The ESIGN Act and UETA, Explained

Two laws make electronic signatures work in the United States, and almost every explanation of them stops at "yes, e-signatures are legal." That is true but not very useful. The interesting parts are how the federal and state statutes divide the work, what the four validity requirements actually demand, and the extra set of rules that applies the moment a consumer is involved.

This is a companion to our overview of whether electronic signatures are legally binding, which covers the EU, UK, and other jurisdictions. Here we stay in the US.

What the ESIGN Act actually says

The Electronic Signatures in Global and National Commerce Act was signed on 30 June 2000 and took effect on 1 October 2000. Its central provision is narrow and negative: a signature, contract, or other record relating to a transaction in or affecting interstate or foreign commerce may not be denied legal effect, validity, or enforceability solely because it is in electronic form.

That phrasing matters. ESIGN does not declare electronic signatures valid. It removes electronic form as a reason to invalidate something that would otherwise be enforceable. If a contract fails for lack of consideration, or because nobody agreed to its terms, it still fails — being electronic neither rescues nor dooms it.

The statutory definition of an electronic signature is deliberately broad:

an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record

Three things follow from that. A signature need not look like handwriting. It need not be an image at all — a recorded voice or a logged process can qualify. And intent, not technology, is the operative element.

UETA and how the two laws divide the work

The Uniform Electronic Transactions Act came first. The Uniform Law Commission drafted it in 1999 as a model for states to enact, and it has since been adopted by 49 states. New York did not adopt UETA but reached an equivalent result through its own Electronic Signatures and Records Act.

UETA covers transactions within a state's own law. ESIGN reaches transactions in or affecting interstate or foreign commerce. Because almost all meaningful commerce touches interstate activity somewhere, the two overlap heavily in practice.

Where they overlap, ESIGN preempts inconsistent state law — but with an important carve-out. ESIGN expressly steps aside where a state has enacted UETA without material variation from the official text. The result is a floor rather than a ceiling: UETA does most of the day-to-day work, and ESIGN guarantees that no state can drop below the federal baseline. For most businesses the practical consequence is that you do not need to determine which statute governs a given document, because both point to the same four requirements.

The four requirements, in detail

Every summary lists intent, consent, association, and retention. Here is what each one asks for.

Intent to sign

The signer must mean to sign. This is the same standard applied to ink, and it is usually the easiest to satisfy and the easiest to undermine. A signature field the user had to deliberately complete demonstrates intent. A checkbox pre-ticked by default, or a name auto-filled into a document the user never opened, does not.

Intent is also why the mechanism is irrelevant. Drawing a signature, typing a name, and clicking a clearly labelled button are equally valid, because each can evidence the same decision.

Consent to transact electronically

All parties must have agreed to do business electronically. Between commercial parties this is almost always implied by conduct — if a counterparty emails you a contract and you sign and return it electronically, consent is established on both sides.

Consumers are different, and that difference is covered separately below.

Logical association with the record

The signature must be tied to the specific record it signs. A signature burned into the page of a PDF is associated by construction. A signature held in a separate system is associated by whatever links the two, which is why audit records generally reference a document hash or identifier rather than just a filename.

Retention and reproduction

A signed copy must be retainable and accurately reproducible by everyone entitled to one. UETA addresses this directly: an electronic record satisfies a law requiring retention if it accurately reflects the information and remains accessible to those entitled to it. Notably, a record that cannot be reproduced later can fail this requirement even though the signature itself was valid when made.

The extra rules for consumer transactions

This is the part most guides omit, and it is the part most likely to cause a real problem.

Where some other law requires that information be provided to a consumer in writing, ESIGN section 101(c) allows an electronic record to substitute only if a specific set of conditions is met. The consumer must affirmatively consent to receiving the record electronically. Before consenting, they must receive a clear and conspicuous statement of their rights, including the right to obtain a paper copy and whether a fee applies, whether consent covers one transaction or an ongoing relationship, and how to withdraw consent. They must also be told the hardware and software required to access and retain the records, and be notified if those requirements later change in a way that creates a material risk of losing access.

None of this applies to ordinary business-to-business contracts. It applies when a statute or regulation independently requires a written disclosure — think consumer lending, insurance, and many landlord-tenant notices. Getting the signature right while getting the disclosure wrong is a common and avoidable failure.

Do electronic signatures need to be witnessed?

For ordinary contracts, no. Neither ESIGN nor UETA imposes any witnessing requirement, and neither adds one that would not otherwise exist.

Witnesses are required only where a separate law demands them for that particular instrument. The clearest example is a will, which under most state laws must be signed in the presence of two witnesses — and wills are excluded from both statutes in any case. Some powers of attorney and a handful of real-property instruments carry similar requirements that vary by state.

Notarization is a related but distinct question. UETA provides that where a law requires a signature to be notarized, the requirement is satisfied if the notary attaches all the information they would otherwise include. Most states have since gone further and enacted remote online notarization statutes that let a notary act over live audiovisual link. That is a state-by-state matter and worth confirming for the jurisdiction the document will be used in.

What ESIGN and UETA do not cover

Both statutes carve out categories where electronic form is not enough. ESIGN excludes wills, codicils, and testamentary trusts; adoption, divorce, and other family law matters; most of the Uniform Commercial Code; and court orders, notices, and official court documents.

A second group is excluded from the consumer-consent provisions specifically: notices cancelling utility service, default, foreclosure, repossession, and eviction notices, cancellation of health or life insurance benefits, product recall notices affecting health or safety, and documents required to accompany hazardous or toxic materials.

Courts are also a special case in a practical sense. Many operate their own electronic filing systems with their own signature rules, and an ad hoc electronic signature that would be fine on a commercial contract may simply not be accepted on a filing.

For everything else — NDAs, employment offers, sales and service agreements, consulting contracts, partnership agreements, purchase orders — electronic signatures are routine and enforceable.

What this means in practice

If you are signing a document sent to you, the four requirements are almost certainly satisfied by the act of signing and returning it. You can sign a PDF in your browser without uploading it anywhere and email it back.

If you are the party collecting signatures, the requirements shift from "was this signed" to "can I prove it was signed." That means capturing who signed, when, and from where, and keeping a reproducible copy — which is the argument for a tamper-evident audit trail rather than an emailed file. And if consumers are involved and a written disclosure is independently required, build the section 101(c) consent flow before you worry about the signature itself.

---

This article is general information, not legal advice. Requirements vary by document type and jurisdiction; consult a qualified attorney for your specific situation.

Ready to send documents for signature with a full audit trail? Create a free Signvoy account — no credit card required.