Republic Act No. 8792 (RA 8792): E-Commerce Act Guide

Last materially reviewed: September 24, 2026

Direct Answer

Republic Act No. 8792 (RA 8792), or the Electronic Commerce Act of 2000, is the Philippine law that gives legal recognition to electronic data messages, electronic documents and electronic signatures used in commercial and non-commercial transactions. It allows many contracts, approvals, records and government dealings to be created or completed electronically. It does not make every digital file automatically valid or admissible: the underlying transaction must still satisfy applicable law, and the electronic record may need to be authenticated if disputed.

Primary authority: Republic Act No. 8792 — Electronic Commerce Act of 2000.

Evidence and action

RuleRA 8792, Section 8 treats an electronic signature as equivalent to a handwritten one when the process identifies the signer, shows approval, is reliable and appropriate, and lets the other party verify it.

ExceptionElectronic execution does not remove notarization, registration, witnesses or any other special form another law requires. Government agencies may also prescribe their own formats, signature methods and filing rules.

EvidenceKeep the native file, the terms version shown, the assent or signing-platform audit trail, and transmission timestamps. Under the Rules on Electronic Evidence, a disputed private electronic document must be authenticated.

TimingRA 8792 sets no single retention period. Retention comes from the tax, corporate, employment, privacy or sector rule that governs each type of record.

Next stepCheck whether the transaction needs a special form, then capture affirmative assent and keep an exportable record that does not depend on one platform or one employee account.

What Does RA 8792 Cover?

Sections 3 and 4 of RA 8792 give the law broad reach. It applies to electronic data messages and electronic documents used in commercial and non-commercial activities, including domestic and international dealings, contracts, exchanges and information storage.

In practice, the law can be relevant to online sales, emailed agreements, digital approvals, electronic invoices, payment confirmations, customer instructions, workplace records, procurement documents and government filings. Whether a particular record is sufficient still depends on the transaction, the law governing it and the reliability of the process used.

What Are the Main Rules Under RA 8792?

Electronic form is legally recognized. A record should not lose legal effect merely because it is electronic.
Writing requirements may be satisfied electronically. The information must remain accessible for later reference and meet the applicable statutory conditions.
An electronic record may function as an original. Its integrity from final form and its ability to be displayed matter.
Electronic signatures may be equivalent to handwritten signatures. Identification, intent, reliability and verifiability are central.
Electronic contracts may be formed. Offer and acceptance can be expressed through electronic data messages or documents.
Electronic records can be retained. The retained information should accurately represent the original and remain accessible, with origin, destination, date and time information preserved when required.
Government electronic transactions are supported. Agencies may prescribe formats, signature methods, security controls and procedures for electronic filings and payments.

Electronic Data Message, Electronic Document and Electronic Signature

Term	Plain-language meaning	Example
Electronic data message	Information generated, sent, received or stored through electronic, optical or similar means.	An email, system notification, chat message or electronic transmission.
Electronic document	Electronic information that can establish a right, extinguish an obligation or prove a fact and that can be authenticated and used.	A PDF contract, electronic invoice, digital receipt or system-generated business record.
Electronic signature	An electronic mark, characteristic or method logically associated with a record and used to identify and authenticate or approve it.	A verified digital signature, platform signing process, typed name with reliable evidence, or another authenticated approval method.

The label used by a platform does not decide validity. What matters is whether the method and surrounding evidence can establish the signer, intent, integrity and reliability required for the transaction.

When Is an Electronic Signature Valid in the Philippines?

Section 8 of RA 8792 requires proof of a prescribed procedure that the parties interested in the document could not alter. Under that procedure, the method must identify the person and show access to the document for consent or approval; be reliable and appropriate for the transaction; require the signature before the person can proceed; and enable the other party to verify it and decide whether to proceed. A signature image alone does not establish that all these conditions were met.

A typed name, checked box, stylus signature, scanned signature or one-time-password confirmation may be relevant evidence, but none is automatically valid in every case. Higher-risk transactions require stronger identity, consent and integrity controls. For the focused legal test, see when electronic signatures are legally valid in the Philippines.

Are Online Contracts Legally Binding?

They can be. Section 16 of RA 8792 allows offer, acceptance and the other required contract elements to be expressed and proved electronically, unless the parties agreed otherwise. Electronic form alone is not a ground for invalidity. Consent, a lawful object and a cause must still exist, and Section 7 preserves formalities required by other laws.

