Can the protocol be signed electronically?

Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are satisfied.

Do I need a HIPAA BAA for health data?

If the protocol collects or stores protected health information handled by a vendor, execute a HIPAA business associate agreement and follow 45 CFR §164 requirements for PHI safeguards.

How long must I keep these records?

Retain health incident records per applicable federal baselines such as IRS or HIPAA: HIPAA records six years (45 CFR §164.530(j)); retain employment-related records as required by law and company policy.

Who may sign the protocol?

An authorized representative with delegated authority should sign; record the signer’s title and authority in the document to establish organizational consent and enforceability.

Are digital (PKI) signatures required?

Not usually. ESIGN and UETA accept broad electronic signatures; cryptographic digital signatures provide stronger non-repudiation and may be required for certain regulated records.

How do I update the protocol later?

Implement a revision log, require the same approval workflow as the original, notify affected staff of substantive changes, and archive previous versions for auditability.

Electronic Signature
Templates
Miscellaneous
Health and Safety COVID-19 Protocol

Health and Safety COVID-19 Protocol

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTH AND SAFETY COVID-19 PROTOCOL AGREEMENT

Effective Date:

Parties

Company / Client Name: Company Address: Company Contact Person / Title: Company Contact Phone / Email: Service Provider / Contractor Name: Service Provider Address: Provider Contact Person / Title: Provider Contact Phone / Email:

WHEREAS

WHEREAS, Company operates business activities at the location(s) identified above and seeks to protect employees, contractors, clients, and visitors from the transmission of COVID-19 and related communicable diseases; and

WHEREAS, Provider has expertise and will provide services, protocols, training, or supplies necessary to implement and maintain the Health and Safety COVID-19 Protocol described in this Agreement; and

WHEREAS, the parties desire to set forth their respective responsibilities, reporting requirements, and confidentiality protections with respect to health information collected or generated under this Protocol.

Scope of Work

Provider shall perform the following services and deliverables as part of the Protocol. Describe duties, frequency, and measurable outcomes:

Operational Protocols and Controls

The parties agree that the Protocol will include the following control measures. Select applicable measures and provide implementation details where requested.

Masks or face coverings required in specified areas

Vaccination policy for employees/contractors

Routine testing requirement

Daily health screening / temperature checks

Isolation and return-to-work protocols for confirmed or suspected cases

Reporting Procedures for Positive or Suspected Cases:

Payment Terms

Company will pay Provider for services under this Protocol as follows.

Total Fee / Rate: Payment Schedule:

Late Fee: after days past due.

Term and Termination

Term Start Date: Term End Date:

Either party may terminate this Agreement for convenience upon days' prior written notice to the other party. Termination for cause may occur immediately if a material breach is not cured within days after written notice.

Confidentiality and Health Information

All medical or health-related information collected, generated, or received in connection with this Protocol is Confidential Information of the disclosing party. Provider and Company shall limit access to such information to personnel with a legitimate need to know, shall store and transmit such information securely, and shall not use or disclose such information except as required by law or as necessary to perform obligations under this Agreement. Parties shall comply with applicable privacy and health information protection laws and policies.

Confidentiality Duration (years):

Indemnification and Liability

Each party shall indemnify, defend, and hold harmless the other party from and against claims, liabilities, losses, and expenses arising from the indemnifying party's negligent acts or omissions in performing this Protocol. Except to the extent prohibited by law, neither party shall be liable for incidental, consequential, or punitive damages arising from performance under this Agreement.

Governing Law

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to conflict of law principles.

Entire Agreement; Amendments

This Agreement, including any attachments and incorporated protocols, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior discussions and agreements. Any amendment or modification must be in writing and signed by authorized representatives of both parties.

Miscellaneous

If any provision of this Agreement is held invalid or unenforceable, the remaining provisions shall remain in full force and effect. Notices required by this Agreement shall be delivered to the contact persons specified above.

Company (Printed Name):

By:

Date:

Provider (Printed Name):

By:

Date:

What the Health and Safety COVID-19 Protocol Is

A Health and Safety COVID-19 Protocol is a formal workplace document that records an organization’s infection-prevention measures, case reporting procedures, screening rules, cleaning and PPE standards, contact-tracing steps, and roles for implementation. It defines scope, effective date, responsibilities, accommodations, and how incidents are logged and reviewed to align operations with public health guidance and applicable workplace rules.

Why a Clear COVID-19 Protocol Matters

A written protocol clarifies expectations, reduces exposure risk, and supports consistent response to suspected or confirmed cases. It helps employers demonstrate good-faith compliance with workplace safety obligations, manage liability, and preserve operational continuity while protecting employees, visitors, and contractors.

Who typically prepares and follows this protocol

Use the protocol as an operational reference and share it with supervisors, employees, and any external contractors who access your sites.

Human resources and safety managers responsible for policy, training, and incident response coordination.
Healthcare providers and clinics managing patient flow, screening, and HIPAA-sensitive reporting.
Schools and higher-education administrators enforcing student, staff, and visitor health requirements.

Core components to include in a professional protocol

A comprehensive protocol is modular: screening and testing, exposure response, PPE and hygiene, communication, recordkeeping, and continuous review. Each module should include responsible roles, required actions, and escalation pathways to ensure rapid, auditable responses.

Screening

Define daily screening questions, temperature checks, and criteria for denying workplace entry; include remote-work triggers and documentation procedures.

