Judges and electronic signatures definitely do not mix well

Date :

On April 20, 2023, the Versailles Court of Appeal issued a decision (RG No. 22/04814) by which it recognized the validity of the electronic signature of an account agreement concluded between the Caisse de Crédit Mutuel d'Erquy-Pleneuf and a consumer, but on the basis of a totally astonishing motivation.

The account agreement showed a debit balance of around €10,000 and it was the consumer who appealed, claiming that he had never signed the agreement and that he had been the victim of identity theft.

In support of its claims, the bank produced a Docusign/protect&Sign proof file, which includes the standard statements of this type of document and clearly corresponds to an advanced signature, in which the authentication of the signatory is based on an email address and a telephone number transmitted on a declarative basis.

The Court, reversing the burden of proof, decided that it was up to the consumer to demonstrate the unreliability of the process whereas, since it was clearly an unqualified signature (document not presumed reliable), it was on the contrary up to the bank to demonstrate its reliability...

This is a very troubling decision, demonstrating once again the lack of understanding of the subject by both non-specialist counsel and judges. Beyond this case, it does not send a good signal about how future disputes are likely to be handled by the courts.

Also read

Date :
Under French law, the definition of an electronic signature (Art. 1367 Al.2 Civil Code) implies a "link" between the act and the signature identifying its author. This notion of link is also found in the definition of the advanced signature in the European eIDAS Regulation (Art. 26) which states that the advanced signature must be "unequivocally linked to the signatory". But the meaning of this link is not obvious. We believe that it can be understood according to three approaches: a conceptual approach that projects onto the electronic signature a characteristic of the handwritten signature; a technical approach defining it via the electronic signature technology; and finally an opportunistic approach linked to the development of the on-the-fly certificate and the notion of evidence file, widely adopted by French judges.
Date :
Most contracts concluded by banking institutions are now signed electronically. And this has many advantages: speed of execution, optimized process and document management, close customer experience... But identity fraud is on the rise in the field of consumer credit, and in four recent cases, the courts of appeal have pointed out some weaknesses in the current procedures.
Date :
The NIS2 directive soon to be transposed in France, the CRA regulation on cybersecurity, and the DORA regulation on the cyber resilience of the financial sector are either already in force or in the process of being in force. They organize a cybersecurity ecosystem that almost all SaaS publishers must comply with, at the cost of a fairly considerable compliance effort: complex texts to decode, notification obligations in all directions, documentation, operational implementation, etc. To begin with, we give you what you need to know about their applicability to your service