Illustrative Philippine example, not a reported case: A Cebu shop accepts a supplier’s emailed quotation. Separate three questions: what terms were accepted; who sent the acceptance and whether that person had authority; and whether this type of transaction requires a special form. Keep the full email thread, the exact quotation and performance records. If the supplier instead pastes the shop owner’s signature onto a later version, the image does not by itself prove assent to the revised terms. See the online-contracts guide.

What Businesses Should Do to Rely on Electronic Transactions

Identify the exact transaction. Determine whether another law requires notarization, witnesses, registration, a particular form or a government-prescribed process.
Make the terms accessible before acceptance. Do not hide material terms behind unclear links or present them only after payment.
Capture affirmative assent. Record the click, signature, OTP, approval step or other deliberate action used to accept.
Verify the person at an appropriate level. Match the strength of identity checks to the financial, privacy and legal risk.
Protect record integrity. Use tamper-evident logs, controlled access, versioning and reliable timestamps.
Retain the complete record. Preserve the terms, signed or accepted version, transaction data, communications and audit trail in an accessible form.
Plan for disputes. Make it possible to export and explain the record without depending on a disappearing link or a single employee account.
Check the other applicable laws. Electronic recognition under RA 8792 does not replace duties under consumer, privacy, cybercrime, tax, financial, procurement or sector-specific rules.

Can you still explain the transaction after leaving the platform?

Before changing providers, closing an account or relying on a disputed transaction, try this practical export check. It is an editorial recordkeeping aid, not a statutory checklist or a guarantee of admissibility.

Question to test	What to inspect in your export	If it is missing
Which version was accepted?	The complete accepted document and attachments, tied to the transaction or signing identifier.	Request the accepted version rather than substituting today’s terms or a later draft.
Who acted, and how is that known?	The signing or acceptance event, identity checks and any record of representative authority.	Record the uncertainty; an account name or signature image alone may leave identity or authority disputed.
Can the record be opened and checked independently?	A readable export, its source format where available, audit trail and information needed to check integrity.	Request an accessible export and an explanation of the system. Keep the original download unchanged.
What was sent, to whom and when?	Originator, addressee, timestamps with time zone, and available sending or receipt records.	Preserve the gap and request the relevant record; do not invent a delivery or receipt time.

RA 8792, Sections 12–13 distinguish evidential weight from electronic form and address accessible, accurate retention with originator, addressee and timing information. The Rules on Electronic Evidence, Rules 5 and 7 separately address authentication and reliability. Passing this practical check does not decide contract validity, satisfy every special form or establish every evidentiary requirement.

Copyable transaction-record handoff

Transaction / signing identifier:
Document and terms version:
Parties and representative authority:
Acceptance method and event time / time zone:
Files exported / original source:
Export date and person who performed it:
Available audit trail and integrity information:
Sending / receipt records:
Missing records or disputed facts:
Custodian who can explain the system:
Secure storage location and access restrictions:

Use one note per transaction. Do not include passwords, live OTPs or private signing keys. Keep originals securely, share only relevant copies, and use the preservation and authentication guides below if the transaction is disputed. If special execution or filing requirements may apply, check those before relying on the electronic record.

Evidence to Preserve

the original native electronic file, not only a printout or screenshot;
metadata, hashes or other integrity information available from the system;
the exact contract or terms version shown to the user;
date, time, origin, destination and transmission records;
identity-verification, OTP, certificate or signing-platform audit records;
emails, messages and notices surrounding the transaction;
payment, delivery, access and performance records;
system logs, access controls and retention procedures; and
an export or backup independent of a platform that may later delete or restrict access.

Legal recognition is different from proof. Under the Supreme Court’s Rules on Electronic Evidence, a private electronic document offered as authentic must be authenticated through a digital signature, an authorized security procedure or other evidence of integrity and reliability satisfactory to the court.

