Can an attestation be signed electronically?

Yes. The ESIGN Act (15 U.S.C. ch. 96) and UETA authorize electronic signatures when intent, consent, attribution, and retention are demonstrated. For consumer-facing health records provide the required ESIGN consumer disclosure where applicable.

Do I need a BAA to store attestations?

If the attestation contains protected health information and the vendor handles it on behalf of a covered entity, a signed Business Associate Agreement is required under HIPAA to lawfully process or store those records.

Is notarization or witness required?

Not typically. Standard influenza attestations generally do not require notarization or witnesses, but check employer policy or state rules for specific programs or legal declarations.

What if the signer reports incorrect information?

Provide a documented correction process: revoke or update the attestation, add an amendment with the correct data, and retain both versions with explanatory notes for audit trails.

How long must these records be kept?

Follow HIPAA retention guidance of six years for relevant records (45 CFR §164.530(j)) and maintain any additional employer or state-required retention periods; document your policy.

What happens if someone declines vaccination?

Record a formal declination with reason, provide documented accommodation or exemption procedures, and retain the declination as part of the employee or student file per internal policy.

Electronic Signature
Templates
Healthcare
Healthcare Influenza Attestation

Healthcare Influenza Attestation

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

HEALTHCARE INFLUENZA ATTESTATION

Facility Name: Patient Name: DOB:

Patient Information

Full Address Primary Phone Alternative Contact (Name and Phone)

Insurance & Identification

Insurance Provider

Policy / ID #

Group #

Subscriber Name

Medical History

Current Medications Known Allergies

Prior adverse reaction to influenza vaccine: Yes No

If yes, describe reaction Chronic Conditions

Influenza Vaccination Information

Vaccine administered at this visit: Yes No

Date of Vaccination

Manufacturer / Type

Lot #

Injection Site / Route Clinician (printed name and license #)

Declination (If not vaccinated)

I decline influenza vaccination at this time:

Reason for Declination (optional but recommended)

Attestation and Authorization

By signing below, I certify under penalty of law that the information provided on this Influenza Attestation is complete and accurate to the best of my knowledge. I acknowledge that I have been informed of the recommended benefits and potential common risks associated with the influenza vaccine, that I had an opportunity to ask questions, and that those questions were answered to my satisfaction. I authorize the facility to document vaccine administration and to release immunization information to public health authorities and other health care providers as permitted by applicable law.

I understand I may withdraw my consent at any time by providing written notice, however withdrawal will not affect actions already taken based on this authorization. I understand that declining vaccination may increase my risk of contracting influenza and potentially transmitting it to others.

Acknowledgment of Privacy Practices and Disclosure: I acknowledge that I have been made aware of how my health information related to this vaccination may be used and disclosed for treatment, payment, public health reporting, and health care operations in accordance with applicable privacy rules.

This authorization expires on

Patient Printed Name:

Signature:

Date:

Relationship to Patient (if signing on behalf of patient):

What a Healthcare Influenza Attestation Is and when it applies

A Healthcare Influenza Attestation is a signed statement by an individual — commonly a patient, employee, contractor, or volunteer — confirming influenza vaccination status or declaring an exemption. Organizations use it to document compliance with employer or facility vaccination policies, to support infection control programs, and to verify eligibility for certain clinical assignments. The attestation can record vaccine type, date administered, administering provider, or a written declination and may be combined with consent for access to immunization records.

Why a clear, compliant attestation matters

A properly completed attestation creates an auditable record for occupational health, reduces ambiguity about immunization status, and supports regulatory compliance such as HIPAA privacy protections when health information is recorded or transmitted.

Who completes and relies on influenza attestations

Healthcare employers, clinics, long-term care facilities, schools, and contractors typically collect attestations to manage workforce safety and patient risk.

Hospital staff and clinicians who must meet facility immunization policies and credentialing requirements.
Long-term care and assisted living operators tracking resident and staff immunization status for infection control.
Schools, childcare providers, and contractors who need proof of vaccination or documented declinations for enrollment or access.

Records from attestations are used for internal compliance reviews, audit readiness, and to inform accommodation or exemption processes.

Step-by-step: completing and submitting the attestation

Follow this sequence to complete, verify, and store an attestation with an auditable trail.

01

Gather records: Locate immunization card or provider record before starting.
02

Complete fields: Fill name, DOB, vaccine product, and administration date precisely.
03

Sign electronically: Use an eSignature that records timestamp and signer identity.
04

Submit and retain: Send to occupational health and keep a copy per retention policy.

Core components of a professional Healthcare Influenza Attestation

A complete attestation combines identifying data, vaccine specifics, signer intent, privacy disclosures, signature evidence, and a retention statement to be reliable and defensible.

Identifying Data

Full name, date of birth, employer or school, and contact information to link the attestation to the correct individual and records.

Vaccine Details

Vaccine product, lot number if available, administration date, and administering provider or clinic to validate clinical information.

