of Dispatch and Receipt
VI] Admissibility and Presumptions of Electronic Evidence
A) Admissibility of Electronic Records
B) Statutory Presumptions as to Electronic Records
1) Presumption as to Gazettes in Electronic Forms (Section 81A IEA / Section 79 BSA)
2) Presumption as to Electronic Agreements (Section 85A IEA / Section 83 BSA)
3) Presumption as to Electronic Records and Signatures (Section 85B IEA / Section 84 BSA)
4) Presumption as to Digital Signature Certificates (Section 85C IEA / Section 85 BSA)
5) Presumption as to Electronic Messages (Section 88A IEA / Section 89 BSA)
6) Presumption as to Electronic Records Five Years Old (Section 90A IEA / Section 92 BSA)
*****
I] Introduction
The terms ‘Electronic Commerce’ (popularly known as ‘E-Commerce’) and ‘Electronic Contracts’ (referred to as ‘E-Contracts’) form the bedrock of the modern digital economy. While they are closely interrelated, E-Commerce serves as the broader ecosystem of commercial activities, whereas E-Contracts represent the specific legal instruments that bind parties within that digital framework. In everyday business discourse, these terms are frequently utilized to denote the overarching shift from paper-based transactions to digital execution.
E-Commerce fundamentally refers to the trading of products, commodities, and services over the internet. It is comprehensively defined as the exchange of business and commercial information using structured electronic formats, including electronic mail, electronic bulletin boards, online marketplaces, and electronic funds transfer mechanisms. Driven by the vision of a Digital India, E-Commerce represents any commercial activity occurring via interconnected computer networks, mobile devices, and digital interfaces. It establishes a transactional link between an online vendor and a consumer, facilitating the seamless transfer of data, titles, and consideration across global and domestic networks.
Electronic contracts are born out of the modern commercial necessity for speed, convenience, cost-minimisation, and operational efficiency. Unlike traditional agreements that require physical presence and ink signatures, E-Contracts are formed dynamically through emails, digital agreements, interactive website forms, or automated digital communication systems.
II] Different Forms of E-Commerce
E-Commerce in the contemporary Indian market manifests in several sophisticated forms, adapting continually to technological advancements. These distinct forms include:
1. Mobile Commerce (M-Commerce)
This involves the buying and selling of goods and services through wireless handheld devices such as smartphones and tablets, powered by dedicated retail applications and secure mobile browsers.
2. Electronic Fund Transfer (EFT)
This encompasses the digital transfer of money from one bank account to another, facilitated through systems like the Unified Payments Interface (UPI), National Electronic Funds Transfer (NEFT), Real Time Gross Settlement (RTGS), and Immediate Payment Service (IMPS).
3. Supply Chain Management
This refers to the digital integration of logistics, inventory, and product flows across businesses, allowing real-time tracking, automated procurement, and seamless communication between manufacturers, wholesalers, and distributors.
4. Internet Marketing
Also known as digital marketing, this involves promoting products and services via web-based advertisements, search engine optimization (SEO), social media platforms, and targeted content delivery to drive consumer engagement.
5. Online Transaction Processing (OLTP)
This facilitates and manages transaction-oriented applications, typically for data entry and retrieval transactions in industries like banking, e-commerce, and airline reservations, operating in real-time.
6. Electronic Data Interchange (EDI)
This provides a structured method for transmitting data between computers belonging to distinct business entities, operating under standardized protocols without manual human entry.
7. Inventory Management System
This involves automated digital tracking of stock levels, orders, sales, and deliveries, which mitigates the risk of overstocking or stock-outs through predictive analytics.
8. Automated Data Collection Systems
This utilizes technology such as Radio Frequency Identification (RFID), Quick Response (QR) codes, and automated sensors to capture product data instantly and feed it directly into corporate databases.
III] E-Commerce Practices and Operations
In the standard course of business, modern E-Commerce entities deploy a combination of the following operational practices:
1. Virtual Storefronts and Catalogues
E-commerce businesses provide digital storefronts on websites and mobile applications featuring comprehensive online catalogues. These are frequently aggregated into virtual malls or multi-vendor marketplaces, allowing consumers to browse diverse categories under a single digital roof.
