The ESIGN Act: Validity, Consumer Consent, and Excluded Documents

The Electronic Signatures in Global and National Commerce Act, known as the ESIGN Act, is a federal law that gives electronic signatures and electronic records the same legal effect as handwritten signatures and paper documents in transactions involving interstate or foreign commerce. Signed into law on June 30, 2000, it is codified at 15 U.S.C. Chapter 96 and applies broadly to contracts, notices, and disclosures exchanged between parties in different states or across national borders.¹ The Act sets a federal floor rather than replacing state electronic signature laws, and it comes with specific consumer protections and a list of documents it doesn’t cover.

What Counts as an Electronic Signature

The statute defines an electronic signature as “an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record.”² That is deliberately broad. Typing your name into a signature field, clicking an “I Accept” button, drawing with a stylus on a touchscreen, and even a recorded voice confirmation can all qualify.

The law is technology-neutral by design. It does not require a specific platform, encryption standard, or authentication method. A signature captured through a simple email confirmation carries the same baseline legal recognition as one produced through an enterprise digital certificate system. What matters is whether the signer intended to sign and whether the signature is linked to the document it applies to.

What Makes an Electronic Signature Valid

The ESIGN Act’s core rule is straightforward: a signature or contract cannot be denied legal effect solely because it is in electronic form.³ But not being denied for that reason is not the same as being automatically valid. An electronic signature still has to satisfy the same requirements any signature would, plus a few that are specific to the digital setting.

Four elements do most of the work:

Intent to sign. The signer must have meant to execute the document. A stray click or an automated action the person never authorized does not meet the standard. Intent is built into the statutory definition itself.²
Logical association with the record. The signature must be attached to or connected with the specific document being signed. A signature floating in isolation from the contract terms does not work.
Attribution. It must be possible to link the signature to the person who made it. A contract formed through an electronic agent is valid as long as the agent’s action “is legally attributable to the person to be bound.” In practice, that means using some method to confirm identity: email verification, login credentials, IP address logging, multi-factor authentication.³
Consent to transact electronically. No one can be forced to use electronic records or signatures. The Act explicitly does not “require any person to agree to use or accept electronic records or electronic signatures.” Both parties must agree to do business digitally.¹

The stronger the methods used to prove these elements, the harder it becomes for someone to challenge the signature later. Capturing metadata such as timestamps, IP addresses, and a record of what the signer saw at the moment of signing is standard practice for businesses that rely on electronic agreements.

Extra Rules When the Signer Is a Consumer

When another law already requires that information be provided to a consumer in writing, the ESIGN Act allows electronic delivery to satisfy that requirement only after a specific consent process is completed. This is where the Act is most prescriptive.

What the Business Must Disclose Before Consent

Before obtaining consent, the business must give the consumer a clear statement covering several points: the right to receive the record on paper or in nonelectronic form, the right to withdraw consent at any time, and any conditions or fees that apply on withdrawal.³ The business must also tell the consumer what hardware and software they need to access and keep copies of the electronic records.

The disclosure has to specify whether the consumer’s consent covers only the immediate transaction or extends to an ongoing category of records throughout the relationship.⁴ A blanket consent at account opening does not automatically cover every future notice unless the disclosure said so.

The Reasonable Demonstration Step

Consent must be given electronically in a way that “reasonably demonstrates” the consumer can access the electronic format the business plans to use.³ A checkbox alone is not enough. If records will be sent as PDFs, the act of consent needs to show the consumer can actually open a PDF. Many platforms handle this by requiring the consumer to open and respond to a test document.

Withdrawal and Hardware Changes

A consumer can withdraw consent at any time, and the business must clearly explain how. If the business later changes its technology requirements in a way that could prevent the consumer from accessing records, the business must notify the consumer and give them the right to withdraw consent without any fee or penalty.⁴

What Happens If the Consent Steps Are Skipped

Skipping consent does not automatically void the underlying contract. The statute specifically says a contract “shall not be denied” validity “solely because of the failure to obtain electronic consent or confirmation of consent.”³ The contract may still stand on other grounds. But if the business fails to disclose updated hardware or software requirements, the consumer can treat that failure as a withdrawal of consent, and the business can no longer rely on electronic delivery to satisfy any legal writing requirement for that consumer.

Documents and Notices the Act Does Not Cover

Several categories fall outside the ESIGN Act’s electronic validity protections. These break into document types governed by other bodies of law and specific notices where a missed message could cause serious harm.

Excluded Document Types

Wills, codicils, and testamentary trusts.⁵
Adoption, divorce, and other family law matters.
Most of the Uniform Commercial Code, though Articles 2 and 2A (the sale and lease of goods) remain covered.⁵
Court orders, briefs, pleadings, and other documents required in connection with court proceedings.⁶
Documents required to accompany the transportation or handling of hazardous materials, pesticides, or other dangerous substances.

