Controllable electronic records under UCC Article 12 are a legal category built for digital assets like cryptocurrency and non-fungible tokens, giving them the kind of standardized commercial-law treatment that paper instruments have had for decades. A controllable electronic record, or CER, is a record stored electronically that can be subjected to “control” as defined in the statute, and that control replaces physical possession as the mechanism for legal authority over the asset. As of 2026, more than 30 states have enacted Article 12, with more considering adoption.
What Counts as a CER
A CER is a record stored in an electronic medium that is capable of being controlled under the statute’s test. Being digital alone is not enough. The record has to exist within a system that lets someone establish the exclusive, transferable authority the statute requires. Virtual currencies used for payments, non-fungible tokens tied to unique digital content, and other blockchain-based tokens are the common examples.
The definition is written broadly on purpose. Rather than listing specific technologies, it focuses on the concept of an electronic record capable of being controlled, so the law does not go stale the moment a new platform appears. If a future technology produces electronic records that satisfy the control test, they fit within Article 12 without any legislative update.
Digital Assets That Are Not CERs
Article 12 explicitly carves out several types of digital assets that already have homes elsewhere in the UCC. The exclusion list includes controllable accounts, controllable payment intangibles, deposit accounts, electronic copies of chattel paper, electronic documents of title, electronic money, investment property, and transferable records under the federal E-SIGN Act or the Uniform Electronic Transactions Act.1Uniform Law Commission. Uniform Commercial Code – Article 12 and the 2022 Amendments
These assets already work under existing commercial law. Electronic chattel paper and electronic documents of title remain governed by their existing articles. Securities held in a brokerage account stay under Article 8. Electronic money is handled through Article 9’s treatment of currency and deposit accounts. Article 12 is meant to cover the digital assets that had no home in the code, not the ones that already had one.
How Control Works
Control is the central concept of Article 12, and it requires satisfying a three-part test simultaneously. A person has control of a CER when the record, or the system in which it is recorded, gives that person all three of the following.
- The power to enjoy substantially all the benefit from the electronic record, meaning the ability to use it for its intended purpose or exchange it for value.
- The exclusive power to prevent others from enjoying those benefits and to transfer control of the record to someone else.
- The ability to identify themselves to the system as the person holding those powers, whether by name, cryptographic key, account number, or another recognized identifier.
In practice this maps neatly onto how blockchain wallets function. A private key gives you the ability to spend or transfer a token, locks everyone else out, and links your identity to the record through a cryptographic signature. But the statute is not limited to blockchain. Any system that delivers those three capabilities satisfies the test.
What Exclusivity Really Requires
Built-in system rules do not automatically undermine your exclusive power. A smart contract might be programmed to transfer a token automatically under certain conditions, or a protocol upgrade might alter the benefits attached to a record. The statute says your power is still considered exclusive even if the system has programmed protocols that could cause changes, including transfers or modifications of benefits. Sharing power with another person does not automatically destroy exclusivity either.
The statute adds a rebuttable presumption. If you have the power to prevent others from accessing the benefits and the power to transfer, those powers are presumed exclusive, and anyone challenging your control bears the burden of proving otherwise. The narrow exception: your power is not exclusive if you can only exercise it when another person also acts, and that other person can act independently of you. That carve-out keeps a mere co-signer from claiming control.
Qualifying Purchasers and the Take-Free Rule
Article 12 provides a strong legal shield for buyers who acquire a CER the right way. A “qualifying purchaser” is someone who obtains control of a CER, gives value in return, acts in good faith, and has no notice of any existing property claims on the record.1Uniform Law Commission. Uniform Commercial Code – Article 12 and the 2022 Amendments
The payoff is the take-free rule: a qualifying purchaser acquires the CER free of competing property claims. An undisclosed lien held by the seller, or a dispute between two prior owners, does not touch you. This finality is what makes digital assets viable as collateral, because a lender will not accept a CER as security if a hidden claim could surface later and strip the asset away.
The concept parallels the “holder in due course” doctrine for negotiable instruments, with one important difference. A holder in due course under Article 3 is protected from both property claims and personal defenses, such as fraud in the underlying transaction. A qualifying purchaser under Article 12 gets protection only from property claims. Personal defenses and claims in recoupment are not automatically cut off, though parties can negotiate that protection by contract.
