Are eSignatures legally valid?

Yes. Electronic signatures are generally legally binding under the ESIGN Act and state e-signature laws when intent, consent, attribution, and retention requirements are met.

Do I need a BAA for eSign?

If the policy records contain protected health information, execute a Business Associate Agreement with the eSignature vendor before processing PHI.

When are witnesses or notarization required?

Witness or notary requirements depend on state law and the document type; most internal policies do not require notarization but verify for legal affidavits.

Can I use Remote Online Notarization (RON)?

Many states permit RON with identity proofing and recording; confirm state rules before relying on RON for legal attestations.

How should I manage policy updates?

Keep versioned signed copies, publish change notices to staff, and require re-acknowledgment for material changes within a defined timeframe.

What records must be retained?

Retain signed policies and associated acknowledgments per HIPAA and federal guidance—commonly 6 years for PHI and at least 3 years for business records.

Electronic Signature
Templates
Healthcare
Healthcare COVID-19 Policies

Healthcare COVID-19 Policies

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE COVID-19 POLICIES

Patient Name: Date of Birth:

Patient Information

Gender

Male Female Non-binary Prefer not to say Other:

Address Phone Emergency Contact (Name and Phone)

Insurance Information

Insurance Provider Policy / ID Number Group Number Subscriber Name

Medical History (COVID-Related)

Current Medications Known Allergies Prior Surgeries / Significant Medical History Chronic Conditions

COVID-19 Policies and Patient Acknowledgment

The facility maintains active infection prevention policies to reduce transmission of SARS-CoV-2. These measures include: symptom and exposure screening, temperature checks, masking requirements, physical distancing where feasible, enhanced environmental cleaning, testing for SARS-CoV-2 when clinically indicated, and restrictions on visitors during high-risk periods. Patients are required to comply with these measures while on premises.

By signing below I acknowledge that I have received, read, and understand the above policies and that I will comply with reasonable infection control measures while receiving care. I understand that failure to comply may result in delayed or deferred non-emergency services for the protection of other patients and staff.

Screening, Testing and Disclosure

The facility may perform screening for signs or symptoms of COVID-19 and may require diagnostic testing (antigen or nucleic acid amplification) when clinically appropriate or when required by the facility to reduce transmission risk. I consent to symptom screening and diagnostic testing for SARS-CoV-2 as deemed necessary for my care and for infection control.

I authorize the facility to disclose test results and relevant health information to public health authorities, other health care providers involved in my care, and to facility personnel for the purposes of infection control, contact tracing, and treatment coordination as permitted by law.

Consents (check applicable)

I consent to symptom screening and temperature checks.
I consent to diagnostic testing for SARS-CoV-2 when clinically indicated.
I consent to disclosure of COVID-19 related results to public health authorities and treating providers as required for public health and care coordination.

Vaccination Status and Mitigation Measures

To assist in appropriate care and infection control planning, please indicate your COVID-19 vaccination status. Disclosure is voluntary but may affect recommended precautions while receiving care.

Fully vaccinated (primary series complete) Partially vaccinated Booster dose received Not vaccinated Unknown

If vaccinated, date of most recent dose

Patients who decline vaccination or testing acknowledge that additional mitigation measures (such as enhanced PPE, remote visits, or deferred elective procedures) may be applied to protect others.

Reporting of Symptoms and Exposure

Patients must promptly notify the facility if they develop symptoms of COVID-19 or learn of a significant exposure within 14 days following a visit. The facility may contact recent patients for the purpose of exposure notification in accordance with public health requirements.

Privacy, Data Use and Retention

COVID-19 related health information will be maintained in the patient health record and protected in accordance with privacy laws. Information may be retained and used for clinical care, infection control, quality assurance, and public health reporting. This authorization for disclosure for infection control purposes remains effective for the period specified below unless revoked in writing earlier.

Authorization Expiration Date

Assumption of Risk and Acknowledgment

I understand that despite the facility's infection control measures, risk of exposure to COVID-19 cannot be eliminated entirely. I voluntarily assume the risk of illness associated with presenting for in-person care. I release the facility from liability for exposure to SARS-CoV-2 that occurs in the course of receiving services, except to the extent caused by gross negligence or willful misconduct.

I acknowledge that I may withdraw my consent for testing or certain disclosures at any time in writing; however, I understand that withdrawal of consent may impact the facility's ability to provide non-emergency services or to comply with public health obligations.

HIPAA / Privacy Acknowledgment

I acknowledge receipt of the facility's COVID-19 privacy practices related to testing and disclosure and understand how my information will be used as described above.

Additional Notes

Patient Signature

Printed Name:

Relationship (if signing as guardian):

Signature:

Date:

What Healthcare COVID-19 Policies Cover

Healthcare COVID-19 Policies are formal written protocols used by hospitals, clinics, long-term care facilities, and outpatient providers to define infection-prevention measures, screening and testing procedures, vaccination and masking rules, visitor allowances, staff responsibilities, and recordkeeping requirements. These policies align local clinical operations with federal guidance, state public health rules, and payer or accreditation expectations. They document roles, timing, and escalation steps for suspected or confirmed SARS-CoV-2 cases and provide the basis for training, audits, and regulatory reporting.

Why a Clear COVID-19 Policy Matters for Healthcare Settings

A written policy reduces transmission risk, ensures consistent staff and visitor treatment, and documents compliance with public health and payer expectations. It also supports incident response, protects vulnerable patients, and creates an auditable trail for inspections and liability reviews.

Who Typically Prepares and Follows These Policies

Healthcare COVID-19 Policies are created and maintained by operational and compliance leaders; multiple groups rely on them for daily decisions.