2. Digital Marketplaces and Transaction Hubs
Businesses facilitate direct buying or selling on web-based platforms, enabling both Business-to-Consumer (B2C) and Consumer-to-Consumer (C2C) transactions, supported by integrated payment gateways.
3. Data Analytics and Demographics
Platforms gather and process demographic, behavioral, and preferential data through web contracts, user cookies, and social media interactions. This data is utilized to personalize user experiences, subject to prevailing data protection frameworks such as the Digital Personal Data Protection (DPDP) Act.
4. Standardized Business-to-Business (B2B) Exchanges
Enterprises utilize Electronic Data Interchange (EDI) to execute automated, bulk business-to-business transactions, including invoices, purchase orders, and shipping notices directly between corporate servers.
5. Direct Customer Outreach
Platforms reach prospective, new, and established customers through electronic mail, automated messaging applications, and digital notifications to execute promotional and transactional communication.
6. Collaborative B2B Procurement
Organizations deploy business-to-business buying, selling, and bidding platforms, such as the government-backed Open Network for Digital Commerce (ONDC) and various private procurement portals, to optimize corporate sourcing.
7. Secured Transaction Infrastructure
E-commerce operations ensure highly secured business transactions by embedding advanced encryption protocols, Secure Sockets Layer (SSL) certificates, multi-factor authentication (MFA), and tokenized payment pathways to protect sensitive financial data.
IV] Kinds of E-Contracts
Electronic contracts are broadly classified into distinct categories based on their method of formation and user interaction:
A) Electronic Data Interchange (EDI)
Electronic Data Interchange (EDI) represents the computer-to-computer exchange of routine business documents in a standardized electronic format between established business partners. This methodology facilitates a paperless, direct communication cycle without human intervention. For instance, when a retail giant's stock falls below a specific threshold, its computer system automatically generates and transmits a purchase order to the supplier's computer system, which accepts the order and schedules delivery autonomously.
B) Cyber Contracts / Email Contracts
Cyber contracts encompass agreements created through communication methods commonly used by the business community, such as structured electronic mail exchanges and commercial web interfaces. The validity of such contracts has been firmly upheld by the judiciary.
In the landmark case of Trimex International FZE Ltd., Dubai v. Vedanta Aluminium Ltd., India, (2010) 3 SCC 1, the Supreme Court of India held that a valid and binding contract may be concluded through an exchange of e-mails, even though the parties contemplate the execution of a formal written agreement at a later stage. The Court observed that where the parties have agreed upon all the essential terms of the contract and there is nothing to indicate that they intended to be bound only upon the execution of a formal document, the absence of such a signed agreement does not affect the validity or enforceability of the contract.
C) Click-Wrap Agreements
Click-Wrap agreements, also known as ‘click-through agreements’ or ‘click-wrap licenses’, are standard form digital contracts widely used in connection with software installations, online account creations, and digital purchases. These agreements require the user to actively scroll through the specified terms and conditions and explicitly affirm their consent by performing a deliberate physical action, such as clicking an "I Accept", "I Agree", or "Submit" button. If the user refuses to click the button, the transaction or installation process is terminated.
D) Browse-Wrap Agreements
Browse-Wrap agreements consist of terms and conditions of use that do not demand an explicit, overt act of assent from the user. Instead, these terms are typically accessible via a hyperlink located at the bottom of a webpage or embedded within software documentation. The website or application contains a statement indicating that the mere continued use, browsing, or accessing of the service constitutes the user's implicit agreement to the terms. Because these terms are not forcibly brought to the active attention of the user, their enforceability is subject to strict judicial scrutiny regarding whether reasonable notice was provided to the consumer.
V] The Information Technology Act, 2000
The Information Technology (IT) Act, 2000 was enacted to provide formal legal recognition to transactions carried out through electronic data interchange and other alternative modes of electronic communication. The Act acknowledges alternative methods to paper-based commerce and information storage, facilitates the electronic filing of documents with government agencies, and introduced consequential amendments to legacy statutes including the Indian Penal Code (now updated via the Bharatiya Nyaya Sanhita, 2023), the Indian Evidence Act, 1872 (now updated via the Bharatiya Sakshya Adhiniyam, 2023), the Bankers' Books Evidence Act, 1891, and the Reserve Bank of India Act, 1934.
