Two laws, one simple idea: an electronic signature carries the same legal weight as ink on paper. Here is the plain-English version of the ESIGN Act and UETA, without the statutory citations getting in the way.

UETA: the state-level foundation

The Uniform Electronic Transactions Act is a model law published in 1999 and adopted, in some form, by 49 states plus the District of Columbia and the U.S. Virgin Islands. It says a signature, contract, or record cannot be denied enforceability just because it is electronic — and that if a law requires a signature, an electronic signature satisfies it.

ESIGN: the federal backstop

The federal ESIGN Act arrived in 2000 to keep interstate commerce moving. Where a state adopted standard UETA, state law governs. Where a state modified or skipped it, ESIGN fills the gap. The two are designed to interlock, not compete.

What both laws require

  1. Intent to sign. A deliberate act — typing a name, drawing a signature, clicking an unambiguous "Sign" button.
  2. Consent to do business electronically. For consumer transactions, ESIGN adds disclosure requirements: the consumer must be told they can request a paper copy and how to withdraw consent.
  3. Association with the record. The signature must be logically bound to the exact document that was signed.
  4. Retention. The record must be retainable and accurately reproducible by everyone entitled to it.

Common misconceptions

"I need a certificate-based digital signature."

Not usually. Neither law requires PKI. A typed or drawn signature with a solid audit trail satisfies both for ordinary business contracts.

"A scanned image of my signature is the same thing."

A pasted image carries no evidence of who applied it or when. It may still be enforceable, but you have made your own case harder to prove.

"Expensive software makes it legal."

Compliance comes from process and evidence, not price. A pay-per-document tool with a real audit trail is as compliant as an enterprise seat.

Quick checklist before you send

  • Consent language is visible before the signer commits.
  • The signing action is explicit and separate from reading.
  • A certificate records name, email, IP, timestamp, and document hash.
  • Every party gets a downloadable copy of the final PDF.

ValidaSign builds all four into every document by default, so compliance is the path of least resistance.

Informational only, not legal advice.