Hospital administrators and infection prevention teams — operational ownership and audit readiness across departments.
Long-term care and skilled nursing managers — implement resident protections and visitor controls specific to congregate settings.
Ambulatory clinic managers and HR — apply staff screening, leave rules, and patient scheduling procedures.

Clear assignment of roles and distribution to clinical, support, and administrative teams helps ensure consistent application and rapid updates when guidance changes.

Stepwise Process to Create or Update a COVID-19 Policy

Follow a repeatable sequence to draft, review, approve, publish, and store policies so updates are trackable and enforceable.

01

Draft: Assemble clinical, infection control, legal input and create draft language.
02

Review: Route to leadership and legal for role-based approval and edits.
03

Publish: Issue the finalized policy to staff and make it accessible in the LMS or intranet.
04

Archive: Save signed versions and change log for retention and audit.

Minimum Security and Compliance Controls

Encryption: AES-256 at rest, TLS 1.2/1.3 in transit

Access Controls: Role-based access with MFA

Audit Trails: Detailed signer timestamps and IP logs

HIPAA: BAA required for PHI workflows

Certifications: SOC 2 Type II, ISO 27001

21 CFR: Support for 21 CFR Part 11 workflows

Key Risks and Potential Consequences

HIPAA breach fines: Possible civil and criminal penalties

Regulatory citations: State or federal health authority actions

Workplace outbreaks: Staff shortages and reputational harm

Liability claims: Potential malpractice or negligence suits

Data loss: Improper retention risks evidentiary gaps

Operational disruption: Suspensions or service limitations

Common Pitfalls When Preparing These Policies

Vague scope and definitions that lead to inconsistent enforcement across departments and shifts.
Failure to align with changing public-health guidance, resulting in conflicting procedures and late updates.
Insufficient authentication for signers or witness steps, undermining the evidentiary value of approvals.
Poor retention practices that delete signed policies before the recommended regulatory retention window.

Core Components of a Professional COVID-19 Policy

Include clear, operational sections that support clinical decisions, staff compliance, and external reporting.

Scope

Define covered sites, staff groups, and patient categories so responsibilities and exceptions are unambiguous across operations and audits.

Screening

Describe symptom and exposure screening steps for staff, patients, and visitors including frequency and escalation thresholds for testing.

Masking

State masking rules by setting and patient risk profile, provide approved mask types, and note procedures for PPE shortages or reuse.

Testing

Specify test types, specimen handling, test cadence, result reporting, and confirmatory testing requirements when applicable.

Vaccination

Document vaccination policy, acceptable proof, exemption process, and any accommodation procedures consistent with employment law.

Records

List required records (consents, declinations, test results), retention periods, storage location, and access controls for PHI.

Typical Workflow for Policy Approval and Distribution

A reliable approval-to-distribution workflow reduces lag between guidance changes and frontline compliance.

Prepare: Draft using templates and clinical input
Authorize: Obtain signatures from designated approvers
Publish: Distribute via intranet, email, LMS
Monitor: Track acknowledgments and training completion

Recommended Digital Workflow Settings

Configure electronic workflows to capture identity, approvals, and automated notifications for traceability.

Field	Configuration
Signature Type	Secure electronic signature with audit trail
Authentication	Email plus SMS OTP or SSO for staff
Privacy Setting	Enable BAA-level protections for PHI
Retention Period	Retain signed policy versions for required duration

Technical Considerations for eSubmission and Integration

Choose tools that support secure eSign, PHI protections, and integration with your clinical systems.

File formats: PDF and DOCX accepted
Integrations: EHR, HRIS, and document management
Authentication: SSO, SMS OTP, and KBA options

Ensure the chosen platform supports audit trails, BAA execution for PHI, and straightforward export to archival storage to meet retention policies.

Timing and Review Expectations

Set clear review cycles, training deadlines, and reporting timeframes to keep policy obligations current and documented.

Effective Date:

Policy takes effect on the stated MM/DD/YYYY and should be published organization-wide.

Annual Review:

Reassess and update at least annually or when guidance changes.

Training Completion:

Require staff training within 30 days of policy issuance or update.

Incident Reporting:

Document incidents promptly; follow state public-health reporting timelines which vary by jurisdiction.

Acknowledgment Tracking:

Collect signed acknowledgments and retain per retention schedule.

eSignature Pricing Snapshot for Healthcare Policy Workflows

Compare typical starting prices, trial availability, bulk send capability, audit trail support, HIPAA compliance, and envelope limits across vendors.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Yes	Yes	Yes	Yes
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No
Envelope Cap	No envelope cap	100 envelopes/user/year	Varies by plan	Varies by plan	Varies by plan

Common Questions About Healthcare COVID-19 Policies and eSignatures

Answers to frequent questions about validity, privacy, witnesses, updates, and recordkeeping for digitally signed policies.

Need help? Contact support

Are eSignatures legally valid?
Yes. Electronic signatures are generally legally binding under the ESIGN Act and state e-signature laws when intent, consent, attribution, and retention requirements are met.
Do I need a BAA for eSign?
If the policy records contain protected health information, execute a Business Associate Agreement with the eSignature vendor before processing PHI.
When are witnesses or notarization required?
Witness or notary requirements depend on state law and the document type; most internal policies do not require notarization but verify for legal affidavits.
Can I use Remote Online Notarization (RON)?
Many states permit RON with identity proofing and recording; confirm state rules before relying on RON for legal attestations.
How should I manage policy updates?
Keep versioned signed copies, publish change notices to staff, and require re-acknowledgment for material changes within a defined timeframe.
What records must be retained?
Retain signed policies and associated acknowledgments per HIPAA and federal guidance—commonly 6 years for PHI and at least 3 years for business records.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now