Excluded Notices

Certain notices affecting people’s homes, health, and safety must be delivered by means other than those the ESIGN Act validates:

Cancellation or termination of utility services such as water, heat, or power.⁵
Default, acceleration, repossession, foreclosure, eviction, or the right to cure under a credit agreement or a rental agreement for a primary residence.¹
Cancellation of health insurance, health benefits, or life insurance benefits (annuities are not included in the exclusion).⁵
Product recalls or notices of material failures that could endanger health or safety.

The exclusion of wills is often misread as a nationwide ban on electronic wills. It is not. It only means the ESIGN Act itself does not validate them. State legislatures can authorize electronic wills through their own probate laws, and several have done so, starting with Nevada in 2001.

How the Act Interacts With State Law

The relationship between the ESIGN Act and state electronic signature laws is cooperative. A state law can override the ESIGN Act’s provisions if the state has adopted the Uniform Electronic Transactions Act (UETA) as approved by the National Conference of Commissioners on Uniform State Laws in 1999.⁷ Forty-nine states, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands have adopted UETA. New York is the sole holdout and operates under its own Electronic Signatures and Records Act.

There is a guardrail even for UETA states. If a state enacts rules requiring or giving preferential legal status to a specific technology for creating or authenticating electronic signatures, the ESIGN Act preempts those rules.⁷ A state cannot, for example, mandate that only blockchain-based signatures are valid. Technology neutrality runs through the entire framework.

For businesses that operate across state lines, the practical result is that an electronic signature formed under one state’s law is recognized in nearly every other. Differences between states usually involve specific transaction types or notarization rules, not the core validity of electronic signatures.

Keeping Electronic Records

When another law requires that a contract or record be retained, the ESIGN Act says an electronic copy satisfies that requirement if two conditions are met: the electronic record accurately reflects the original information, and it remains accessible to everyone legally entitled to see it for the retention period the other law requires.³ The record must also be stored in a form that can be accurately reproduced later, whether by printing, downloading, or transmitting.

The Act does not set its own retention timeline. It defers to whatever other statute, regulation, or rule of law establishes the period.⁸ A tax record might need to be kept for seven years; a real estate document for decades. The obligation is ongoing. If a record becomes unreadable or inaccessible before the retention period ends, it no longer satisfies the law, no matter how compliant the original storage was.

Proving a Signature If It’s Challenged

Having a valid electronic signature and proving it was valid in a dispute are two different problems. The ESIGN Act establishes that electronic signatures cannot be rejected solely for being electronic, but it does not spell out detailed evidentiary rules.

When someone claims their electronic signature was forged, the party trying to enforce the contract generally bears the burden of proving the signature is authentic. That is why identity verification at the point of signing matters as evidence, not just as procedure. Multi-factor authentication, email confirmations, and knowledge-based verification each strengthen the record. So does capturing an audit trail: the signer’s IP address, timestamps for each step, the exact version of the document presented, and the method used to verify identity. Organizations that collect this information as a matter of routine have a much easier time defending a signature that is later challenged.

International Transactions

The ESIGN Act covers transactions “in or affecting interstate or foreign commerce,” which means it applies when a U.S. party enters into an electronic agreement with a foreign counterpart.³ The signature also has to be valid under the other country’s law, which is where things get more complicated.

The European Union operates under the eIDAS Regulation, which takes a different approach. Where the ESIGN Act treats all electronic signatures equally regardless of the technology used, eIDAS creates a tiered system of “simple,” “advanced,” and “qualified” electronic signatures, each carrying different levels of legal presumption.⁹ A qualified electronic signature under eIDAS has no special legal status in the United States, and a standard ESIGN-compliant signature may not meet the requirements for a qualified signature in the EU. Businesses with cross-border contracts should assess compliance with both frameworks independently rather than assuming one satisfies the other.

1
Office of the Law Revision Counsel. 15 U.S.C. Chapter 96 – Electronic Signatures in Global and National Commerce
2
Office of the Law Revision Counsel. 15 U.S.C. 7006 – Definitions
3
Office of the Law Revision Counsel. 15 U.S.C. 7001 – General Rule of Validity
4
Federal Deposit Insurance Corporation. The Electronic Signatures in Global and National Commerce Act (E-Sign Act)
5
Office of the Law Revision Counsel. 15 U.S.C. 7003 – Specific Exceptions
6
Office of the Law Revision Counsel. 15 U.S.C. 7003 – Specific Exceptions
7
Office of the Law Revision Counsel. 15 U.S.C. 7002 – Exemption to Preemption
8
National Credit Union Administration. Electronic Signatures in Global and National Commerce Act (E-Sign Act)
9
European Commission. What Is the Legislation – eSignature