The IT Act is modeled upon the UNCITRAL Model Law on Electronic Commerce adopted by the General Assembly of the United Nations in 1997. This resolution was passed to bring global uniformity to paperless communication and information storage methods across member states.
Statutory Validation of E-Contracts (Section 10A)
Section 10A of the IT Act specifically validates contracts formed through electronic means. It explicitly lays down that in the formation of a contract, the communication of proposals, the acceptance of proposals, and the revocation of proposals and acceptances, as the case may be, may be expressed in electronic form or by means of an electronic record. Such a contract shall not be deemed to be unenforceable solely on the ground that electronic means or forms were utilized for that specific purpose.
Consequently, all foundational requirements of contract formation under the Indian Contract Act, 1872—namely, a valid proposal, unconditional acceptance, competency of the parties, lawful consideration, free consent, and a lawful object—must be present to constitute an e-contract. However, given the unique nature of digital mediums, specific statutory adjustments regarding the time, attribution, and place of communication are codified within the IT Act.
A) Authentication: Digital and Electronic Signatures
An electronic contract requires an authentication mechanism to verify identity and intent. The IT Act provides comprehensive mechanisms for this purpose:
1. Digital Signature (Section 2(p) & Section 3): Section 2(p) defines a "digital signature" as the authentication of any electronic record by a subscriber by means of an electronic method or procedure in accordance with the provisions of Section 3. Under Section 3, a subscriber may authenticate an electronic record by affixing their digital signature, which utilizes an asymmetric crypto-system and a hash function to secure the integrity of the data.
2. Electronic Signature (Section 3A): Section 3A introduces a technologically neutral framework for authentication termed an ‘electronic signature’. It mandates that a subscriber may authenticate an electronic record by utilizing an electronic signature or electronic authentication technique which is considered legally reliable and is specified within the Second Schedule of the Act (such as Aadhaar-based e-Signatures).
B) Legal Recognition of Electronic Records (Section 4)
Section 4 dictates that where any law mandates that information or any other matter must be in writing, typewritten, or printed form, such a requirement is deemed satisfied if the information or matter is rendered or made available in an electronic form and is accessible so as to be usable for subsequent reference.
C) Legal Recognition of Electronic Signatures (Section 5)
Section 5 establishes that where any law mandates that a document must be signed or bear the signature of a person, such a requirement is deemed satisfied if the matter is authenticated by means of an electronic signature affixed in a manner prescribed by the Central Government.
D) Retention of Electronic Records (Section 7)
Section 7 provides that where any law requires that specific documents, records, or information be retained for a particular period, that requirement is legally satisfied if they are retained in an electronic form, provided the electronic record remains accessible, its original format is preserved accurately, and details identifying its origin, destination, dispatch, and receipt are retained.
E) Communication, Attribution, and Revocation of Offer and Acceptance
1) Attribution of Electronic Records (Section 11)
An electronic record is legally attributed to the originator under the following circumstances:
a. If it was transmitted by the originator themselves.
b. If it was transmitted by a person who possessed the express or implied authority to act on behalf of the originator in respect of that electronic record.
c. If it was transmitted by an information system programmed by or on behalf of the originator to operate automatically.
The term ‘Originator’ is defined under Section 2(1)(za) as a person who sends, generates, stores, or transmits any electronic message, or causes it to be done, excluding any intermediary platform. The ‘Addressee’ under Section 2(1)(b) refers to the person intended by the originator to receive the electronic record, excluding intermediaries.
Illustration 1: A uses his Gmail account to send an email to B. A is the originator, Gmail is the intermediary, and B is the addressee.
Illustration 2: A logs into his web-based Gmail account, composes an email, and clicks "Send". The email is legally attributed to A because he initiated the transmission himself.
Illustration 3: A instructs his executive assistant, C, to send a business email. The email is legally attributed to A, as C possessed the authorized mandate to act on behalf of the originator.
Illustration 4: A configures his email server to send an automated out-of-office reply stating: "Thanks for your email. I am on vacation and will reply when I return." Every time the server automatically replies to an incoming message, that electronic record is legally attributed to A, as it was generated by an information system programmed by him to operate automatically.
