Is an electronic signature legally valid?

Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. ch. 96) and state UETA statutes where adopted; intent, consent, attribution, and record retention are required. Certain exceptions (wills, court orders) remain ineligible for e-signature.

Do I need notarization or RON?

Not always. Notarization is generally not required for CDAs, but certain jurisdictions or contract types may require notarization or permit Remote Online Notarization. RON laws vary by state; confirm identity-proofing and audio-video retention requirements with the state notary commission.

What must each signature demonstrate?

Each signature must show signer intent to sign, consent to conduct the transaction electronically, a reliable method attributing action to the signer, and that the record can be retained and reproduced. These elements align with the ESIGN Act's four-part validity test.

Can HIPAA apply to Election CDAs?

Yes when protected health information is included. If the CDA covers PHI, parties must satisfy HIPAA safeguards, execute a Business Associate Agreement where applicable, and follow the six-year retention rule (45 CFR §164.530(j)). Use AES-256 and access controls to reduce risk.

What if parties have differing state laws?

Specify governing law and forum in the agreement. ESIGN preempts inconsistent state rules for interstate transactions, but state UETA or ESRA may govern intrastate issues. For New York, note ESRA provisions and consult state guidance for unique requirements.

How to preserve audit evidence for disputes?

Retain time-stamped audit trails, IP addresses, signer authentication logs, and original signed PDFs in immutable storage. Ensure the platform captures consent disclosures, signer attribution, and the signing sequence. Maintain copies for the applicable retention period to support chain-of-custody and legal admissibility.

Election CDA Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

ELECTION CONFIDENTIAL DISCLOSURE & ACCESS AGREEMENT

This Election Confidential Disclosure & Access Agreement (the Agreement) is entered into as of by and between:

Disclosing Party Name: Disclosing Party Address: Receiving Party Name: Receiving Party Address:

WHEREAS

WHEREAS, the Disclosing Party administers election-related systems, data, materials, and processes that are sensitive to the integrity of elections and requires certain third parties to access information only on a limited and confidential basis; and

WHEREAS, the Receiving Party requires access to specific election data, materials, or systems to perform services set forth in the Scope of Work and acknowledges the special confidentiality and use limitations applicable to election information; and

WHEREAS, the parties intend by this Agreement to define the terms and conditions under which Confidential Information will be disclosed, accessed, protected, and returned or destroyed.

SCOPE OF WORK

The Receiving Party shall perform the services described below and shall access only such Confidential Information as is reasonably necessary to perform those services.

Description of Services and Access Required:

PAYMENT TERMS

As consideration for the services and access permitted under this Agreement, the Receiving Party shall be paid in accordance with the following terms.

Payment Amount (USD): Payment Schedule / Milestones: Late Payment Fee:

TERM AND TERMINATION

This Agreement shall commence on and shall continue until unless earlier terminated as provided herein.

Termination Notice Period (days):

Either party may terminate this Agreement for material breach by the other party that remains uncured for the notice period specified above. Termination shall not relieve either party of obligations accruing prior to termination nor shall it affect rights and remedies available for breach occurring prior to termination.

CONFIDENTIALITY

For purposes of this Agreement, "Confidential Information" means any non-public information, records, data, materials, voter-related records, system credentials, software, technical specifications, security procedures, or operational details disclosed or made available by the Disclosing Party to the Receiving Party in connection with election administration or the Services.

The Receiving Party agrees: (a) to hold Confidential Information in strict confidence using at least the same degree of care it uses to protect its own confidential information but no less than reasonable care; (b) not to use Confidential Information for any purpose other than performing the Services; (c) not to disclose Confidential Information to any third party except to those employees, contractors, or agents who have a strict need to know and who are bound by confidentiality obligations at least as protective as those herein; and (d) to implement and maintain administrative, technical, and physical safeguards appropriate to protect against unauthorized access, disclosure, alteration, or destruction of Confidential Information.

The Receiving Party shall not use Confidential Information to influence voters, conduct political campaigns, or otherwise engage in activities that could compromise the integrity or perceived integrity of any election. Any permitted use that results in reportable incidents or data exposures must be promptly disclosed to the Disclosing Party as set forth in the Notice provision.

