OAR 128-050-0005: Guidelines for Use of Electronic Signatures by State Agencies

(1) The purpose of this rule is to implement the electronic signature provisions of the Uniform Electronic Signatures Act (UETA). The rule is not intended to apply to the other provisions of the act. (2) This rule applies prospectively to new software applications with electronic transactions requiring signatures that are implemented after the effective date of this rule. (3) Agencies shall follow the Information Resources Management Division policy which adopts the federal E-authentication process. The IRMD policy requires that agencies using electronic signatures: (a) Determine the level of assurance the agency needs that the party signing an electronic transaction is authentic. (b) Use only those tools and software applications approved by NIST and the Department of Administrative Services, Information Resources Management Services Division to mitigate the risks identified and provide the level of authentication needed. (4) Agencies may request an exemption from these rules from the Department of Administrative Services.