|
Frequently Asked Questions Regarding Massachusetts’s Uniform Electronic Transactions Act ("MUETA")
Information Technology Division 1
This release addresses questions that government agencies and their Chief Information Officers (CIOs) may have with regard to the Massachusetts version of the Uniform Electronic Transactions Act ("MUETA") (Mass Gen. L. Ch. 110G) and its application to public sector activities.
1. When did MUETA become effective?
MUETA’s effective date is February 24, 2004.
2. Where can I find the actual MUETA statute?
MUETA is codified as Mass. Gen. L. ch. 110G. An electronic version of the law is available at: http://www.mass.gov/legis/laws/mgl/110g-2.htm.
3. What is MUETA?
Similar to the Electronic Signatures in Global and National Commerce Act ("E-SIGN 2", a federal law discussed in Question 10), The Massachusetts Uniform Electronic Transactions Act was enacted for the purpose of encouraging the use of electronic commerce in business, commercial, government activities throughout the Commonwealth. Under its terms, MUETA validates the use of "electronic signatures" or "records" in "transactions" involving two or more persons. In addition, MUETA validates the use of electronic signatures, contract or records in government activities that are not considered "transactions" under the Act. Such non-transactional activities by government agencies are considered in Question 8 of this release.
MUETA is a procedural rather than a substantive statute. In other words, MUETA does not prescribe any legal consequences for the use of electronic signatures or records;
MUETA does not determine whether or not a valid electronic signature or record has LEGAL effect, but instead defers to existing law for the legal implications of such signatures or records. Absent the exemptions discussed in Question 4, MUETA ensures that electronic signatures and records have the SAME effect as their paper based versions under existing law. Although MUETA does not determine the legal consequences for VALID electronic signatures or records, MUETA does provide minimum threshold requirements which determine whether or not an electronic signature or record is valid for the purposes of MUETA. Such threshold requirements are addressed in Question 9 of this release.
To understand the broad reach of MUETA, an agency should focus on MUETA’s central validating provisions in Section 7 of the Act, which states that:
(a) A record or signature may not be denied legal effect or enforceability solely because it is in electronic form.
(b) A contract may not be denied legal effect or enforceability solely because an electronic record was used in its formation.
(c) If a law requires a record to be in writing, an electronic record satisfies the law.
(d) If a law requires a signature, an electronic signature satisfies the law.
4. What transactions are exempt from MUETA?
Although MUETA may apply to a given transaction, under Section 3 of MUETA, the Act specifically exempts a list of transactions from its provisions. If an agency wants to use electronic signatures or records for such transactions, the agency must find another source of law to give the electronic signatures or records the same, legal effect as accorded to paper signatures or records. MUETA does NOT apply to a transaction involved in:
-
The creation and execution of wills, codicils or testamentary trusts;
-
Adoption, divorce or other matters of family law;
-
Court orders or notices, or official court documents, including briefs, pleadings and other writings, required to be executed in connection with court proceedings;
-
Any notice of the cancellation or termination of utility services, including water, heat and power; or of the default, acceleration, repossession, foreclosure, or eviction, or the right to cure, under a credit agreement secured by, or a rental agreement for, a primary residence of an individual;
-
The cancellation or termination of health insurance or benefits or life insurance benefits, excluding annuities;
-
The recall of a product, or material failure of a product, that risks endangering health or safety; or
-
Any document required by any statute, regulation or rule of law, to accompany any transportation or handling of hazardous materials, pesticides or other toxic or dangerous materials.
In addition, MUETA does not apply to any transaction governed under the Massachusetts version of the UCC (Chapter 106 of Mass. Gen. Laws) except that MUETA provides electronic signatures and records as valid alternatives to the paper requirements found in sections 1-107 (involving written waivers), 1-206 (involving statute of frauds) and section 2 and section 2A (involving sales and lease contracts) of the Massachusetts UCC.
5. What is an "electronic signature" under MUETA?
Under Section 2 of the Act, an "electronic signature" is defined as "an electronic sound, symbol, or process attached to or logically associated with a record and executed or adopted by a person with the intent to sign the record."
MUETA is silent as to what the term "attached to or logically associated with" means. At a minimum, an agency must ensure that the electronic signatures it collects or creates are not made available to other parties without reference to the transaction itself.
