What Is an E-Signature? Legal Validity and Consumer Rules

An e-signature, short for electronic signature, is any electronic sound, symbol, or process you attach to a digital record with the intent to sign it. Under federal law it carries the same legal weight as a handwritten signature for most transactions, so a lease, an offer letter, or a business contract can be finalized without a pen. The rules that make one enforceable are short, and so is the list of documents where e-signatures don’t work at all.

What Counts as an Electronic Signature

The federal definition is deliberately broad. Under 15 U.S.C. § 7006, an electronic signature is any electronic sound, symbol, or process attached to or logically associated with a record and executed or adopted by a person with the intent to sign it.¹ Typing your name into a signature field counts. So does clicking an “I Accept” button, drawing on a touchscreen, or recording a verbal agreement. The question is whether you intended to sign, not which technology you used.

Attribution ties the signature to a specific person and a specific document. E-signature platforms typically capture IP addresses, timestamps, email addresses, and device information so there is a documented link between the signer and the record if a dispute arises. The more data points the platform captures, the harder it becomes for someone to deny they signed.

E-Signatures Are Not the Same as Digital Signatures

People use the terms interchangeably, but they describe different things. An electronic signature is the broad legal category covering any method of signing electronically. A digital signature is a specific type of electronic signature that uses cryptographic technology, usually public key infrastructure, to verify identity and detect tampering. If anyone alters the document after signing, the cryptographic seal breaks and the change becomes visible.

For ordinary U.S. transactions, a standard electronic signature is legally sufficient. Digital signatures tend to appear in regulated industries, government filings, and international transactions where stricter verification is expected. The U.S. framework is technology-neutral and does not sort signatures into tiers, so there is no federal requirement to use cryptographic digital signatures for everyday contracts.

The Laws That Make E-Signatures Binding

Two statutes do the work. At the federal level, the Electronic Signatures in Global and National Commerce Act (ESIGN Act), signed into law in 2000, says no contract or signature can be denied legal effect simply because it is in electronic form.² It reaches transactions in or affecting interstate and foreign commerce, which covers most business activity.

At the state level, the Uniform Electronic Transactions Act (UETA) plays the same role. Forty-nine states, the District of Columbia, Puerto Rico, and the U.S. Virgin Islands have adopted it. New York is the only state that has not, but it has enacted its own laws making electronic signatures enforceable. Together, ESIGN and UETA mean an electronic lease signed in Texas is as enforceable as one signed in Oregon. Where the two conflict, the ESIGN Act generally preempts state law unless the state has adopted UETA or a substantially similar statute.

What Makes an E-Signature Legally Valid

A valid electronic signature rests on four requirements. If any one is missing, the other side has grounds to argue the signature is unenforceable.

Intent to sign. You must show you meant to sign. Typing your name, clicking a clearly labeled “Sign” button, or drawing your signature on a screen all satisfy this. An accidental click or an autofill that populates a signature field without your knowledge would not.
Consent to electronic format. All parties must agree to transact electronically. For consumer-facing deals, consent must follow the disclosure process set out in the ESIGN Act. In business-to-business dealings, consent is usually built into the underlying contract or established by course of dealing.
Association with the record. The signature must be logically connected to the specific document being signed. Platforms do this by embedding the signature into the file and linking it to metadata that identifies the version signed. A standalone signature image floating around in email does not meet this standard.
Record retention. The signed record must be stored so it accurately reflects the agreement and can be reproduced for anyone entitled to access it. If the electronic record cannot be retrieved or reproduced later, a court may deny it legal effect.³

The ESIGN Act does not set a minimum retention period of its own. It says the electronic record must remain accessible for as long as any applicable statute, regulation, or rule of law already requires.³ A signed employment agreement might need to be kept for three years under labor regulations; a signed tax document might need seven. The format is flexible as long as the record can be accurately reproduced.

Consumer Consent and Disclosure Rules

Before a business can replace paper disclosures with electronic records for a consumer, the ESIGN Act imposes a specific consent process. A simple “click to agree” checkbox is not enough. Federal law requires a clear and conspicuous statement covering several points before you give consent.³

The business must tell you:

That you have the right to receive the records on paper or in another nonelectronic format.
How to withdraw your consent to electronic records, along with any conditions, consequences, or fees tied to withdrawal.
Whether your consent applies only to this transaction or to future records throughout the relationship.
How to request a paper copy of any electronic record after you consent, and whether a fee applies.
The hardware and software you need to access and keep the electronic records.

Your consent itself must be given electronically in a way that proves you can actually access the records in the format the business plans to use.³ If the company later changes its technology in a way that could prevent you from opening your records, it must notify you of the new requirements and let you withdraw consent without any new fee or penalty.⁴

Documents You Still Cannot Sign Electronically

Not everything can be e-signed. Federal law carves out categories where the ESIGN Act does not apply, and those documents must still follow traditional paper and signature rules.⁵ The exclusions include:

Wills, codicils, and testamentary trusts, which remain governed by state probate law.
Adoption, divorce, and other family law matters governed by state law.
Court orders and official court documents, including briefs, pleadings, and judicial notices.
Certain critical consumer notices, including utility shutoffs, default or foreclosure on a primary residence, eviction, cancellation of health or life insurance benefits, and product recalls that endanger health or safety.
Paperwork that must accompany the transport or handling of hazardous materials, pesticides, or toxic substances.
Most Uniform Commercial Code transactions, including negotiable instruments and secured transactions, aside from sales of goods under Articles 2 and 2A.

The foreclosure and eviction carve-out matters especially for renters and homeowners. Federal and state rules generally require those notices on paper, sent by certified or registered mail. An emailed foreclosure or eviction notice does not satisfy those requirements and cannot be enforced against you.⁵ If one of those notices arrives only electronically, that alone may be grounds to challenge it.

When an E-Signature Can Be Challenged

An electronic signature is not automatically bulletproof. The same qualities that make one valid become grounds for a challenge if they are missing or poorly documented. Common lines of attack include:

No proof of intent. If the platform did not clearly present the signing action as a binding commitment, a signer can argue they clicked without understanding they were executing an agreement. Vague button labels like “Continue” or “Next” are weaker evidence than “I Agree to Sign.”
Weak identity verification. When a platform relies only on an email link with no additional authentication, the opposing party can argue someone other than the named signer accessed the link.
Missing or incomplete audit trail. Without timestamps, IP logs, and authentication records, there is little evidence tying the signature to a specific person at a specific time.
Document tampering. If the record was altered after signing and the platform did not detect or prevent the change, the document’s integrity is in question.
Falling inside an exemption. Trying to e-sign a document on the exempt list, such as a will or a foreclosure notice, means the signature has no legal effect no matter how well the platform performed.⁵

If you are relying on an e-signature, the strength of your position depends almost entirely on what the platform recorded. Services that capture detailed audit trails and offer multi-factor authentication are far harder to attack than one that simply emails a PDF with a typed name. When the stakes of a transaction are high, a platform with stronger verification is cheap insurance.

1
Office of the Law Revision Counsel. 15 USC 7006 – Definitions
2
Office of the Law Revision Counsel. 15 USC Chapter 96 – Electronic Signatures in Global and National Commerce
3
Office of the Law Revision Counsel. 15 US Code 7001 – General Rule of Validity
4
FDIC. X-3 The Electronic Signatures in Global and National Commerce Act (E-Sign Act)
5
Office of the Law Revision Counsel. 15 USC 7003 – Specific Exceptions