Declaration

A clear statement confirming vaccination status or a formal declination that explains the basis for non-vaccination when required.

Privacy Notice

HIPAA-consistent language describing how health information will be used, who may access it, and any sharing with public health authorities.

Signature Evidence

Handwritten signature or eSignature with audit trail capturing timestamp, IP or authentication method, and signer attribution.

Retention Clause

A note stating how long records will be kept and the legal basis for retention to support compliance and audits.

Data and security considerations for storing attestations

HIPAA: BAA required for covered entities

Encryption: TLS 1.2/1.3 in transit

Data at rest: AES-256 encrypted storage

Audit trail: Signed event timestamps stored

Access controls: Role-based permissions recommended

Certifications: SOC 2 Type II and ISO 27001 available

Consequences and risks if attestations are incorrect or mishandled

Employment Action: Policy violations may lead to discipline.

Regulatory Risk: Noncompliance may trigger agency inquiries.

HIPAA Exposure: Improper PHI handling may lead to fines.

Legal Liability: False attestations can create liability.

Operational Impact: Incorrect data undermines infection control.

Record Rejection: Mismatched information may be invalidated.

Common mistakes to avoid when preparing an attestation

Using inconsistent legal names or nicknames that prevent reliable record matching and require re-submission.
Entering vaccine dates in inconsistent formats; use MM/DD/YYYY only to avoid validation failures.
Failing to capture signer intent or consent for electronic records, which may undermine enforceability under ESIGN.
Storing PHI without a signed BAA or inadequate access controls, increasing HIPAA compliance risk.

Typical eSubmission workflow for an influenza attestation

A standard eSubmission sequence reduces friction while preserving legal evidence and privacy controls.

Upload Document: Sender uploads the attestation form as PDF or DOCX.
Place Fields: Add name, date, vaccine fields, and signature blocks.
Authenticate Signer: Use email link, SMS code, or stronger authentication.
Capture Audit Trail: System records timestamp, IP, and actions for proof.

Recommended online configuration for attestation workflows

Configure the form and routing to balance ease of signing with required identity checks and recordkeeping.

Field Validation	Require MM/DD/YYYY for dates and enforce dropdown vaccine lists.
Authentication	Use email with optional SMS or two-factor for sensitive roles.
Conditional Logic	Show declination fields only when the user selects 'Decline'.
Storage Location	Store encrypted records in a HIPAA-compliant repository.
Audit Retention	Retain audit logs per policy, with export capability.

Technical and platform considerations for eSigning attestations

Choose a platform that supports secure eSignatures, audit trails, and HIPAA controls when handling health information.

File Formats: Accepts PDF, DOCX, and HTML forms
Integrations: Works with Salesforce, NetSuite, Google Workspace
Device Support: Browser and mobile-friendly signing

Ensure the vendor offers a BAA for HIPAA-covered data, audit logs for legal defensibility, and export options for long-term retention.

Timing and processing expectations for attestations

Set clear internal deadlines tied to operational needs and public health timelines to ensure coverage before peak influenza season.

Annual Submission Deadline:

Require attestations before influenza season, typically by early October.

Employer Review Window:

Allow 7–14 business days for verification and follow-up.

Correction Period:

Provide a 14-day window to correct clerical errors after submission.

Audit Availability:

Records and audit trails should be exportable within 48 hours.

Public Health Reporting:

Shareable records must comply with local public health timelines.

Comparing eSignature vendors for Healthcare Influenza Attestation workflows

Choose a vendor with HIPAA support, audit trails, and pricing that fits your volume; the table summarizes common plan attributes for decision context.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial, no credit card required	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes (BAA required)	Yes	Yes	No	No

Frequently asked questions about Healthcare Influenza Attestations

Answers below address common legal, privacy, and technical issues that arise when creating, signing, and storing attestations.

Need help? Contact support

Can an attestation be signed electronically?
Yes. The ESIGN Act (15 U.S.C. ch. 96) and UETA authorize electronic signatures when intent, consent, attribution, and retention are demonstrated. For consumer-facing health records provide the required ESIGN consumer disclosure where applicable.
Do I need a BAA to store attestations?
If the attestation contains protected health information and the vendor handles it on behalf of a covered entity, a signed Business Associate Agreement is required under HIPAA to lawfully process or store those records.
Is notarization or witness required?
Not typically. Standard influenza attestations generally do not require notarization or witnesses, but check employer policy or state rules for specific programs or legal declarations.
What if the signer reports incorrect information?
Provide a documented correction process: revoke or update the attestation, add an amendment with the correct data, and retain both versions with explanatory notes for audit trails.
How long must these records be kept?
Follow HIPAA retention guidance of six years for relevant records (45 CFR §164.530(j)) and maintain any additional employer or state-required retention periods; document your policy.
What happens if someone declines vaccination?
Record a formal declination with reason, provide documented accommodation or exemption procedures, and retain the declination as part of the employee or student file per internal policy.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now