If an agency transaction is to be conducted on the Internet, the signer’s electronic signature should either be hyperlinked to or be embedded within the html page displaying the transaction. Additional requirements for the validity of electronic signatures and records are addressed in Question 9.
An agency can meet the "attached to or logically associated with" requirement for electronic signatures by storing electronic signatures in databases that are linked either by code or application to the electronic records to which the signatures pertain, which may be stored in another database.
6. What is an "electronic record" under MUETA?
Under Section 2 of the Act, an "electronic record" is defined as a "record created, generated, sent, communicated, received, or stored by electronic means."
7. What is a "transaction" under MUETA?
Under Section 2 of the Act, a "transaction" is defined as "an action or set of actions occurring between 2 or more persons relating to the conduct of business, commercial, or governmental affairs." Unlike E-SIGN’s definition of "transaction", MUETA explicitly includes government activities in its definition of a transaction. In other words, actions involving both government agencies and respective citizens of the Commonwealth are covered under MUETA. MUETA also covers actions between government agencies, when each agency is a party to such a transaction. (For example, MUETA would apply when one agency procures products or services from another agency).
8. What is not considered a "transaction" under MUETA?
While MUETA covers actions by two or more parties, it does not usually cover unilateral actions undertaken by one person or entity which affects another person or entity. Where there is no interaction between a party and some other actor, MUETA normally does not apply. But MUETA would apply if one of the parties is a government entity. While most of MUETA deals with electronic signatures, contracts or records in the transactional setting, Sections 17 and 18 of the Act, which apply exclusively to government, implicitly make MUETA applicable to non-transactional government activities.
For example, the sections of MUETA pertaining exclusively to transactions, sections 4 through 16, would apply to a citizen’s application to a municipality for a dog license; the government-only sections of MUETA, sections 17 and 18, would also apply to a municipality’s issuance of a general public announcement regarding a change in its procedure for applying for a dog license. The first situation requires both the agency and the citizen to affirmatively act (the agency may either reject or deny the license application), while the second situation does not require any action on the part of the citizen. If such general public announcements were made by a private entity, MUETA would not apply since such announcements are not transactions for purposes of MUETA. But since the entity making the public announcement is a Commonwealth agency, sections 17 and 18 of MUETA would apply to such government action.
9. What are MUETA’s minimum threshold requirements for valid electronic signatures and records?
Legal commentators have noted that four elements are required to create a valid electronic signature: (1) authentication, (2) capturing the user’s intent, (3) binding of the signature to the document and (4) maintaining the integrity of the document. Each of these elements is addressed in some way in MUETA provisions:
Authentication. A threshold question in designing any electronic signature or record process is the identification of the person creating the signature or record, which is referred to as "authentication" in the information technology world. Under Section 9 of the Act, MUETA states that "an electronic record or electronic signature is attributable to a person if it was the act of the person", and that "the act of the person may be shown in any manner, including a showing of the efficacy of any security procedure applied to determine the person to which the electronic record or electronic signature was attributable". This means that an agency seeking to create a legally valid electronic signature must be able to prove the identity of the person creating the signature or record and that this proof can be provided in the form of records of the security system used to identify individuals approaching an electronic transaction. The agency must employ a technology that accounts for such an authentication process.
Capturing the Individual’s Intent. Under Section 9 of the Act, an electronic record or signature is attributable to a person if it was the act of the person. MUETA’s emphasis on the "act" of the person signing or creating an electronic record highlights the importance of developing electronic forms that capture the intent of the authenticated individual with respect to the electronic signature or records. MUETA states that "the effect of an electronic record or electronic signature attributed to a person . . . is determined from the context and surrounding circumstances at the time of its creation, execution, or adoption, including the parties' agreement, if any, and otherwise as provided by law. " It must be clear from the electronic documents created or signed in connection with a government transaction that it is the intent of the signor to sign or the record creator to create the record. The agency should avoid providing electronic signatures on confusing web pages presented to citizens, businesses, or other government entities in connection with online government transactions that fail to clearly indicate to such persons that they are creating or signing an official electronic record. Such signatures will fail to meet MUETA requirements for a valid electronic signature.