Confidential Information does not include information that: (i) is or becomes publicly available through no fault of the Receiving Party; (ii) is rightfully received from a third party without restriction; (iii) is independently developed without use of Confidential Information; or (iv) is required to be disclosed by law, provided that the Receiving Party gives prompt notice to the Disclosing Party and cooperates reasonably to limit the scope and effect of such disclosure.

Confidentiality Period (years):

Upon termination or upon request, the Receiving Party shall promptly return or certify destruction of all Confidential Information and all copies thereof, except that one archival copy may be retained solely for compliance and legal purposes subject to the confidentiality obligations herein.

DATA SECURITY AND AUDIT

The Receiving Party shall maintain appropriate security controls, encryption where applicable, access logging, and personnel vetting to protect Confidential Information. The Disclosing Party retains the right to audit compliance with security obligations upon reasonable notice and during normal business hours; audits shall be conducted in a manner designed to minimize disruption and protect the Receiving Party’s other confidential operations.

INDEMNIFICATION; REMEDIES

The Receiving Party shall indemnify and hold harmless the Disclosing Party from and against any losses, liabilities, costs, or damages arising from the Receiving Party's unauthorized use or disclosure of Confidential Information, or from any breach of this Agreement. In the event of a breach or threatened breach, the Disclosing Party shall be entitled to injunctive relief in addition to other remedies at law or equity.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to conflict of laws principles.

MISCELLANEOUS

Entire Agreement: This Agreement constitutes the entire understanding between the parties with respect to the subject matter and supersedes all prior discussions, proposals, and agreements. Any amendment must be in writing and signed by authorized representatives of both parties.

Severability: If any provision is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

Notices: Notices must be in writing and delivered to the addresses provided above or such other address as a party designates in writing. Notices are effective upon receipt.

AUTHORITY

Each party represents and warrants that it has the full right, power, and authority to enter into this Agreement and that the person signing below is authorized to bind the party on whose behalf such person signs.

Disclosing Party:

By:

Date:

Receiving Party:

By:

Date:

What the Election CDA Document Is and when it applies

The Election CDA Document is a contractual confidentiality and data-access agreement used when parties exchange sensitive election-related data, analyses, or ballot imagery between government entities, contractors, vendors, and researchers. It defines permitted uses, data handling procedures, retention obligations, access controls, and restrictions on redistribution. The document typically specifies applicable privacy safeguards, governing law, and remedies for breach. When executed by authorized signatories, the Election CDA Document governs data sharing between signatories and supports compliance with federal statutes and program-specific rules that protect voter information and related records.

Why a clear Election CDA Document matters

An Election CDA Document clarifies legal responsibilities for data custodians and recipients, reduces risk of unauthorized disclosure, and documents technical and organizational safeguards. It creates a contractual basis for enforcement and auditability when sensitive voter or election operations data are exchanged.

Primary users and stakeholders

Public and private entities use Election CDA Documents to manage shared election data and responsibilities.

State and county election offices sharing voter files, ballot images, and audit logs.
Vendors and contractors performing tabulation, security testing, or system integration tasks.
Researchers, advocacy groups, and auditors analyzing processes while requiring confidentiality safeguards.

Clear designation of roles reduces ambiguity during audits, incident response, and routine data exchanges.

Representative signers and their roles

Election Director

An election official authorized to enter data-sharing agreements on behalf of a jurisdiction. Responsible for approving access levels, verifying requester credentials, and coordinating retention and destruction schedules in accordance with statutory and local requirements.

Vendor Security Lead

The primary technical contact at a contractor or vendor who implements agreed data protections, maintains logs, and responds to incidents. Must follow contract terms for encryption, access control, and reporting breaches to the election office promptly.

Core security and compliance items to include

Encryption: AES-256 at rest, TLS 1.2/1.3

Access Controls: Role-based access, least privilege enforced

Audit Trail: Timestamps, IP addresses, action logs retained

Authentication: Multi-factor options and identity verification

BAA Support: Available for HIPAA-protected data

Compliance: ESIGN, UETA, SOC 2, ISO 27001

Top legal and operational risks to avoid

Unauthorized Disclosure: Civil liability and statutory fines possible

Contract Breach: Damages, injunctive relief, termination

HIPAA Violations: Civil penalties if PHI exposed

Criminal Liability: Willful misuse may trigger prosecution

Operational Risk: Loss of public trust and votes

Regulatory Review: State audits and remedies possible

Common preparation pitfalls

Failing to specify data scope leads to overly broad sharing and makes enforcement and oversight difficult, increasing legal and operational exposure.
Using inconsistent naming or mismatched legal entity names on signatures can invalidate authority and delay processing while counsel resolves identity disputes.
Omitting retention or destruction requirements risks noncompliance with federal rules such as HIPAA or IRS recordkeeping requirements for related records.
Relying on weak signer authentication or not recording audit trails undermines evidentiary value of electronic signatures in disputes.