2) Acknowledgment of Receipt (Section 12)
Where the originator has not stipulated a specific form or method for the acknowledgment of receipt of an electronic record, the acknowledgment may be given by any communication initiated by the addressee (automated or otherwise) or any conduct of the addressee that is sufficient to indicate to the originator that the record has been received.
Where the originator has expressly stipulated that the electronic record shall be binding only upon the receipt of an acknowledgment, the electronic record is legally deemed to have never been sent until such acknowledgment is received.
Where the originator has not stipulated strict conditionality but hasn't received an acknowledgment within the specified, agreed, or reasonable time, the originator may issue a notice to the addressee stating that no acknowledgment has been received and specifying a reasonable time limit. If no acknowledgment arrives within that specified timeframe, the originator may treat the electronic record as though it had never been sent.
3) Time and Place of Dispatch and Receipt (Section 13)
a. Time of Dispatch
Unless otherwise agreed between the parties, the dispatch of an electronic record occurs when it enters a computer resource that is outside the operational control of the originator.
Illustration: A composes a digital offer for B at 11:30 AM. At exactly 11:45 AM, he clicks the "Send" button. The message leaves his computer, enters the public network infrastructure, and moves beyond A's control. The legal time of dispatch is 11:45 AM.
b. Time of Receipt
Unless otherwise agreed, the time of receipt is determined as follows:
i. If the addressee has designated a specific computer resource for receiving electronic records, receipt occurs the moment the electronic record enters that designated resource. If it is sent to an alternative, non-designated resource of the addressee, receipt occurs the moment the record is actively retrieved by the addressee.
ii. If the addressee has not designated a specific computer resource, receipt occurs when the electronic record enters any computer resource belonging to the addressee.
Illustration: A logistics company promises to process orders within 24 hours of receipt at its designated email address (orders@company.com). Customer X fills out the order form and submits it. The moment the packet hits the company’s designated server, it is legally received. Customer Y, however, emails his order to the general info@company.com account. The department head checks this non-designated account intermittently and logs in two weeks later at 11:30 AM. The legal time of receipt for Y's email is 11:30 AM on that day, regardless of when it arrived on the server.
c. Place of Dispatch and Receipt
Save as otherwise agreed, an electronic record is deemed to be dispatched at the place where the originator has their place of business, and it is deemed to be received at the place where the addressee has their place of business. This rule applies even if the physical location of the computer server or resource is situated in a different geographical location.
This principle was authoritatively applied in P.R. Transport Agency v. Union of India, [AIR 2006 All 23]. In this case, the petitioner submitted an electronic bid in an e-auction conducted for the sale of coal. The respondent accepted the bid by transmitting an acceptance through e-mail, which was received by the petitioner at its place of business at Varanasi/Chandauli in Uttar Pradesh. A dispute subsequently arose regarding the territorial jurisdiction of the Allahabad High Court. Referring to Section 13(3) of the Information Technology Act, 2000, the Court held that an electronic record is deemed to be received at the addressee's place of business. Since the acceptance e-mail was received by the petitioner at its place of business in Uttar Pradesh, the contract became complete there, and a part of the cause of action arose within the territorial jurisdiction of the Allahabad High Court. Accordingly, the Court held that it possessed territorial jurisdiction to entertain the writ petition.
VI] Admissibility and Presumptions of Electronic Evidence
With the regular execution of electronic contracts, proving digital transactions in a court of law is a crucial component of cyber jurisprudence. In India's legal framework, the statutory rules governing digital evidence have transitioned from the legacy Indian Evidence Act, 1872 to the Bharatiya Sakshya Adhiniyam, 2023 (BSA).
A) Admissibility of Electronic Records
Under the historical framework of the Indian Evidence Act, 1872, Section 65A and Section 65B governed the admissibility of electronic records. Section 65A stated that contents of electronic records could be proved in accordance with Section 65B. Section 65B(1) established a legal fiction wherein any information contained in an electronic record printed on paper, stored, recorded, or copied in optical or magnetic media produced by a computer (the computer output) is deemed a document and is admissible without further proof or production of the original, provided the conditions under Section 65B(2) are satisfied.
The criteria required that the computer output be produced during the regular course of activities by a person having lawful control over the machine, that the device was operating properly during that material period, and that the information was regularly fed into the system. Section 65B(4) mandated a signed certificate by a responsible official identifying the record and describing its manner of production.