Binding the electronic signature to the document. While traditional signatures are of necessity embedded in the paper on which they are written, an electronic signature is not necessarily so connected. Under MUETA, it is not sufficient for an agency to provide an opportunity to citizens and businesses to create an electronically signed record; the signature must be associated with the electronic record in some way. MUETA highlights this issue in its provisions regarding electronic notarization. In that provision, the MUETA states that "[I]f a law requires a signature or record to be notarized, acknowledged, verified, or made under oath, the requirement is satisfied if the electronic signature of the person authorized to perform those acts, together with all other information required to be included by other applicable law, is attached to or logically associated with the signature or record." By the same token, electronic signatures, as well as notarization material, must be attached to or logically associated with the relevant record. An agency must ensure that the technology it employs links and/or displays electronic signatures with their associated records.
Document Integrity. Under Section 12 of the Act, MUETA requires that electronic records subject to records retention requirements must be retained in a manner that accurately reflect the information set forth in the record after it was first generated in its final form as an electronic record or otherwise. An agency should employ a technology which "memorializes" the transaction and provides for a record storage and archival process.
10. What is the relationship between MUETA and E-SIGN?
Prior to the enactment of MUETA, the Commonwealth was subject to the federal E-SIGN law which validates the use of electronic signatures, contracts and other records in transactions that relate to the conduct of business, consumer or commercial affairs between two or more persons. E-SIGN preempts any state law which is contrary to its provisions. However, E-SIGN allows states to replace E-SIGN’s central validating provision (Section 7001 (a)-(b) of E-SIGN), if the states adopt as law the National Conference of Commissioners on Uniform State Laws ("NCCUSL") version of UETA. Because the MUETA appears to be similar enough to the NCCUSL version of UETA to pass the reverse preemption test set forth in E-SIGN, it effectively replaces section 7001 (a)-(b) of E-SIGN.
As discussed above, MUETA provides broader guidance for the use of electronic signatures and records by government agencies in their transactions with respective citizens of the Commonwealth. Unlike E-SIGN, which did not cover transactions involving government affairs, MUETA explicitly includes such transactions, in addition to non-transactional government activities under its provisions. Moreover, as discussed in Question 19, MUETA explicitly includes provisions which address an agency’s use of electronic signatures, contracts or records to meet its recordkeeping and retention requirements under existing law.
An agency should note that although most transactions it typically engages in will be covered or exempted under MUETA, E-SIGN may govern transactions not specifically addressed in Section 7001 (a)-(b). For instance, transactions involving consumers will be governed by the consumer disclosure provisions in Section 7001(c) of E-SIGN. Consumer transactions are dealings where the consumer obtains products or services from an agency, which are primarily used for personal, family or household purposes. If an agency engages in such market transactions (such as the sale of real estate, or the making of personal loans), it must follow the provisions of Section 7001(c) of E-SIGN.3
11. Is the use of an electronic signature, contract or record voluntary?
MUETA does not mandate the use of electronic signatures, contracts or other records by government agencies, nor does it mandate that citizens, businesses and other government entities, who interact with Massachusetts state and local government do so electronically. To the contrary, it requires the consent of both parties to an electronic transaction. Therefore, a government agency cannot unilaterally replace traditional paper-based transactions with citizens, businesses or other government agencies and still take advantage of MUETA’s validating provisions. Rather, an agency must maintain the option of traditional paper transactions so that citizens, businesses or other government agencies with whom it does business have a choice as to whether they want to participate in an electronic transaction. There is no prohibition in MUETA, however, against agencies providing incentives for citizens, businesses and other governments to engage in electronic transactions with them.
An agency should also note that under Section 5 of the Act, MUETA allows either party to a transaction to have the right to refuse to conduct additional transactions by electronic means. The right to refuse additional electronic transactions can not be waived by agreement. Therefore, an agency MUST maintain the continued option of traditional paper transactions even if a party has assented to a particular transaction by electronic means.
12. What must my agency do to create a system for electronic signatures, contracts or records which meet MUETA requirements?
