Are electronic signatures legally binding?

In the EU the rules come from Regulation (EU) No 910/2014, known as eIDAS, which has applied directly in every member state since July 2016. It defines three levels. A simple electronic signature (SES) is any data in electronic form attached to or logically associated with other data and used by the signatory to sign — a scanned signature, a drawn one, a typed name, a ticked box. An advanced electronic signature (AES) must additionally be uniquely linked to the signatory, capable of identifying them, created with means under their sole control, and linked to the data so that any later change is detectable. A qualified electronic signature (QES) is an AES created with a qualified signature creation device and backed by a qualified certificate from a supervised trust service provider.

Two articles matter most in practice. Article 25(1) says an electronic signature shall not be denied legal effect or admissibility as evidence solely because it is electronic or does not meet the qualified requirements. Article 25(2) gives a QES the same legal effect as a handwritten signature, and 25(3) makes a QES issued in one member state recognised in all the others. So a simple signature is never void by definition; it simply has to be proven like any other fact, whereas a qualified one is presumed to be the signer's.

The 2024 amendment usually called eIDAS 2.0 (Regulation (EU) 2024/1183) keeps this three-level structure and adds the European Digital Identity Wallet, through which citizens will be able to create qualified signatures from a phone. The UK kept eIDAS in domestic law after Brexit, and the Law Commission confirmed in 2019 that electronic signatures, including simple ones, can validly execute documents under English law.

The federal Electronic Signatures in Global and National Commerce Act (ESIGN, 2000) and the state-level Uniform Electronic Transactions Act (UETA, 1999) take a different route: instead of grading signatures, they define one broad category and declare it valid. An electronic signature is “an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record.” A drawn signature on a PDF, a typed name, a recorded voice — all qualify.

Four things are required for the signature to be enforceable: intent to sign, consent to do business electronically (which can be implied from conduct), a link between the signature and the record, and the ability to retain and reproduce the signed record. UETA has been adopted by 49 states plus the District of Columbia and the territories; New York uses its own Electronic Signatures and Records Act with a compatible definition. Because the standard is intent rather than technology, the picture of the signature carries little weight on its own — the surrounding evidence carries it.

For the ordinary run of business and private life, a simple electronic signature is what everyone uses and what everyone accepts: service agreements, NDAs, freelance contracts, invoices and quotes, rental applications, permission slips, consent forms, employment offer letters, purchase orders, membership forms, insurance claims. None of these have a statutory form requirement in most jurisdictions, and the parties are free to agree that a signed PDF exchanged by email is the contract.

The practical test is whether the other side accepts it and whether you could later show that the person meant to sign. A counterparty who receives your signed PDF, replies “received, thanks” and starts performing has accepted both the signature and the method. Disputes over such contracts almost never turn on whether the signature was electronic; they turn on what was agreed.

Every legal system reserves some documents for stricter forms. Under ESIGN the exclusions include wills, codicils and testamentary trusts; adoption, divorce and other family-law matters; court orders and official notices; notices of utility cut-off, default, foreclosure or eviction on a primary residence; cancellation of health or life insurance; product recalls; and documents accompanying hazardous materials. These still need paper, or in some states a notarised or witnessed electronic process.

In the EU the form requirements come from national law, not from eIDAS. Where a member state demands a “written form”, an electronic document usually satisfies it only with a qualified signature: Germany's §126a BGB is the clearest example, and it applies to things like fixed-term employment contracts and consumer credit agreements. Transfers of real estate, company formation and many family-law acts require a notary in most continental systems, and public tenders, court filings and tax submissions typically require QES or the national eID. Estonia, where ID-card signatures have been in daily use since 2002, expects a qualified signature for almost anything filed with the state.

There is also the counterparty's own policy. A bank, an insurer or a landlord may insist on a particular signing service or a wet-ink original regardless of what the law allows. If the document says “sign in the presence of a witness” or “notarised”, a drawn signature will not do.

Since a simple signature is proven by context, build the context deliberately. Send the signed PDF from the email address the other party already associates with you, and keep the thread: the offer, the acceptance, the attachments. Keep the unsigned original and the signed copy side by side, so the only difference between them is your signature block. Write the date next to the signature and, in the email, say plainly what you are signing.

Ask the other party to countersign and return the same file, so both signatures sit on one document. Print your name in block letters under the signature — a drawn scrawl identifies nobody, but a name does. For anything with real money at stake, use a qualified signature service or your national eID on top; the visual signature and the certificate signature do not compete, they stack.