The scope of Section 65B was authoritatively interpreted by the Supreme Court in Anvar P.V. v. P.K. Basheer, (2014) 10 SCC 473, which overruled the contrary view taken in State (NCT of Delhi) v. Navjot Sandhu (Afsan Guru) on this aspect. The Court held that where an electronic record is sought to be produced by way of a copy or other secondary electronic evidence, compliance with Section 65B(4) of the Indian Evidence Act, 1872 is a mandatory condition for its admissibility. This legal position was affirmed and comprehensively explained by a three-Judge Bench in Arjun Panditrao Khotkar v. Kailash Kushanrao Gorantyal, (2020) 7 SCC 1. The Court clarified that the requirement of a certificate under Section 65B(4) applies only to secondary electronic evidence and is unnecessary where the original electronic record is itself produced before the court. It further held that where the electronic record or the certificate is in the custody of a third party, the party seeking to rely on the evidence may invoke the court's procedural powers to secure the certificate, and the inability to obtain it despite exercising such remedies should not defeat the ends of justice.
Under the current statutory regime of the Bharatiya Sakshya Adhiniyam, 2023, these provisions are codified under Section 59 and Section 63. Section 63 of the BSA retains the strict requirement of an electronic certificate but updates its structure to accommodate advanced digital realities, ensuring that electronic records from cloud storage, smartphones, and distributed networks are admissible when accompanied by the prescribed dual-part certificate signed by both the person in charge of the device and an expert/expert agency.
B) Statutory Presumptions as to Electronic Records
To facilitate smooth adjudication, the law mandates specific rebuttable presumptions concerning digital transactions. These provisions, originally introduced in the Indian Evidence Act, 1872, continue to apply under corresponding provisions of the Bharatiya Sakshya Adhiniyam, 2023:
1) Presumption as to Gazettes in Electronic Forms (Section 81A IEA / Section 79 BSA)
The Court shall presume the genuineness of every electronic record purporting to be the Official Gazette, or directed by any specific law to be kept securely by any person, if such electronic record is kept substantially in the form required by law and is produced from proper, untainted custody.
2) Presumption as to Electronic Agreements (Section 85A IEA / Section 83 BSA)
The Court shall mandatory presume that every electronic record purporting to be an agreement containing the electronic or digital signatures of the executing parties was duly concluded by affixing the digital or electronic signatures of those parties.
3) Presumption as to Electronic Records and Signatures (Section 85B IEA / Section 84 BSA)
In any legal proceeding involving a secure electronic record (which has met specified security standards under the IT Act), the Court shall presume, unless the contrary is proved, that the secure electronic record has not been altered or tampered with since the specific point of time to which its secure status relates.
Furthermore, where a secure digital signature is affixed to an electronic record, the Court shall presume that it was affixed by the subscriber with the explicit intention of signing or approving that electronic record. No presumption of integrity is automatically extended to ordinary, non-secure electronic records or signatures.
4) Presumption as to Digital Signature Certificates (Section 85C IEA / Section 85 BSA)
The Court shall presume, until the contrary is established, that the information listed within an official Digital Signature Certificate is factually correct, provided the certificate was accepted by the subscriber, except for details explicitly designated as unverified subscriber information.
5) Presumption as to Electronic Messages (Section 88A IEA / Section 89 BSA)
The Court may presume that an electronic message forwarded by an originator through an electronic mail or messaging server to an addressee corresponds accurately with the raw message fed into the computer for transmission. However, the Court shall not make any presumption regarding the specific identity of the actual person by whom such a message was sent, leaving the authorship open to proof.
6) Presumption as to Electronic Records Five Years Old (Section 90A IEA / Section 92 BSA)
Where any electronic record, purporting or proved to be five years old (reduced from the traditional thirty years applicable to physical documents), is produced from any custody which the Court in that particular instance considers proper, the Court may presume that the digital or electronic signature which purports to belong to a specific person was affixed by him or by an individual duly authorized by him in this behalf.
Electronic records are considered to be in proper custody if they are preserved in the place where, and under the care of the person with whom, they would naturally and reasonably be expected to reside. No custody is deemed improper if it is conclusively proved to have possessed a completely legitimate origin, or if the specific circumstances of the case render such an origin highly probable.
*****