An agency should note that like E-SIGN, MUETA is a technology-neutral statute. MUETA does not require an agency to adopt a particular technology in order to receive the benefit of its provisions. Instead, MUETA requires that agencies (1) implement electronic signatures and records that meet minimum threshold standards for validity (as discussed in Question 9 and (2) comply with any additional standards that are adopted by an agency’s relevant governing board or division for the use of electronic signatures, contracts and records.
Under Section 17 of the Act, MUETA reaffirms and extends the statutory authority of the Supervisor of Public Records ("SPR") under Mass. Gen. L. ch. 66, s. 1 and Mass. Gen. L. ch. 4, sec. 7, cl. 26, and the Records Conservation Board ("RCB") under Mass. Gen. L. ch. 30, sec. 42, to set standards for the electronic signatures, contracts and other records used by state, county and local government. Section 17 also reaffirms and extends the overlapping authority of the Executive Department’s Information Technology Division ("ITD") to set information technology standards for the electronic signatures, contracts and other records of Executive Department agencies.
MUETA states that the SPR and the RCB (with respect to all state, county and local government records), and ITD (with respect to the Executive Department), "shall determine whether, the extent to which and the manner by which such entities shall create, maintain and preserve electronic records, signatures and contracts and the method of converting paper government records to electronic format".
If an agency wants to establish a valid system for electronic signatures, contracts or records, it MUST comply with the standards of the relevant governing board or division.
13. What standards have the SPR, RCB, and ITD implemented for electronic records?
The Supervisor of Records has issued several bulletins regarding the use of electronic public records. An agency should assume that any electronic records discussed in the SPR Bulletins are valid electronic records for MUETA purposes. The SPR Bulletins are available at: http://www.state.ma.us/sec/arc/arcrmu/rmubul/bulidx.htm.
As discussed in Question 19 regarding MUETA’s application to an agency’s recordkeeping and retention requirements, some SPR bulletins contain mandatory paper retention requirements that would be inconsistent with MUETA since such requirements were enacted prior to MUETA’s effective date. The following SPR to bulletin requirements would appear to have been invalidated by MUETA:
-
SPR 1-99 (Electronic Mail) – if the agency uses email as electronic records, it must retain copies of received or created by a government employee since they are public records. Any contextual data (mailing address, routing info) must additionally be retained. Email systems must retain metadata. In addition, to meet record retention requirements, an agency must PRINT OUT email files and STORE as paper records. If the email records are too large, the agency must store electronically any such emails in an agency’s electronic storage system.
-
SPR 1-92 (Facsimile Transactions) – if the agency uses faxes as electronic records, it must retain copies of such faxes on plain paper since such faxes are public record
The Records Conservation Board has also released standards on the retention of electronic records. The RCB standards are available at: http://www.state.ma.us/sec/arc/arcrmu/rmuidx.htm. Currently, the RCB has issued the following electronic record retention standards:
-
Statewide Records Retention Schedule 05/05 (an agency should focus on Section F of this schedule which consists of record standards related to IT systems), and
-
Guideline for the Documentation of Recordkeeping Systems.
An agency should assume that the electronic records discussed in these documents would be valid electronic records under MUETA.
If the agency falls under the Commonwealth’s Executive Department, it should also review any electronic records standards adopted by the ITD. ITD’s standards are available at: http://www.state.ma.us/itd/spg/publications/standards/index.htm.
Of particular note, if the executive agency uses the Internet as the medium for electronic transactions, the agency must comply with ITD’s Web Accessibility Standards. An agency should assume that information displayed on the Internet consistent with ITD’s Web Accessibility Standards and MUETA minimum threshold requirements would be considered a valid electronic record under MUETA.
14. What additional standards have been implemented for electronic signatures?
Although this standard has not yet been posted online, Executive Department agencies should observe that ITD adheres to the current policy of the Office of the State Comptroller that state contracts CANNOT be signed electronically. Even though electronic signatures for state contracts are allowed under MUETA, executive department agencies MUST comply with ITD’s policy prohibiting the use of such electronic signatures until such policy is changed.
Notwithstanding this prohibition, ITD recognizes that given the realities of the information technology world, agencies may ordinarily execute or "sign" software license agreements electronically ("clickwrap" agreements) in order to use the software for its IT needs.
