Are electronic signatures valid on patient forms?
HHS FAQ 554 says a HIPAA authorization may be obtained electronically, "provided any electronic signature is valid under applicable law". Section 7001(a) of the E-SIGN Act says a signature, contract or record may not be denied legal effect solely because it is electronic. Confirm each patient consent form and signing process with your own counsel or compliance lead.
Last updated
- Federal law E-SIGN Act
- State law UETA in 49 states
- New York ESRA
- HIPAA authorizations Allowed electronically
- Signature types Typed or drawn
Are electronic signatures on patient forms allowed?
Electronic signatures on patient forms can be used for HIPAA authorizations when the signature is valid under applicable law. Another consent form needs its own review of the document and applicable requirements.
Section 7001(c) of the E-SIGN Act separately covers consumer consent to receiving required disclosures electronically. Ask counsel which requirements apply before replacing a paper process for a particular patient form.
The intake and HIPAA guides cover related records and agreements. Intake Pro signs a BAA before you collect real patient data.
This information is general. Confirm electronic signatures on patient forms with your own counsel or compliance lead.
Which laws cover electronic signatures on patient forms?
Federal law, state law and HHS guidance address different parts of electronic signatures on patient forms. The provisions below do not replace a review of the requirements for a particular document.
| Law or guidance | What it says | Where it applies |
|---|---|---|
| E-SIGN Act, 15 USC 7001(a) | A signature, contract or record may not be denied legal effect solely because it is electronic. Section 7001(c) covers consumer consent to electronic disclosures. | Electronic signatures, contracts, records and consumer disclosure consent. |
| E-SIGN Act, 15 USC 7006(5) | An electronic sound, symbol or process attached to or logically associated with a record and executed or adopted by a person with intent to sign. | The federal definition of an electronic signature. |
| Uniform Electronic Transactions Act (UETA) | A uniform state law on electronic records and signatures, enacted state by state. | 49 states, the District of Columbia, Puerto Rico and the US Virgin Islands. |
| Electronic Signatures and Records Act (ESRA) | New York has its own law, ESRA. | New York. |
| HHS FAQ 554 | A HIPAA authorization may be obtained electronically if the electronic signature is valid under applicable law. | HIPAA authorizations. |
Which records fall outside the E-SIGN Act for electronic signatures on patient forms?
The E-SIGN Act lists records it does not cover. The list is separate from any state requirements for electronic signatures on patient forms.
The exclusions in 15 USC 7003 include wills, codicils and testamentary trusts, and family law matters such as adoption and divorce.
Check whether your state sets its own requirements for a particular document. Ask counsel to review each form your practice plans to use, including a medical records release form and a telehealth consent form.
Who can provide electronic signatures on patient forms for a patient?
A personal representative may provide electronic signatures on patient forms when acting for the patient. Under 45 CFR 164.502(g), a personal representative is treated as the individual, and state law decides who has authority.
For an adult, a personal representative is a person with authority under applicable law to make health care decisions for them. For a minor, it is generally a parent, guardian or other person acting in loco parentis, with three exceptions set out in the rule. The HHS guidance on personal representatives explains these roles.
A HIPAA authorization under 45 CFR 164.508(c)(1)(vi) carries the individual's signature and date. If a personal representative signs, it also carries a description of that person's authority to act.
Intake Pro supports typed or drawn electronic signatures. A signer can be the patient, a representative such as a parent or guardian, a staff member or a witness. The glossary explains common intake and HIPAA terms.
What records should electronic signatures on patient forms leave?
Electronic signatures on patient forms should leave a record of what was signed, who signed and when. E-SIGN section 7001(d) says a retention requirement is met by an electronic record that accurately reflects the information and remains accessible and reproducible. Intake Pro keeps these details with each signed record.
| Record | Why it matters | In Intake Pro |
|---|---|---|
| Form version signed | Shows which published wording was signed. | A published version never changes. Editing makes a new version, and earlier submissions stay on their signed version. |
| Who signed | Connects the form to the signer. | Each submission keeps who signed. |
| When | Records when signing occurred. | Each submission keeps when the signer signed. |
| Signed PDF | Provides the completed form for your records. | Download one PDF, a packet PDF or a ZIP of PDFs. |
| Audit trail | Shows the activity recorded for the submission. | Each submission keeps an audit trail alongside the signed PDF. |
Under 45 CFR 164.530(j), a covered entity keeps required HIPAA documentation, including policies, notices, acknowledgments and authorizations, for six years from its creation or last effective date, whichever is later. State law sets how long medical records themselves are kept, and the periods vary by state.
How can a practice adopt electronic signatures on patient forms?
Moving intake forms to electronic signatures starts with a document review and ends with a retained signed record. The practice manager can set up the workflow after counsel confirms which documents can be signed electronically in its state.
-
Confirm the documents with counsel
Ask your own counsel which documents your practice can sign electronically in its state, and note any requirements for a particular document.
-
Convert or build each form
Upload a PDF or Word file and place the fields before publishing with PDF to online form, or build the form in the form builder.
-
Add a signature field for each signer
Add fields for the patient and any representative, staff member or witness who needs to sign that form.
-
Publish the reviewed form
A published form version never changes. Editing a form makes a new version, and earlier submissions stay on the version they were signed on.
-
Send a link or open a kiosk
Send a private link by text or email, provide a QR code, embed the form on your site, or use a tablet paired as a check-in kiosk.
-
Download the signed record
Download the signed PDF and audit trail for your practice's retention process.
Sources
- HHS FAQ 554: Electronic HIPAA authorizations
- E-SIGN Act, 15 USC 7001
- Electronic signature definition, 15 USC 7006(5)
- New York City Bar report on UETA and ESRA
- E-SIGN Act exclusions, 15 USC 7003
- Personal representatives, 45 CFR 164.502(g)
- HHS guidance on personal representatives
- Authorization requirements, 45 CFR 164.508(c)(1)(vi)
- HIPAA documentation retention, 45 CFR 164.530(j)
Checked on
Questions
Can a parent use electronic signatures on patient forms for a minor?
A parent, guardian or other person acting in loco parentis is generally a minor's personal representative under 45 CFR 164.502(g), subject to three exceptions in the rule. State law decides authority. Confirm the situation with your own counsel or compliance lead.
Does Intake Pro support typed electronic signatures on patient forms?
Yes. Intake Pro accepts typed or drawn signatures from a patient, a representative such as a parent or guardian, a staff member or a witness. Each submission keeps the form version, who signed, when, a signed PDF and an audit trail.
How long should records of electronic signatures on patient forms be kept?
E-SIGN section 7001(d) says a retention requirement is met by an electronic record that accurately reflects the information and remains accessible and reproducible. HIPAA-required documentation has a six-year period under 45 CFR 164.530(j), measured from creation or last effectiveness, whichever is later. State law governs medical record retention.
Can electronic signatures on patient forms be collected at a kiosk?
Yes. Intake Pro can open a published form on a tablet paired as a check-in kiosk. A practice can also send a private link by text or email, provide a QR code, or embed the form on its own site.