Definition, stated plainly

What is an electronic signature? The definition that counts

An electronic signature is, in law, any data in electronic form that a signatory uses to sign — attached to, or logically associated with, what is being signed. That breadth is the point of the definition, and the source of most confusion about it.

The EU definition

Regulation (EU) No 910/2014 defines it in article 3(10): data in electronic form, attached to or logically associated with other data in electronic form, used by the signatory to sign. The regulation deliberately says nothing about the technology — a scanned image of a signature pasted into a PDF, a drawn line in a browser, or a cryptographic signature are all, in the bare legal sense, electronic signatures.

What the regulation adds on top of the definition is the article 25(1) floor: an electronic signature may not be denied legal effect or admissibility as evidence in legal proceedings solely because it is electronic.

The US position

Federal law reaches the same floor without any tier. The ESIGN Act, 15 U.S.C. §7001(a), provides that a signature or record in interstate or foreign commerce may not be denied legal effect, validity or enforceability solely because it is electronic. State law fills in the detail through UETA — the Uniform Electronic Transactions Act — which most states have enacted and which likewise bars denying effect solely for being electronic (UETA §7).

What the definition deliberately leaves out

No cryptography, no certificate, no platform: the legal definition is about the act of signing in electronic form, not about the strength of the proof behind it. That is why two questions follow the definition: whether the signature may be denied effect solely for being electronic (the statutory floor says no), and whether the evidence behind it would convince anyone it means what it says.

The evidence quality — who signed, that the bytes did not change, when — is not part of the definition. It is what a signing service is actually for: turning a legally sufficient act into one you can prove later.

What is changing: eIDAS 2.0

Regulation (EU) 2024/1183, which entered into force on 20 May 2024, amends eIDAS to establish the European Digital Identity Framework: Member States must provide citizens with a European Digital Identity Wallet by the end of 2026. For signatures, the article 25 floor and the qualified/advanced structure carry over; the wallet adds a state-backed way to assert identity — which, over time, strengthens the identity step of signing flows.

Sources

  • Regulation (EU) No 910/2014, articles 3(10) and 25 — CELEX 32014R0910.
  • Regulation (EU) 2024/1183 (European Digital Identity Framework) — CELEX 32024R1183.
  • ESIGN Act, 15 U.S.C. §7001 — govinfo.gov.
  • Uniform Electronic Transactions Act (UETA), §7 — adopted in 49 states, DC, Puerto Rico and the US Virgin Islands; New York uses its own Electronic Signatures and Records Act.

This is an explanation of the legal definitions, not legal advice.

Read next

Are electronic signatures legally binding? Yes — here are the articles

The article numbers behind 'yes, binding' — EU and US.

Electronic signature vs digital signature: which is which

Why 'digital' is a cryptographic term, not a legal one.