RA 8792, RA 11967, RA 10175 and the Data Privacy Act

Law	Main role	When it becomes relevant
RA 8792 — Electronic Commerce Act	Legal recognition of electronic records, signatures and transactions.	When a digital record, signature, contract, retention method or government e-transaction is involved.
RA 11967 — Internet Transactions Act	Online merchant, platform and consumer-protection framework.	For covered business-to-business and business-to-consumer internet transactions connected to the Philippine market.
RA 10175 — Cybercrime Prevention Act	Cybercrime offenses, enforcement and related rules.	When conduct involves illegal access, data interference, computer-related fraud or other covered cybercrime. RA 10175, Section 30, modified Section 33(a) of RA 8792, the original hacking provision.
RA 10173 — Data Privacy Act	Lawful processing and protection of personal data.	When the transaction collects, uses, stores, shares or secures personal information.

RA 11967 does not replace RA 8792. Section 3 of RA 11967 covers business-to-business and business-to-consumer internet transactions within DTI’s mandate with the specified Philippine connection; it excludes online media content and consumer-to-consumer transactions. A personal, non-business resale can therefore fall outside RA 11967 while its messages and electronic agreement still raise RA 8792 questions. See the Internet Transactions Act guide.

Does RA 8792 Apply to Government Transactions?

Yes. RA 8792 provides a legal foundation for government use and acceptance of electronic data messages, documents, signatures, payments, permits and approvals. The Act also allows agencies to prescribe their own format, security, signature and filing requirements. A person must therefore follow the specific portal and rules of the agency involved; RA 8792 is not permission to submit any document in any electronic format.

What Unlawful Acts Does RA 8792 Address?

Section 33 addresses unlawful conduct involving electronic transactions, including specified forms of piracy or infringement and violations of consumer laws through electronic transactions. Its original hacking provision was later modified by RA 10175. For current cybercrime exposure, do not rely on the text of RA 8792 alone; read it together with the Cybercrime Prevention Act and any applicable intellectual-property or consumer law.

Frequently Asked Questions

Is RA 8792 still in force?

Yes. It remains the foundational Philippine electronic-transactions statute. Later laws supplement or modify parts of the legal framework.

Does RA 8792 apply only to online shopping?

No. Its scope includes commercial and non-commercial electronic data messages and documents, not only retail purchases.

Does RA 8792 make every electronic document valid?

No. It prevents rejection merely because a record is electronic. The underlying transaction, required form, authenticity and evidence rules still matter.

Is a typed name a valid electronic signature?

It can be, but context is critical. There should be reliable evidence linking the name to the person and showing an intention to approve or authenticate the record.

Is a scanned handwritten signature automatically valid?

No. A scan may show a signature image, but a dispute may still concern who placed it, whether the document changed and whether the signer intended to approve that version.

Are clickwrap agreements enforceable?

They may be enforceable when the terms are reasonably presented and the user takes a clear action showing assent. Poor notice, hidden terms or weak records can undermine proof.

Is an email agreement legally binding?

It can be if the emails establish the required elements of a contract and no special legal form is required. Identity, authority, intent and the full thread should be preserved.

Is a screenshot admissible as electronic evidence?

A screenshot may be offered as evidence, but it does not prove itself. The proponent may need to establish authenticity, completeness and reliability, particularly when the other party disputes the account, context or alteration.

Does an electronic contract need notarization?

Not every contract requires notarization. If a particular transaction must be notarized, registered or executed in a special form, electronic execution alone does not remove that requirement.

Does RA 11967 replace RA 8792?

No. RA 11967 governs covered internet transactions and platform or merchant duties, while RA 8792 supplies the broader electronic-document and electronic-signature foundation.

Does RA 8792 set one retention period for all electronic records?

No. Retention periods may come from tax, corporate, employment, financial, privacy, procurement, litigation or sector-specific rules. Businesses should create a record schedule based on the law governing each record type.

Can a foreign platform be covered by Philippine e-commerce rules?

Potentially. RA 11967 covers certain transactions where a party is situated in the Philippines or a platform or merchant avails of the Philippine market and has the required minimum contacts. The facts and the regulated activity matter.

Related CyberCode Guides

Official Sources

Disclaimer

Important: This article provides general educational information about Philippine law, regulation, cybersecurity, technology and business compliance. It is not legal advice and does not create an attorney-client relationship. Laws, agency procedures, technical standards, platform rules and the facts of each situation may change the result. Verify current requirements through the cited official sources and seek qualified professional advice when your rights, deadlines, money, safety or legal exposure may be affected.

Republic Act No. 8792 (RA 8792): Electronic Commerce Act