All about Electronic Signatures
First, what is a signature?
A signature is any symbol executed or adopted by
a party with the intention to authenticate a writing. The key is
that there's no requirement this be ink on paper, but instead shows that it
can be any symbol provided the symbol is used with the intent of signing.
This is why copies of signatures (such as on a fax), stamps or seals, and
fingerprints can be used for signing on paper.
What is an electronic signature?
Like the signature above, an electronic
signature is an electronic mark that's related to the electronic record or data
that is being signed, such that the user has applied that symbol to indicate
his intent to sign. It is important that the electronic symbol be related
specifically to the party who is signing, that there's proof the symbol
was applied with intent to sign, that the data being signed can be proven
to be the original data (hasn't been tampered with), and be such that
all parties to a signature are allowed to have independent copies.
How is electronic signature defined in the U.S. E-SIGN Act?
From Section 106 (Definitions), "The term 'electronic signature' means an electronic sound, symbol, or
process, attached to or logically associated with a contract or other
record and executed or adopted by a person with the intent to sign the
record."
However, for such an electronic "symbol" to be
legally binding, it is important that the symbol provide authentication of
the party who created it, ensure that what was signed cannot be altered,
ensure that the party understood that by creating the symbol the party was
willingly signing, and that the party is able to keep an original of the
data and his electronic signature for his own records. This is why
an "I Agree" button isn't sufficient (it typically lacks authentication,
does not ensure that the data agreed to cannot be changed later, and does not
provide the user with an electronic copy of the data and the signature for his
own records).
What do the courts say about electronic signatures?
There isn't any case law regarding electronic signatures.
This is most likely due to the fact that lawsuits are rarely filed that
contest whether something was signed, but instead focus on whether the
parties lived up to the obligations outlined in a document, and what the
reasonable meaning was behind terms in the document. Electronic signatures,
provided they are compliant with the law, are much more secure than
handwritten signatures, which are far easier to spoof or forge.
Electronic signature laws and regulations
- Here is a complete list of
electronic
signature laws in the various United States
- Learn more about
electronic
signature legislation in the United States. Most of the laws began with
the Utah Digital Signature Act of 1995 and was focused on a narrow set of
digital signature technologies based on PKI.
California realized that focusing
on specific technologies in law was pointless because technology advances so
quickly, and the PKI-based solutions had proven cumbersome and expensive for
anything but the most secure needs within a small network of people, hardly
the stuff of global e-commerce or a concern for common contracts law. Instead,
California chose a minimalist and technology neutral approach, which became the
foundation of the U.S. E-SIGN Act and has been replicated in other countries
as well.
- In order to avoid each American state from having conflicting laws,
the National Conference of Commissioners on Uniform State Laws developed
the Uniform Electronic
Transactions Act (UETA), while the European Union proposed
its Directive on a Common Framework for Electronic Signatures for the European Union.
- In the United States, all of these incompatible state laws were
superseded by the Electronic
Signatures in Global and National Commerce Act (US E-SIGN ACT).
This act was signed into law in 2000 by President Clinton. It is
technology neutral, provided certain disclosures are provided and
the basic requirements of electronic signatures (as described above)
are followed. It lists several areas where electronic signatures are not
yet allowed, including wills, codicils, testamentary trusts, adoptions,
divorce or other matters of family law, court orders or notices used
in connection with court proceedings, notices of cancellation of utilities,
forecloseures, repossession, eviction, cancellation of health or
life insurance, product recalls, documents related to handling
hazardous materials and other such serious documents. Obviously, this means
that they are legal for 99.99% of all documents, including business
contracts, agreements, applications, authorizations, loans, leases,
employment documents, etc.
- In the health care field, the main piece of legislation is the
Health Insurance Portability and
Accountability Act (HIPAA), overseen by the U.S. Department of Health
and Human Services (HHS). But it's much broader than just hospitals and clinics and includes therapists,
lawyers dealing with medical issues, health insurance companies,
clearinghouses and all individuals who seek medical treatment. It's
primary purpose is to protect the privacy of patients' private
health information. This law not only discusses electronic signatures,
it also specifies transaction code sets, security procedures and
privacy considerations.
- The Food and Drug Administration
21 CFR Part 11
(FDA CFR Part 11) is more formally known as Title 21 Code of Federal Regulations Electronic Records;
Electronic Signatures. The regulations provide guidance for the use of
electronic records and electronic signatures in the biotechnology, pharmaceutical, medical devices,
radiological health, food, cosmetics and veterinary medicine fields.
Concerns when using Electronic Signatures
Is it legal?
Yes, electronic signatures are legally recognized, even when a
statute uses terms like "in writing" or "signed."
Who can use them?
While anybody can operate electronic signature software
legally, there are times when it makes sense to rely on a trusted third party,
such as Yozons. The advantage of using a third party to handle your electronic
signatures is that they have no vested interest in any given transaction. A third
party doesn't look into your transaction or concern itself with the
parties involved. They simply ensure timestamps are accurate, that all parties
have equal and fair access to the documents, ensure the security of the technology
and provide an unbiased witness to the fact that a given transaction took place
in a legal manner. If you operate your own technology, using a third-party's system
can help you prove that you were being fair and unbiased in handling your own
transactions, whereas homegrown software may suffer security issues that others
would point to in court to imply that the transaction was not fairly
executed. Many homegrown solutions fail the E-SIGN Act's requirements of
user authentication, ensuring the data cannot be changed after the fact,
and no providing all parties with an original electronic record and electronic
signature.
Can anything be signed electronically?
Not everything, but most common documents can be. The ESIGN Act specifically
forbids a narrow range of documents that may not be signed electronically. The exceptions
primarily relate to wills, testmantary trusts, adoption, divorce, court orders,
termination of utilities, repossession, foreclosure, eviction, cancellation of life insurance,
product recalls and documents related to the transportation of hazardous materials.
More on electronic signatures
If you have more questions, please read the our electronic signature FAQ.
Electronic signatures are simply superior and more reliable than handwritten signatures. Electronic delivery is more secure,
direct, faster and cheaper than faxing, mailing or courier services.
Record retention, auditing, tracking and finding electronic documents is much cheaper, easier and can be automated.
Read more on Wikipedia.
|