Article 20 of the Saudi Electronic Transactions Law
المادة 20 من نظام التعاملات الإلكترونية · الفصل السابع: واجبات مقدم خدمات التصديق ومسؤولياته
A certification services provider guarantees the validity of the certified information in the certificate at the time of delivery and the validity of the link between the holder and their electronic data, and is liable for harm to anyone who relied on it in good faith.
Official text (Arabic)
This article has not been amended since the law was issued.
يتحمل مقدم خدمات التصديق مسؤولية ضمان صحة المعلومات المصدقة التي تضمنتها الشهادة وقت تسليمها وصحة العلاقة بين صاحب الشهادة وبياناتها الإلكترونية، وتقع عليه مسؤولية الضرر الذي يحدث لأي شخص وثق بحسن نية بصحة ذلك.
This is the official Arabic wording, the only legally binding version. We do not translate the law itself; the explanation below is ours. Official source: Bureau of Experts at the Council of Ministers
Article 20 explained in plain English
This article sets out the liability of the certification services provider toward those who rely on the certificates it issues, and rests on two things:
First - what the provider guarantees:
- the validity of the certified information contained in the certificate at the time of its delivery.
- the validity of the relationship between the certificate holder and the certificate's electronic data, that is, that the certificate genuinely belongs to the person to whom it is attributed.
Second - liability for harm: the provider is liable for the harm that occurs to any person who relied in good faith on the validity of this. The protection is not limited to the certificate holder, but includes third parties who relied on the certificate, provided they acted in good faith.
Note: the guarantee relates to the validity of the information at the time of delivery of the certificate. What arises afterwards as grounds to revoke or suspend a certificate is dealt with by Article 21, which makes the provider liable for harm resulting from not suspending or revoking the certificate.
Anyone harmed by an incorrect certificate would do well to consult a lawyer specializing in civil matters and compensation, or in electronic transactions.
Practical example
A company in Dammam signed an electronic contract with a person on the strength of a digital certificate stating that he was authorized on behalf of a certain establishment, and it later emerged that the information certified in the certificate was not correct when it was delivered. If the company relied on the certificate in good faith, the certification services provider bears liability for the harm the company suffered.
Translated from our Arabic explanation with machine assistance. For guidance only; it does not replace advice from a lawyer on your situation.
How we write and review contentA question about Article 20 of Electronic Transactions Law?
Describe what happened and specialist lawyers answer. You can write in English.
- Completely free
- Lawyers from the directory answer
- Your name stays hidden
Civil Litigation & Compensation lawyers: ask a specialist about your case
Describe your situation briefly and we'll suggest a lawyer who specialises in this law
Civil Litigation & Compensation lawyers
Lawyers who handle this kind of case
Dr. Ali Al-Rubaie Law Office and Ittihad Al-Asr Legal Company
Active contributorUnwan Law Firm
Frequently asked questions about Article 20 of the Saudi Electronic Transactions Law
Is a certification services provider liable for errors in a certificate?
Yes. It is responsible for guaranteeing the validity of the certified information in the certificate at the time of delivery and the validity of the relationship between the holder and the certificate's electronic data.
Can someone other than the certificate holder claim compensation?
Yes. The provider is liable for the harm that occurs to any person who relied in good faith on the validity of the certificate.
Is good faith required for compensation?
Yes. The article provides for liability for harm to any person who relied in good faith on the validity of that.
More articles on Certification Services and Digital Certificates
- Article 15
The article divides oversight of the Law: the Ministry sets policies and plans and represents the Kingdom; the Authority applies the Law, licenses and monitors certification services providers, and sets the fee with the Minister's approval.
يتم الإشراف على تطبيق أحكام هذا النظام وفقا للآتي: 1 - تقوم الوزارة بوضع السياسات العامة ورسم الخطط والبرامج التطويرية للتعاملات والتواقيع الإلكترونية ، ورفع مش
- Article 16
The article establishes a National Center for Digital Certification in the Ministry to oversee the tasks of issuing and managing digital certification certificates, and refers the details of its seat, composition and competences to the Regulations.
1- ينشأ في الوزارة - بموجب هذا النظام - مركز وطني للتصديق الرقمي، يتولى الإشراف على المهمات المتعلقة بإصدار شهادات التصديق الرقمي وإداراتها. 2- تحدد اللائحة الق
- Article 17
The National Center for Digital Certification is competent to approve digital certification certificates issued by foreign bodies, which are treated like their domestic counterparts in accordance with the Regulations' controls and procedures.
يختص المركز باعتماد شهادات التصديق الرقمي الصادرة من الجهات الأجنبية خارج المملكة وتعامل هذه الشهادات معاملة نظيراتها بداخل المملكة، وذلك وفقا للضوابط والإجراءا
- Article 18
The article lists eight obligations of a certification services provider, including prior licensing, issuing and protecting certificates, an accessible database, confidentiality, and handing documents to the Authority when its activity stops.
يجب على مقدم خدمات التصديق الالتزام بما يأتي: 1 - الحصول على الترخيص اللازم من الهيئة قبل البدء في ممارسة نشاطه. 2 - إصدار شهادات التصديق الرقمي ، وتسليمها وحفظ
- Article 19
A certification services provider may not stop its licensed activity, assign its license or merge into another entity without the Authority's prior written approval, in accordance with the Regulations' procedures.
لا يجوز لمقدم خدمات التصديق التوقف عن مزاولة نشاطه المرخص به أو التنازل عن الترخيص الصادر له أو الاندماج في جهة أخرى إلا بعد الحصول على موافقة كتابية مسبقة من ا
- Article 21
A certification services provider must revoke or suspend a certificate at its holder's request or in the cases the Regulations set, notify the holder immediately and lift the measure when its cause ends, and is liable for harm to good-faith persons.
يجب على مقدم خدمات التصديق إلغاء الشهادة أو إيقاف العمل بها عند طلب صاحبها ذلك أو في الحالات التي تحددها اللائحة. كما يجب عليه إبلاغ صاحب الشهادة فورا بالإلغاء
The texts are reproduced from the official website of the Bureau of Experts at the Council of Ministers for reference; where they differ, the officially published Arabic text prevails. This content is not legal advice.

