Secure Electronic Signature: Canadian Federal Rules

What is a secure electronic signature in Canada?

A secure electronic signature is a defined term in the Canadian federal electronic-document framework. Under Part 2 of PIPEDA, it refers to an electronic signature resulting from a technology or process prescribed by regulation. It is not merely a marketing description of a password-protected document.

Which rules define the process?

The Secure Electronic Signature Regulations, SOR/2005-30, prescribe a digital-signature process and related certificate conditions. The framework addresses the use of private and public keys and the required certificate and certification-authority conditions.

Those conditions must actually be met. A visible signature, completion report or ordinary digital certificate should not be assumed to satisfy the regulated definition. Nor does the generic word “secure” establish that a service uses the prescribed process.

What is the federal scope?

PIPEDA Part 2 concerns electronic alternatives for particular federal requirements involving paper or documents. It should not be read as a single rule requiring every Canadian private contract to use a secure electronic signature.

The regulations can attach a rebuttable attribution presumption when their prescribed process is used. That is not a guarantee that every fact in a document is true or every contractual element is satisfied. Applicable enactments and the document’s requirements still matter.

What should not be conflated?

PIPEDA’s separate privacy provisions do not make the federal electronic-document term a complete privacy-compliance badge. Canada’s statutory secure-signature concept is also distinct from EU eIDAS qualification and Swiss qualified signing.

Check the actual legal requirement, relevant consent or intention and any specific formality. For the wider country context, see the Canadian e-signature legality overview.