15. What standards have the SPR, RCB and ITD adopted with respect to electronic signatures and contracts?
The SPR, RCB and ITD have not currently released any technology requirements for valid electronic signatures and contracts (although, as noted above, ITD defers to the Comptroller’s decision not to accept electronic signatures and contracts). Agencies should choose electronic signatures that are appropriate given the context in which they will be used. Issues that an agency should consider in choosing an appropriate technology process are considered in the next question.
16. What additional issues should my agency consider in choosing a technology process for electronic signatures and records?
Beyond the minimum threshold requirements for electronic signatures and records discussed in Question 9, an agency should employ a technology process (for authentication, validation and electronic record retention) which is tailored to its specific needs.
Before deciding on any technology process, agency CIOs should meet with their respective IT, management, legal and administrative personnel to conduct a risk analysis of the nature of the potential electronic transaction and the level of protection such a transaction would require. Moreover, the agency should determine the level of risk to be tolerated if such an electronic transaction fails or is misappropriated by a third party, and whether documents generated in connection with the transaction are likely to be used in litigation.
Once an agency has conducted a risk assessment for a potential electronic transaction, the agency should adopt a technology process that adequately addresses the risks inherent in the process. For example, an agency may decide to employ password or user identification for authenticating less critical transactions, but may decide to complement password protection with the use of a biometric device (e.g. fingerprint scanner) for more critical transactions.
A sample list of technologies an agency may want to employ in authenticating electronic signatures is provided below. While the level of protection (ensuring that the user’s identity is correct) increases as you go down the list, the costs of implementing such technologies increases as well. An agency should consider both the indirect and direct costs of implementing particular technology in addition to any risk assessment it conducts before choosing ANY technology process. An agency should consider implementing some of the following technologies used to authentic electronic signatures:
-
User identification codes and passwords (typically does not require a user’s physical access)
-
Private keys used to make a digital signature (typically does not require a user’s physical access)
-
Tokens, Smart Cards or any other physical objects that users may inserted into a reading device to ensure a user’s identity
-
Devices that measure the physical or biometric characteristics of a user which a user may insert to a reading device to ensure a user’s identity
An agency should note that no technology process will completely protect an agency’s electronic transactions. An agency should consult with ITD and other similarly situated government agencies for more information on applicable technologies used to create, maintain and preserve electronic signatures, contracts and records.
17. Now that my agency has implemented a technology process for electronic signatures, contracts and records, what happens if there is an error or change during a transmission of an electronic record?
Under Section 10 of the Act, MUETA specifically addresses the situation where an error or change has occurred during the transmission of electronic record. If the parties to a transaction have agreed to use a security procedure to detect changes or errors (for example, agreeing to use a secure authentication procedure), and one party has conformed to the procedure, but the other has not – the conforming party may avoid the effect of the changed or erroneous record.
In an automated transaction 4 setting, an individual involved in such an automated transaction may avoid the effect of an erroneous record, if the electronic agent (for example, a web server) did not provide an opportunity for the individual to prevent or correct the erroneous record and the individual (1) promptly notifies the other person of the error, and the individual’s intention not to be bound by the erroneous record, and (2) takes reasonable steps (including steps that conform to the other person’s reasonable instructions) to return or destroy (at the other person’s instruction) any consideration received as a result of the erroneous record.
An individual’s right to avoid changed or erroneous records can not be waived by an agreement by the parties.
In order for an agency to ensure that appropriate electronic records are retained by the agency and sent to citizens, businesses or other government entities with which the agency engages in automated or non-automated transactions, the agency should provide any such parties with an appropriate agency contact as well as any reasonable steps such parties should take in the event that an erroneous or changed electronic record is discovered.
18. How can my agency determine when electronic records are sent and received?
An agency should be mindful of any statutory or regulatory rules that require the agency, citizens or businesses to take certain acts within specified time periods. For example, a citizen against whom a decision has been rendered by an agency may have only so many days to file an appeal with the agency. Electronic systems created by state agencies after MUETA’s effective date must preserve existing statutory and regulatory timeframes for agency transactions in a manner consistent with Section 15 of MUETA, which governs when the sending or receipt of a document involved in an electronic transaction will be deemed to have occurred.
