← Global Privacy Laws Research Library

Iran
LawCurrent· Islamic Consultative Assembly (Parliament of Iran)

Electronic Commerce Act of the Islamic Republic of Iran

Prepared by Shubhank Suman · Last reviewed

CURRENT / IN FORCE

Legal character
Statute
Region
Middle East

What it covers

The Act sets the legal framework for electronic commerce: legal recognition of data messages, originators and addressees, secure information systems and methods, simple and secure electronic signatures, certification service providers, consumer protection in distance contracts, protection of personal (private) data messages, intellectual property in electronic form, and offences and penalties.

Why it matters

It is the main Iranian statute containing rules on protecting personal data in electronic form.

Refer to it when

Use it for electronic contracts, e-signatures, online consumer contracts or handling personal data messages in Iran.

AI, privacy and cybersecurity relevance

  • AI: Low
  • Privacy: Moderate
  • Cyber: High

AI

LOW RELEVANCE

No AI-specific provisions.

Privacy

MODERATE RELEVANCE

Contains personal-data rules for electronic data messages; Iran has no comprehensive data-protection statute in this library.

Cybersecurity

HIGH RELEVANCE

Secure information systems, signatures and computer offences.

Applicability

Electronic commerce and data-message transactions in Iran.

Current validity

CURRENT. The supplied English translation does not show its approval date; it is listed here under 2004. Read the official PDF on this page for the operative text.

Read first

Article 1 (scope) → Article 2 (definitions) → electronic signature provisions → consumer protection → personal data protection → offences.

Provisions / sections covered

Article 1 – Scope

Sets rules for exchanging information in the form of data messages securely and easily.

Article 2 – Definitions

Defines data message, integrity, information system, secure method, electronic signature, consumer, supplier, distance contract and private data.

Personal data protection

Storing, processing or distributing personal data messages requires the data subject's consent and must meet purpose and accuracy conditions.

Offences

Criminal penalties apply to unlawful processing of personal data messages and computer fraud and forgery.

Subject-matter tags

  • Lawful basis
  • Consent
  • Enforcement and penalties

Subject-matter tags describe what the indexed text discusses. They are not legal conclusions.

Related instruments in this library

Document page in the Knowledge Base - full text or PDF where it is available for this record.

This library locates primary and official sources. It does not interpret the law and it is not legal advice.