27 CFR 73.11
§ 73.11 What are the required components and controls for acceptable electronic signatures?
United States · 27 CFR — Alcohol, Tobacco Products and Firearms · Status: effective
Cite this
- Citation
- 27 CFR 73.11, § 73.11 What are the required components and controls for acceptable electronic signatures?, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/118910
- Permanent ID
ys:prov:118910@1- SHA-256
95c210f2223303d310e08eb5829bafcc0cf7a66f1b4e28d8120efd9c65dd8d2f
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
(a) Electronic signatures not based on biometrics. If you use electronic signatures that are not based upon biometrics you must:
(1) Employ at least two distinct identification components such as an identification code and a password;
(2) Use both identification components when executing an electronic signature to an electronic document; and
(3) Ensure that the electronic signature can only be used by the authorized user.
(b) Electronic signatures based on biometrics. If you use electronic signatures based upon biometrics, they must be designed to ensure that they cannot be used by anyone other than their genuine owners.
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.