Exposure Response

Describe steps for isolation, testing recommendations, contact identification, and return-to-work criteria consistent with public health guidance.

PPE & Cleaning

List required PPE by role, cleaning frequency for high-touch surfaces, approved disinfectants, and documentation of cleaning logs.

Communication

Specify internal reporting channels, employee notifications, external reporting to public health authorities, and templates for consistent messaging.

Recordkeeping

Detail what data is retained, who has access, retention periods, and procedures to secure health information under privacy rules.

Review & Updates

Establish periodic review cadence, triggers for revision (e.g., public health updates), and approval authority for substantive changes.

Required information fields for each incident record

Full name: Legal name

Date of birth: MM/DD/YYYY

Contact information: Phone and email

Symptom status: Present/absent

Exposure history: Known/unknown

Vaccination status: Verified/declined

Step-by-step: completing and issuing the protocol

Follow a simple authoring-to-distribution workflow so the protocol is approved, distributed, and tracked for compliance.

01

Draft: Assemble modules and responsibilities in a single document.
02

Review: Legal, HR, and safety leadership confirm content and obligations.
03

Approve: Designated approver signs and timestamps the finalized protocol.
04

Distribute: Publish to employees, contractors, and post where necessary.

Digital workflow settings to configure

Configure signers, field behavior, and authentication to match the protocol’s sensitivity and legal requirements.

Field	Configuration
Signer order	Sequential or parallel routing
Authentication	Email, SMS code, or stronger verification
Conditional fields	Show fields only if symptomatic
Audit trail	Enable IP, timestamp, and action logs

Technical considerations for eDelivery and signing

Ensure the platform supports audit trails, appropriate signer authentication, and data residency or BAA requirements where protected health information is involved.

Formats: PDF, DOCX supported
Integrations: Connectors to HR or storage
Encryption: TLS in transit; AES-256 at rest

How electronic completion and recordflow typically operates

A streamlined electronic workflow reduces delays and creates an auditable record from submission to storage.

Upload document: Sender uploads final protocol file.
Place fields: Add signature, date, and data fields.
Send to signers: Email link or secure invite is delivered.
Archive: Signed copy plus audit trail stored securely.

Typical timing expectations and reporting deadlines

Set clear internal deadlines so cases are handled and records are created promptly to meet obligations and reduce transmission risk.

Immediate reporting:

Report suspected or confirmed cases to HR or safety within 24 hours.

Contact notifications:

Notify close contacts as soon as exposure is confirmed.

Cleaning actions:

Begin enhanced cleaning within 24–48 hours of confirmed exposure.

Return-to-work:

Follow public-health guidance and medical clearance procedures.

Policy review:

Review protocol after any workplace transmission incident.

Key milestones from adoption to routine review

Track the protocol through drafting, formal approval, rollout, and recurring reassessment to preserve effectiveness.

01

Draft complete

All modules combined and internally vetted for consistency.

02

Leadership approval

Authorized signatory approves policy and assigns responsibilities.

03

Employee rollout

Distribute to staff and deliver required training.

04

Periodic review

Reassess at scheduled intervals or after public-health updates.

Common mistakes to avoid when preparing a protocol

Vague responsibilities leaving supervisors unclear about escalation steps.
Inconsistent date formats and name mismatches that hinder record linking.
Failure to secure health data or to obtain necessary consents.
Not updating the protocol after public health guidance changes.

Principal legal and compliance risks for deficient protocols

OSHA enforcement: Citations possible under Occupational Safety and Health Act

HIPAA exposure: Civil penalties for PHI mishandling under 45 CFR §164

Employment claims: Wrongful-termination or discrimination litigation risk

Regulatory fines: Public-health order violations may carry fines

Contract risk: Breach or indemnity claims from partners

Reputational harm: Public incidents can damage trust and operations

Representative eSignature vendor comparison for COVID-19 protocol workflows

This table compares core pricing and capability dimensions relevant to executing and storing signed COVID-19 protocols. Prices reflect typical per-user, annual-billing starting points and common capability distinctions.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by plan	Varies by plan	Free tier available	Free tier available
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

FAQs — common questions about using a COVID-19 protocol

Answers address legality, signature methods, privacy, retention, and updates for workplace COVID-19 protocols.

Need help? Contact support

Can the protocol be signed electronically?
Yes. Electronic signatures are legally valid under the ESIGN Act (15 U.S.C. §7001) and UETA where adopted, provided intent, consent, attribution, and record retention requirements are satisfied.
Do I need a HIPAA BAA for health data?
If the protocol collects or stores protected health information handled by a vendor, execute a HIPAA business associate agreement and follow 45 CFR §164 requirements for PHI safeguards.
How long must I keep these records?
Retain health incident records per applicable federal baselines such as IRS or HIPAA: HIPAA records six years (45 CFR §164.530(j)); retain employment-related records as required by law and company policy.
Who may sign the protocol?
An authorized representative with delegated authority should sign; record the signer’s title and authority in the document to establish organizational consent and enforceability.
Are digital (PKI) signatures required?
Not usually. ESIGN and UETA accept broad electronic signatures; cryptographic digital signatures provide stronger non-repudiation and may be required for certain regulated records.
How do I update the protocol later?
Implement a revision log, require the same approval workflow as the original, notify affected staff of substantive changes, and archive previous versions for auditability.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now