The Shelter Rule
Article 12 also codifies a shelter rule. A purchaser of a CER acquires all rights that the transferor had or had the power to transfer. If the person who sold you the token was a qualifying purchaser with take-free rights, you step into those rights, even if you would not independently qualify. The one limit: a purchaser of a limited interest in a CER acquires rights only to the extent of the interest purchased.
Where the Take-Free Rule Stops
This is where NFT buyers most often get tripped up. The take-free rule protects your ownership of the CER itself. It does not automatically protect your rights in whatever the CER represents or links to. If an NFT points to a piece of digital art, a physical collectible, or a right to future royalties, those underlying assets are still subject to existing property claims even if you qualify as a qualifying purchaser of the token.
You get clean title to the box, not necessarily to what is inside it. If the art linked to an NFT was created using stolen intellectual property, your qualifying purchaser status protects your ownership of the token but does not resolve the copyright dispute. That distinction matters for anyone buying NFTs whose marketed value comes from tethered assets rather than the token alone.
Using a CER as Loan Collateral
One of Article 12’s most practical effects is enabling CERs to serve as collateral under Article 9’s secured transactions framework. A lender can perfect a security interest in a CER in two ways: by filing a UCC financing statement, since CERs are classified as general intangibles, or by obtaining control of the record under the same test described earlier.
Control-based perfection is the stronger option. A security interest perfected by control takes priority over one perfected only by filing.1Uniform Law Commission. Uniform Commercial Code – Article 12 and the 2022 Amendments If two creditors both claim a security interest in the same CER, the one holding the private key or otherwise satisfying the control test wins over the one who merely filed paperwork. Perfection by control begins when the secured party obtains control and lasts only as long as control is retained.
Blockchain protocol changes create a specific risk. If a hard fork splits a blockchain and produces a new CER alongside the original, a secured party that cannot establish control over the new record has only 21 days of continued perfection. After that window closes, the security interest in the forked asset becomes unperfected. Practitioners often perfect by both filing and control: filing acts as a safety net if a protocol change disrupts control, while control provides priority in normal circumstances.
Which State’s Law Governs the Transaction
Digital assets do not sit in any one place, which makes choice-of-law questions unusually important. Article 12 sets a cascading hierarchy. First, the parties can agree on a governing jurisdiction in their contract. Second, if there is no agreement, the system in which the CER is recorded may specify a jurisdiction in its own rules. If neither the parties nor the system designates a jurisdiction, additional default tiebreakers apply. The ultimate fallback is the District of Columbia: if no other rule points to a particular location, DC law governs the CER.1Uniform Law Commission. Uniform Commercial Code – Article 12 and the 2022 Amendments
The DC default exists so that no CER floats in a legal vacuum. Even a token created by an anonymous developer on a decentralized protocol with no terms of service is subject to a predictable set of commercial rules. For sophisticated parties, the practical lesson is to specify governing law in the agreement rather than leaving it to defaults they may not have reviewed.
How Article 12 Interacts With Consumer Protection Law
Article 12 is a commercial law framework, not a consumer protection statute. It does not create special rights for individuals who buy or hold CERs for personal use, and it does not override existing consumer protection laws either. Where a CER transaction also falls under state consumer protection statutes, lending regulations, or unfair trade practice laws, those consumer rules still apply.
For transactions involving debts or payment obligations embedded in CERs, Article 12 preserves certain debtor protections that cannot be waived by contract. When the person owing a debt is an individual who incurred the obligation for personal, family, or household purposes, other applicable consumer law governs the relationship. Buying a CER does not strip away protections you would otherwise have, but Article 12 itself is not the source of those protections.
Where Article 12 Has Been Enacted
The UCC is a model law, so it has no legal force until individual states enact it. As of 2026, more than 30 states have adopted the 2022 amendments that include Article 12, and additional states have legislation pending. The specific rules in effect depend on where a transaction takes place or which jurisdiction’s law governs the CER, so anyone dealing in CERs should confirm whether their state has enacted Article 12 before assuming these provisions apply. The Uniform Law Commission maintains a current tracker of state adoptions on its website.