Under the Electronic Signatures in Global and National Commerce Act, a business can substitute an electronic disclosure for a legally required written one only after it obtains your consumer consent for electronic disclosures through the specific process laid out in 15 U.S.C. § 7001(c). That process is more than a checkbox. It requires a detailed upfront notice, a statement of the hardware and software you’ll need, consent that actually shows your device can open the files, and a fresh round of consent every time the company changes its technology in a way that could shut you out.
What the Pre-Consent Notice Must Tell You
Before any legally required disclosure moves from paper to a screen, the business has to hand you a notice covering a fixed set of points. Miss one, and the electronic records that follow may not satisfy the underlying “in writing” requirement.
The notice has to tell you whether you have the right to receive the information on paper instead. It must explain how to withdraw consent later, how to update your contact information so the company can keep reaching you, and what fees, if any, apply to a withdrawal. If the company charges a paper-statement surcharge or similar cost, that number belongs in this notice, not buried in a separate terms document.
The notice also has to spell out the consequences of withdrawing. The statute lets a business go as far as ending the relationship, so if a bank would close your account or a service would drop an online-only rate, that has to be on the table before you agree. And the notice must explain how you can later request a paper copy of any electronic record, and whether there’s a fee for one.
All of this has to be “clear and conspicuous.” A single line on page fourteen of a terms agreement doesn’t meet the standard.
The Hardware and Software Statement
Along with the consent notice, the company must give you a plain description of the hardware and software you’ll need to access and retain the records. PDFs require a reader and an internet connection. A proprietary portal requires specified browsers and operating systems. Whatever the format, the specs go to you before you agree, not after, so you can decide with your actual device in front of you.
How Consent Actually Has to Be Given
This is where E-SIGN diverges from ordinary online agreements. Checking a box that says “I have read the terms” is not enough. Your consent has to “reasonably demonstrate” that you can access information in the electronic format the company intends to use. It’s a functional test, not a promise.
In practice, that often means the company sends a test document in the same format it will use later and asks you to confirm something from inside that file. If you can open it and answer, your technology has proved itself. Federal guidance has flagged this as the hardest part of E-SIGN compliance, especially for financial institutions, and companies are expected to document the whole process.
If the verification fails, the business cannot treat electronic delivery as satisfying a legal requirement that disclosures be in writing. Paper has to keep going out.
Withdrawing Consent
You can withdraw at any time. E-SIGN does not lock you into electronic delivery. Once the company receives your withdrawal, it has to take effect within a “reasonable period of time.” The statute doesn’t define that in days.
Withdrawal only runs forward. Electronic records delivered while your consent was active stay legally valid. From the withdrawal date on, though, the company has to revert to paper or whatever other method the underlying disclosure law accepts.
There’s a self-help feature worth knowing about. If a business fails to follow the rules that apply when it changes its technology, you can treat that failure as an automatic withdrawal of your consent. You don’t have to sue to force the company back to paper.
When the Company Changes Its Technology
Consent isn’t a one-time event. If the business later changes its hardware or software requirements in a way that creates a real risk you can no longer open or save your records, it has to notify you of the new requirements and remind you of your right to withdraw.
Two protections kick in at that moment. The company cannot charge a fee for withdrawing at this stage, and it cannot impose any consequence or condition that wasn’t already spelled out in the original pre-consent notice. A new early-termination charge, invented because you can’t run the new software, isn’t allowed.
After sending the updated notice, the business has to obtain fresh affirmative consent using the new technology, under the same “reasonably demonstrates” standard. Skip that step and later electronic disclosures may not satisfy the writing requirement.
Disclosures E-SIGN Won’t Cover Even With Consent
Some categories of documents sit outside E-SIGN entirely. Even flawless consent won’t move them online under this statute:
- Wills, codicils, and testamentary trusts.
- Adoption, divorce, and other state family-law matters.
- Court orders, notices, briefs, pleadings, and other official court filings.
- Notices of default, acceleration, repossession, foreclosure, or eviction tied to a primary residence.
- Cancellation or termination notices for utility services, including water, heat, and power.
- Notices canceling or terminating health insurance, health benefits, or life insurance benefits (other than annuities).
- Product recall notices and material-failure alerts involving health or safety.
- Documents that have to accompany the transport or handling of hazardous materials, pesticides, or other dangerous substances.
For any of these, the applicable state law, court rule, or agency rule sets the delivery method, not E-SIGN’s consent framework.
What Actually Breaks If the Business Skips a Step
Failing the consent process does not void the underlying contract. The statute is explicit that a contract can’t be denied legal effect just because the business mishandled the electronic-consent procedure. Your deal still stands.
What fails is the delivery. If consent wasn’t properly obtained, the electronic disclosures the company sent may not satisfy any legal requirement that the information be provided in writing. In banking, lending, and insurance, that gap is significant. A lender that cannot show it delivered a required disclosure in a valid format can face regulatory penalties, and the disclosure may be treated as if it was never delivered at all. The contract survives; the compliance record doesn’t.
How State Law Fits In
E-SIGN is federal, but 15 U.S.C. § 7002 leaves room for states to modify or override its provisions in two ways: by adopting the Uniform Electronic Transactions Act (UETA), which 49 states and the District of Columbia have enacted in some form, or by putting in place alternative procedures that stay consistent with E-SIGN and remain technology-neutral (no mandated platform or file format).
The practical result is that the rules governing your consent may come from both federal and state law at once. A UETA state may have slightly different procedural expectations, though the core structure holds: informed consent, a real technical capability check, and the right to withdraw. If you’re on the compliance side, checking your state’s UETA text alongside E-SIGN is where most of the implementation detail lives.