Latin America: from state certificates to tiers.
How signature laws evolved across the region.
Latin America legislated early on electronic signatures. Between 1999 and 2002, Colombia, Peru, Argentina and Chile already had their own laws, and Mexico amended its Commercial Code in 2003. Two decades later, the regional map shows an evolution with a common direction: from the certificate as the only form of signature with full legal value toward tiered schemes that are more flexible and closer to those of other regions.
First generation: the digital signature at the center
The first laws drew on the 1996 UNCITRAL Model Law and on public key infrastructure. Many distinguished a "digital signature," based on certificates issued by providers accredited by the State, from a generic "electronic signature" with lower evidentiary weight.
| Country | Law | Central feature |
|---|---|---|
| Colombia | Law 527 of 1999 | Closely follows the UNCITRAL model law: data messages, digital signatures and certification entities. |
| Peru | Law 27269 of 2000 | Law on digital signatures and certificates. |
| Argentina | Law 25,506 of 2001 | A digital signature is presumed to belong to the certificate holder; whoever relies on an electronic signature must prove its validity. |
| Chile | Law 19,799 of 2002 | Distinguishes the electronic signature from the advanced electronic signature. |
| Mexico | 2003 amendment and 2012 law | Electronic signatures in the Commercial Code, and a law on advanced electronic signatures for the public sector. |
| Uruguay | Law 18,600 of 2009 | Electronic signature and advanced electronic signature, the latter given the same standing as a handwritten one. |
Second generation: levels and trust services
Over time, two pressures emerged. On one hand, certificate based signatures proved hard to use at mass scale. On the other, the European experience showed the advantages of a scheme with several levels and trust services beyond the certificate. Brazil's Law 14,063 of 2020 is a good example: it defined three levels, simple, advanced and qualified, and linked them to different types of interaction with the State. Uruguay, for its part, introduced remote signing with centralized custody in 2018.
- Explicit levels. More intermediate categories between simple and qualified.
- Remote signing. The certificate no longer lives on a card but is held in custody by a service.
- New services. Timestamps, digital identification and preservation as regulated services.
- National digital identity. Chip based identity documents and official apps that can be used to authenticate and sign.
Third generation: recognition between countries
The current challenge is getting signatures and identities to cross borders. The Mercosur mutual recognition agreement, signed in 2019, and regional digital identity initiatives point in that direction. The conceptual foundation remains UNCITRAL's: what matters is not where a signature was issued, but whether it offers an equivalent level of reliability.
The laws cited have since been amended and supplemented by regulations; the table summarizes their original feature.
Latin America legislated early, with laws centered on the certificate based digital signature. The second generation added levels, remote signing and trust services, as Brazil's 2020 law shows. The third seeks recognition between countries. In all of them, the underlying question is the same: what level of trust each act deserves.
Sources
- Colombia, Law 527 of 1999
- Peru, Law 27269 on digital signatures and certificates, 2000
- Argentina, Law 25,506 on digital signature, 2001
- Mexico, Advanced Electronic Signature Law, 2012
- Brazil, Law 14,063 of 2020 on electronic signatures
- Uruguay, Law 18,600 on electronic documents and electronic signature, 2009
- UNCITRAL Model Law on Electronic Commerce, 1996