Unless otherwise agreed to by the parties, Section 15 of the Act deems that an electronic record has been sent when it (1) is addressed properly or otherwise directed properly to an information processing system (such as an email server) which a recipient has designated or uses to receive electronic records, (2) is in a form capable of being processed by that system and (3) enters an information processing system outside the control of the sender or enters a region of the information processing system designated or used by the recipient which is under the control of the recipient. For instance, an email is sent under MUETA, not when a sender actually clicks SEND on his/her email application, but when either (1) such email leaves the sender’s email application or server or (2) is received by a recipient email server or application.
Unless otherwise agreed to by the parties, Section 15 also deems an electronic record to be received when: (1) it enters an information processing system that the recipient has designated or used to receive electronic records and (2) is in a form capable of being processed by that system. An electronic record is received even if no individual is aware of its receipt. In continuing the example above, an email record is received when it is received by either the recipient’s email server or application. The email does not have to be read or accessed by a recipient in order for it to be considered received under MUETA.
Section 15(g) also provides that if a person is aware that an electronic record that was purportedly sent or received under the section’s provisions, but was not actually received sent or received, the legal effect of the sending or receipt will not be governed by MUETA, but by other existing law. 5
19. How does MUETA apply to my agency’s recordkeeping and retention obligations?
State and local agencies are subject to recordkeeping obligations under the Commonwealth’s Records Conservation Law, Mass. Gen. L. ch. 30, sec. 42. Under Section 12(d) and 12(f) of MUETA, agencies can now meet their statutory recordkeeping obligations, as well as their obligations to keep records for evidentiary, audit or like purposes, by retaining electronic public records as opposed to paper ones, even where state law, regulation or policy requires that a record be retained in its original form and the original record is not electronic.
However, under Section 12(a) of MUETA, electronic records retained for the purposes of satisfying state records retention law must (1) accurately reflect the information set forth in the record after it was first generated in its final form as an electronic record or otherwise; and (2) remain accessible for later reference.
Under Section 12(g), The Legislature, SPR, ITD, and individual state agencies may impose additional record keeping requirements on electronic records subject to their jurisdiction. An agency should review any applicable electronic record retention standards discussed in Question 13 of this release.
An agency should note that although the governing bodies mentioned above can impose additional recordkeeping requirements for electronic records, such bodies cannot re-impose pre-MUETA mandatory PAPER recordkeeping requirements.6
20. What other legal requirements should my agency be mindful of in conducting electronic transactions under MUETA?
As discussed earlier, MUETA is a procedural rather than substantive statute; it does not prescribe the legal consequences of any electronic signature, contract or records. Under Section 3(d) of the Act, any transaction to which MUETA applies may be subject to other applicable substantive law. An agency should be mindful of how transaction to which MUETA applies affects any substantive law or regulatory rule that normally governs such agency’s transaction. 7 In addition, an agency should ensure that implementing an electronic signature, contract or record system does not circumvent any of the state’s existing privacy laws.
As discussed in Question 10, an agency will be subject to Section 7001(c) of E-SIGN if it engages in a consumer transaction. MUETA also provides additional guidance for agencies when an applicable MUETA transaction triggers a substantive law that requires written disclosure of the transaction. Under Section 8 of the Act, MUETA’s disclosure rules apply whenever a "law, other than [MUETA], requires a record to be posted or displayed in a certain manner, to be sent, communicated, or transmitted by a specified method, or to contain information that is formatted in a certain manner". Because it is not confined to consumer disclosures, section 8 will apply to a broader set of governmental activities than does section 7001(c) of E-SIGN.
Section 8 divides substantive disclosure laws into two camps: (1) laws that require written disclosure from one party to another party in a transaction, and (2) laws that require records to be posted or displayed in a certain manner. Under the first category of disclosure laws, MUETA deems that the law is satisfied if the parties agree to a transaction by electronic means, and the required written disclosure is sent electronically to the required party under the disclosure law. The law will not be satisfied if the required party can not retain the electronic record; a record is not capable of retention if the sender or its information processing system inhibits the required party from printing or storing the record.
If the disclosure law falls under category 2, MUETA requires that a record of the transaction be posted or displayed in the manner specified in the disclosure law. A requirement under a disclosure law other than MUETA to send, communicate, or transmit a record by regular United States mail, may be varied by agreement to the extent permitted by the other law.