Step-by-step: complete and execute an Election CDA Document

Follow this sequential checklist to complete and execute the Election CDA Document accurately and in compliance with legal and operational requirements.

01

Prepare: Confirm parties, scope, dates, and governing law
02

Fill Fields: Enter legal names, addresses, and contact details
03

Review: Have legal and security teams validate terms and controls
04

Sign: Obtain authorized signatures and record audit trail

Recommended online workflow settings before sending

Configure online workflow settings to automate routing, authentication, and storage for the Election CDA Document prior to distribution.

Field	Configuration
Authentication	Email plus SMS code option
Routing	Sequential signer order with reminders
Storage	Secure PDF archival with audit log
Notifications	Configurable email and webhook alerts

Technical requirements for eDelivery and storage

Electronic delivery and signing require compatible PDF/Word documents, signer email addresses, and a platform supporting audit trails and secure storage.

Formats: PDF, DOCX, HTML supported
Integrations: Salesforce, NetSuite, Google Workspace
Authentication: Email link, SMS, KBA available

How signed Election CDAs are processed and stored

This flow shows where to send, sign, and store the Election CDA Document when exchanging data across organizations.

Upload: Attach final PDF and supporting exhibits
Place Fields: Insert signature, date, and initial fields
Authenticate: Choose signer verification level and send
Archive: Store signed copy and audit certificate

Typical timelines and deadlines to include

Key timelines and typical deadlines for preparing, executing, and retaining an Election CDA Document are useful for compliance and audit readiness.

Request Response Time:

Specify days to respond, commonly 10–30 business days

Execution Window:

Set signing deadline, typically 30 days from issuance

Retention Start:

Effective Date triggers retention obligations

Data Delivery:

Agree delivery schedule, e.g., weekly or by milestone

Audit Access:

Define notification period for inspections, commonly 14–60 days

Baseline pricing and capability comparison for eSignature vendors

Compare baseline pricing and core capabilities for common eSignature vendors to evaluate cost and compliance fit for Election CDA Document workflows.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about Election CDA Documents

Answers to frequent questions about signing, validity, and handling of Election CDA Documents in U.S. jurisdictions and online platforms.

Need help? Contact support

Is an electronic signature legally valid?
Yes. Electronic signatures are legally valid under the federal ESIGN Act (15 U.S.C. ch. 96) and state UETA statutes where adopted; intent, consent, attribution, and record retention are required. Certain exceptions (wills, court orders) remain ineligible for e-signature.
Do I need notarization or RON?
Not always. Notarization is generally not required for CDAs, but certain jurisdictions or contract types may require notarization or permit Remote Online Notarization. RON laws vary by state; confirm identity-proofing and audio-video retention requirements with the state notary commission.
What must each signature demonstrate?
Each signature must show signer intent to sign, consent to conduct the transaction electronically, a reliable method attributing action to the signer, and that the record can be retained and reproduced. These elements align with the ESIGN Act's four-part validity test.
Can HIPAA apply to Election CDAs?
Yes when protected health information is included. If the CDA covers PHI, parties must satisfy HIPAA safeguards, execute a Business Associate Agreement where applicable, and follow the six-year retention rule (45 CFR §164.530(j)). Use AES-256 and access controls to reduce risk.
What if parties have differing state laws?
Specify governing law and forum in the agreement. ESIGN preempts inconsistent state rules for interstate transactions, but state UETA or ESRA may govern intrastate issues. For New York, note ESRA provisions and consult state guidance for unique requirements.
How to preserve audit evidence for disputes?
Retain time-stamped audit trails, IP addresses, signer authentication logs, and original signed PDFs in immutable storage. Ensure the platform captures consent disclosures, signer attribution, and the signing sequence. Maintain copies for the applicable retention period to support chain-of-custody and legal admissibility.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now