25.1 E-SIGN Consent and Consumer Electronic Records

---

E-SIGN Act Legal Principles & Preemption

Enacted in 2000, the E-SIGN Act eliminates legal barriers to electronic commerce by establishing two core principles under 15 U.S.C. § 7001(a):

1. A signature, contract, or other record relating to such transaction may not be denied legal effect, validity, or enforceability solely because it is in electronic form; and
2. A contract relating to such transaction may not be denied legal effect, validity, or enforceability solely because an electronic signature or electronic record was used in its formation.

Federal Preemption and UETA

E-SIGN preempts state laws that require paper documentation or manual signatures. However, under Section 102, a state statute may modify, limit, or supersede E-SIGN if the state enacts the official Uniform Electronic Transactions Act (UETA) as approved by the Uniform Law Commission in 1999 without non-conforming exceptions, or if state procedures are technology-neutral and consistent with federal requirements.

---

Section 101(c) Consumer Consent Architecture

While E-SIGN readily facilitates commercial business-to-business transactions, Congress instituted an elaborate consumer protection framework in Section 101(c) (15 U.S.C. § 7001(c)). Whenever a federal or state statute, regulation, or rule requires that information relating to a consumer transaction be provided or made available to a consumer "in writing" (e.g., TILA Loan Estimates, Regulation E initial disclosures, Regulation B adverse action notices), the electronic record satisfies the statutory "in writing" requirement only if the financial institution rigorously complies with the 5-step Section 101(c) consent architecture.

Step 1: Affirmative Consumer Consent

The consumer must affirmatively consent to receive electronic records. Passive consent, negative option notices, or pre-checked opt-in boxes on account opening screens do not satisfy statutory affirmative consent requirements.

Step 2: Pre-Consent Disclosures

Prior to obtaining consent, the financial institution must provide the consumer with a clear and conspicuous statement detailing:

• Paper Availability: The consumer's right to receive the disclosure on paper or in non-electronic format.
• Consequences of Withdrawal: The consumer's right to withdraw consent at any time, including any conditions, consequences, or fees imposed in the event of withdrawal (e.g., termination of the online banking relationship or transfer to a fee-based paper statement cycle).
• Scope of Consent: Whether the consent applies solely to the immediate transaction or to ongoing categories of records delivered throughout the life of the account.
• Withdrawal Procedures: The precise operational procedures the consumer must follow to withdraw consent and update their electronic contact information (e.g., email address).
• Requesting Paper Copies: How the consumer may obtain a paper copy of an electronic record after consent is given, and whether a fee will be assessed for paper copies.

Step 3: Hardware and Software Specifications

The institution must provide a clear statement of the specific technical hardware and software requirements needed for the consumer to access and retain the electronic records (e.g., operating system compatibility, browser specifications, minimum PDF reader version).

Step 4: The Demonstrable Consent Test (Reasonable Demonstration)

Under 15 U.S.C. § 7001(c)(1)(C)(ii), the consumer must:

"consent electronically, or confirm his or her consent electronically, in a manner that reasonably demonstrates that the consumer can access information in the electronic form that will be used to provide the information that is the subject of the consent."

Demonstrating access: Consent or confirmation must occur electronically in a manner that reasonably demonstrates access to the electronic form that will be used. A sample PDF with a code is one possible design; the statute does not prescribe that exact workflow. A paper signature or employee clicking for the consumer does not itself establish the required electronic demonstration.

Step 5: Revised Hardware/Software Notification

If the financial institution changes its hardware or software requirements such that there is a material risk that consumers will no longer be able to access or retain electronic records:

• The bank must provide a revised statement of hardware and software requirements;
• The bank must re-disclose the consumer's right to withdraw consent without fees;
• The bank must obtain renewed demonstrable electronic consent under the updated technical specifications.

Severe Regulatory Consequences of E-SIGN Non-Compliance

If a bank delivers electronic disclosures without satisfying all five pillars of Section 101(c):

• The electronic communication fails to satisfy federal statutory "in writing" mandates as a matter of law.
• Assess the specific remedy: Noncompliant electronic delivery can fail an applicable written-disclosure requirement. On a rescindable transaction, failure to deliver the required rescission notice or material disclosures can extend rescission under Section 1026.23. A Loan Estimate defect does not automatically create three-year rescission, and a purchase-money residential mortgage normally has no rescission right.
• Under Regulation E, initial disclosures and error resolution notices are treated as legally undelivered, preventing the bank from assessing consumer liability for unauthorized electronic fund transfers.

---

Consumer Leasing Act & CFPB Regulation M (12 CFR Part 1013)

Regulation M implements the Consumer Leasing Act, establishing standardized disclosure requirements for personal property consumer leases.

Scope and Regulatory Coverage Threshold

Under 12 CFR § 1013.2(e), Regulation M applies to consumer leases that meet four cumulative tests:

1. Personal Property: Involves the lease of personal property (motor vehicles, furniture, equipment, consumer goods);
2. Consumer Purpose: Leased to a natural person primarily for personal, family, or household purposes;
3. Duration: The contractual term exceeds four months;
4. Dollar Threshold: The total contractual obligation does not exceed the annual statutory exemption threshold (indexed annually under Dodd-Frank; e.g., $73,400 for 2026).