21. Can a Commonwealth Agency post decisions resulting from administrative adjudications online?
A: There is no prohibition in MUETA against posting administrative decisions online. Agencies are cautioned, however, that they need to consider the privacy implications of posting online agency decisions that historically may have been public record but have not been viewable around the clock by a potential audience of millions.
22. Can we force electronic technology on people involved in the adjudicative hearing process.
MUETA doesn’t answer this question; it only validates electronic signatures, contracts and records.
23. Where are the cost savings if we have to provide a paper option? Aren’t we spending more money if we have to do both electronic and paper postings?
MUETA only validates electronic signatures, contracts and records used in state government; it does not substitute for agencies’ traditional cost-benefit analysis as they consider introducing technology to an agency activity.
24. What happens if my agency ends up in litigation in which the agency evidence is electronic because we have relied on an electronic transaction validated under MUETA? Without paper, how do we introduce evidence or send an administrative record to a court considering an appeal?
A: Today both the State and Federal courts deal with the introduction of electronic evidence. Lawyers representing your agency will have to comply with the relevant rules of evidence and procedural rules regarding the transfer of adjudicative records from the agencies to the courts.
25. What should agencies do for people who do not have access to computers or technology?
A: MUETA is a validating law. By preserving a "paper option", agencies can address the "digital divide" in the Commonwealth; the elderly, poor, handicapped individuals, and minorities do not have the same access as others to online services.
26. What if my agency is not prepared from a practical standpoint to engage in online transactions?
A: MUETA does not require that your agency do anything. It only validates electronic signatures and records that you may choose to use.
27. How does MUETA impact our obligations to respond to records requests under the Public Records Law, Mass. Gen. L. ch. 66, sec. 10?
According to the Supervisor of Public Records, electronic records are subject to the public records law. MUETA supports this position.
Agency counsel must advise their clients that, when responding to public records requests, they should consider all of the electronic documents they control, including those on portable devices like laptops and Blackberries and disks as well as documents they may store on their hard dive or on shared drives. The bidder is probably correct.
28. Under MUETA can agencies allow vendors to file only an electronic proposal and skip the paper submission?
In theory, under MUETA, an all-electronic submission would suffice. However, because the Comptroller has not yet permitted agencies to enter electronic contracts, agencies should still obtain paper copies of vendor proposals
29. How do individuals who are signing a document online sign under the pains and penalties of perjury?
A: The same way it happens on paper. The "signed under the pains and penalties of perjury" language must appear before the line or page where the signor signs.
30. How can anyone sign an electronic document, when it’s on a computer?
MUETA leaves that question up to the person collecting the signature. Any electronic signature method that the person collecting the signature wants to use is legally valid under MUETA if (1) it’s not exempted from MUETA; (2) the signor is authenticated; (3) the process captures the signor’s intent; (4) the signature is attached to or logically associated with that which is signed and (5) the integrity of the electronic record is preserved.
Examples of electronic signatures with which we are all familiar are (1) signature of "orders" placed online by clicking on an "I agree" button following authentication of the user via credit card; (2) use of digitized signatures at department store checkouts; and (3) use of an ATM card and PIN number at an automatic teller machine.
31. Can agencies conduct adjudicatory hearings online?
MUETA doesn’t answer that question. MUETA would validate electronic signatures and records used in the process.
32. Does MUETA cover federal government transactions with citizens?
Yes if the transaction is between a state government agency and the Federal government. Other transactions in which the Federal government engages are covered by E-SIGN and the Federal Government Paperwork Elimination Act.
33. Can agencies engage in electronic notice and comment processes?
MEUTA doesn’t answer that question. It does validate any electronic signatures and records used in the process.
34. Electronic identity theft is a growing problem. Isn’t engaging in electronic transactions an invitation to such fraud?
Identity theft is a growing problem both in the paper and electronic worlds. MUETA neither created nor solves that problem. Agencies must take appropriate security measures to guard against such abuses.
35. Doesn’t MUETA only apply to digital signatures?
No. Digital signatures are a subset of the universe of electronic signatures. They are expensive and complex to administer. ITD does not support digital signatures for state agencies. State agencies already use a wide variety of other types of electronic signatures.
