ESIGN Act Compliance
The ESIGN Act is short and often misread. It does not certify vendors or bless particular technology. It sets conditions, and a signature that meets them is as good as ink. Most compliance failures are not technical — they are a missing consent step or a record nobody can retrieve two years later.
Consumer consent is the clause most often skipped
When a business provides a consumer with information that some other law requires to be in writing, the ESIGN Act does not simply allow an electronic version. It requires the consumer to affirmatively consent, and requires that consent to be given in a way that reasonably demonstrates the consumer can actually access the format. The business must also disclose the right to withdraw consent, the scope, how to get a paper copy and what it costs, and the hardware and software needed. Skipping this does not usually surface at signing. It surfaces in a regulatory examination.
What the template covers
Intent to sign
The signer must act deliberately. A record of the signing session — what was shown, when it was opened, what was clicked — is what evidences intent if it is questioned.
Consent to do business electronically
Both parties must agree to transact electronically. For consumer transactions covered by a writing requirement, that consent has the specific form described above.
Association with the record
The signature must be tied to the document signed. A cryptographic hash captured at signature time proves the file has not been altered since.
Retention and accurate reproduction
The record must remain accessible to everyone entitled to it and reproducible accurately. A PDF that only the sender can retrieve does not satisfy this.
Where each requirement lives in the statute
The general rule is at 15 U.S.C. § 7001(a): no denial of legal effect solely because the record or signature is electronic. Consumer consent and its disclosures are at § 7001(c). Record retention is at § 7001(d), which requires that the record accurately reflect the information and remain accessible to those entitled to it in a form capable of accurate reproduction. Exclusions are at § 7003. Section 7002 governs how state law interacts with the federal act — which is why a state that has adopted UETA can supersede the federal rules, and why New York, which has not, relies on State Technology Law § 304.
A lender who had signatures but no consent record
A small consumer lender moved its disclosures online and collected signatures cleanly. Two years later an examination asked for the consent records showing borrowers had agreed to receive the required disclosures electronically. The platform had captured the signature but had never presented or stored the § 7001(c) consent. The signatures themselves were sound. The disclosures made through them were the problem, and the remediation reached every file from the switchover onward.
Questions people ask about this
Does ESIGN apply to business-to-business contracts?
Yes, the general rule at § 7001(a) applies to any transaction in or affecting interstate commerce. The consumer consent requirements at § 7001(c) apply only where another law requires that information be provided to a consumer in writing.
Does ESIGN or my state UETA control?
Section 7002 allows a state that has adopted UETA in its official form to modify or supersede the federal provisions. In practice the two are consistent for most transactions. Where they differ, the specific state statute is the one to read.
Is ESIGN compliance something a vendor can certify?
No. There is no certifying authority under the act. A platform can make compliance easier by capturing consent, intent, association and a retrievable record — but compliance belongs to the business using it.
What if a consumer withdraws consent?
The withdrawal is prospective: it does not affect the legal validity of records already provided and signed electronically. Going forward, that consumer must receive the affected information in the form the underlying law requires.