diff --git a/app/controllers/epp/domains_controller.rb b/app/controllers/epp/domains_controller.rb
index e14501521..41a5e6aa5 100644
--- a/app/controllers/epp/domains_controller.rb
+++ b/app/controllers/epp/domains_controller.rb
@@ -147,8 +147,6 @@ class Epp::DomainsController < EppController
 
     @prefix = nil
     requires_attribute 'transfer', 'op', values: %(approve, query, reject)
-
-    requires 'extension > extdata > legalDocument'
   end
 
   ## DELETE
diff --git a/doc/epp/domain.md b/doc/epp/domain.md
index e7ba283a4..c99f5e58b 100644
--- a/doc/epp/domain.md
+++ b/doc/epp/domain.md
@@ -144,9 +144,9 @@ Domain name mapping protocol short version:
                                       Attribute: hosts="all / TODO"
         <domain:authInfo>    1       
           <domain:pw>        1        Domain password. Attribute: roid="String"
-    <extension>              1     
-      <eis:extdata>          1        Attribute: xmlns:eis="urn:ee:eis:xml:epp:eis-1.0"
-        <eis:legalDocument>  1        Base64 encoded document.  
+    <extension>              0-1     
+      <eis:extdata>          0-1      Attribute: xmlns:eis="urn:ee:eis:xml:epp:eis-1.0"
+        <eis:legalDocument>  0-1      Base64 encoded document.  
                                         Attribute: type="pdf/bdoc/ddoc/zip/rar/gz/tar/7z"
     <clTRID>                 0-1      Client transaction id
 
diff --git a/spec/epp/domain_spec.rb b/spec/epp/domain_spec.rb
index c23e79b4c..14fbd7b98 100644
--- a/spec/epp/domain_spec.rb
+++ b/spec/epp/domain_spec.rb
@@ -856,7 +856,7 @@ describe 'EPP Domain', epp: true do
       create_settings
     end
 
-    it 'does not create a domain transfer without legal document' do
+    it 'creates transfer successfully without legal document' do
       pw = domain.auth_info
       xml = domain_transfer_xml({
         name: { value: domain.name },
@@ -865,9 +865,20 @@ describe 'EPP Domain', epp: true do
 
       login_as :registrar2 do
         response = epp_plain_request(xml, :xml)
-        response[:result_code].should == '2003'
-        response[:msg].should ==
-          'Required parameter missing: extension > extdata > legalDocument [legal_document]'
+        response[:msg].should == 'Command completed successfully'
+        response[:result_code].should == '1000'
+      end
+    end
+
+    it 'should not creates transfer without password' do
+      xml = domain_transfer_xml({
+        name: { value: domain.name }
+      })
+
+      login_as :registrar2 do
+        response = epp_plain_request(xml, :xml)
+        response[:msg].should == 'Authorization error'
+        response[:result_code].should == '2201'
       end
     end