36. Does MUETA validate the acceptance of electronic claims by agencies?
Yes, absent any other law forbidding such a practice.
37. Can an agency forbid use of electronic signatures and records?
Absent Federal law, or Massachusetts law enacted post-UETA, to the contrary, an agency:
-
Cannot forbid the use of electronic signatures and records in the transactions between private parties that it regulates but
-
Can decide that it is not ready to use electronic signatures and records in connection with its transactions with private parties. UETA does not require any state agency to adopt the use of electronic signatures or records.
38. Where can I find additional information about MUETA?
Although there are only a handful of state law cases from other jurisdictions interpreting their state’s UETA, agencies should be aware of several different resources for questions about the impact of UETA on public sector law.
First, the 1999 NCCUSL version of UETA includes excellent notes explaining in detail the meaning of its provisions. The NCCUSL version of UETA, with commentary, is available online at http://www.law.upenn.edu/bll/ulc/fnact99/1990s/ueta99.htm. Although not precedential, the NCCUSL commentary will no doubt be persuasive to courts interpreting the impact of UETA on public sector entities.
Second, because of the similarities between E-SIGN and UETA, several years of state and Federal case law arising under E-SIGN, however sparse, may shed light on questions arising under MUETA.
Third, the Federal Government Paperwork Elimination Act ("GPEA"), Pub. L. No. 105-277, §§1701-1710 (1998) (codified as 44 U.S.C.A. § 3504 n. (West Supp. 1999)),which validated electronic signatures, contracts and other records used by the Federal Government, has been the subject of numerous Federal government policy statements which are helpful to public sector agencies seeking to adopt electronic processes. The best such publication is the Office of Management and Budget’s Legal Considerations in Designing and Implementing Electronic Processes, A Guide for Federal Agencies, available online at http://www.usdoj.gov/criminal/cybercrime/eprocess.htm.
Agencies should also contact: Linda Hamel, General Counsel for the Information Technology Division (ITD), (617) 626-4404. linda.hamel@state.ma.us for any additional requests for resources or any more specific questions regarding MUETA.
1 John Lee, Harvard Law School ’05, made a significant contribution to the drafting of this FAQ
2 A full text of the E-SIGN law is available at: http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=106_cong_public_laws&docid=f:publ229.106. Cite as: P.L. 106-229, 15 U.S.C.A. s. 7001 et seq.
3 Such consumer disclosures may also be subject to MUETA disclosure requirements (which are discussed in Question 20) if MUETA disclosure requirements are not contrary to or narrow the scope of E-SIGN’s consumer disclosure law.
4 MUETA defines an automated transaction as "a transaction conducted or performed, in whole or in part, by electronic means or electronic records, in which the acts or records of one or both parties are not reviewed by an individual in the ordinary course in forming a contract, performing under an existing contract, or fulfilling an obligation required by the transaction." An agency in deciding on whether to implement electronic transactions for its specific needs, should also consider the option of implementing automated transactions since such transactions are covered by MUETA’s provisions.
5 In addition, Section 15 states that unless otherwise agreed to, an electronic record is deemed to be sent from a sender’s place of business (or residence, if the sender has no business) and is deemed to be received by a recipient’s place of business (or residence, if the recipient has no business). If the sender or recipient has more than 1 place of business, the place of business for such sender or recipient is the place having the closest relationship to the underlying transaction.
6 However, an agency should note that mandatory paper retention requirements prior to MUETA’s enactment will SURVIVE MUETA if such paper retention requirements involve transactions which are EXEMPT from MUETA.
7 An agency should also be mindful that MUETA may not wholly apply to a related series of transactions. For example, a regulatory rule may require that an agency’s application forms be produced in writing and that applicants should submit completed forms "in person" to the agency. Although MUETA would allow an application to be provided to an applicant in electronic form (the first transaction), the applicant could not use MUETA to submit the completed form electronically (the second transaction). MUETA can not circumvent an "in person" requirement since providing a record "in person" is not the equivalent to providing a written record. An agency in this situation, must comply with the "in person" portion of the regulation until it is amended. |