E-commerce is a rapidly expanding sector all over the world. While this is apparently good news to the world’s consumers and business companies, it is creating big challenges to information security experts and legal experts. The forme r are striving to develop and implement technical solutions that can deter, detect, react and/or provide recovery measures from an attack. On the other hand, legal experts are working hard to ensure that e-business is conducted in a legally acceptable manner. In this paper, we focus on legal aspects of IT security in e-commerce environment. Specifically, we discuss the legal ramifications of e-procurement including privacy issues, electronic signature interpretation in different jurisdictions, and Intellectual Property Rights (IPR) handling in ecommerce. We conclude by suggesting three different approaches to address legal-IT related security problems in e-commerce.