Hi Virginia,
Great question. Thanks for bringing it up. This gets at the parts of Part 11 compliance that relies upon the associated control procedures surrounding the use of e-signature software (I included the applicable text from part 11 below). Basically, it is up to each company to have sufficient documented controls to ensure that each of their employee's electronic signatures is verified and unique to them. Use of Adobe Reader alone is not enough to ensure this, as you have seen, so I would always recommend that it only be used in the context of a broader control process that takes these risks into account. I would recommend incorporating trusted identities into that process. Here is some info on using and managing trusted identities in Adobe, particularly the Adobe Approved Trust List (AATL)
https://helpx.adobe.com/acrobat/using/trusted-identities.html.I haven't used AATL myself, so I'll take some time soon to try it out. I'm guessing there will need to be some changes to my tutorial to incorporate this change. I'd love further feedback if you have it!
§11.100 General requirements.
(a) Each electronic signature shall be unique to one individual and shall not be reused by, or reassigned to, anyone else.
(b) Before an organization establishes, assigns, certifies, or otherwise sanctions an individual's electronic signature, or any element of such electronic signature, the organization shall verify the identity of the individual.
(c) Persons using electronic signatures shall, prior to or at the time of such use, certify to the agency that the electronic signatures in their system, used on or after August 20, 1997, are intended to be the legally binding equivalent of traditional handwritten signatures.
(1) The certification shall be submitted in paper form and signed with a traditional handwritten signature, to the Office of Regional Operations (HFC-100), 5600 Fishers Lane, Rockville, MD 20857.
(2) Persons using electronic signatures shall, upon agency request, provide additional certification or testimony that a specific electronic signature is the legally binding equivalent of the signer's handwritten signature.
------------------------------
Aimee Feuser
Trestlework, LLC
Chicago, IL
------------------------------
Original Message:
Sent: 26-Mar-2020 13:37
From: Virginia Anastassova
Subject: Temporary solution for hard copy signatures
Hi Aimee,
Thank you for putting together the tutorial! Very helpful! I tested it and it works. What I also found out however is that I can create an electronic signature for whoever I want and sign, Have you found a work around for that? How do you ensure that the person actually signed and somebody else did not create a signature for them and signed?
------------------------------
Virginia Anastassova RAC
RA Manager, Senior QA Specialist
Victoria BC
Canada
Original Message:
Sent: 24-Mar-2020 12:02
From: Aimee Feuser
Subject: Temporary solution for hard copy signatures
Hi!
I've run into this before and here's what I came up with:
- For client/external signatures I use SignNow, which is super intuitive and user friendly. You can get three signatures per month for free.
- For clients who need an affordable e-signature solution for their team (where there are often many documents to sign per month by just a handful of people), I recommend using Adobe Reader. It's free and offers functionality that enable compliance with part 11 (although full compliance with part 11 obviously requires additional policies/procedures/controls). Once clients are up and running with this, they usually find it is much faster and easier than the print/sign/scan routine.
I'm attaching a tutorial document and am working on getting a tutorial video up soon.
Hope this is helpful!
------------------------------
Aimee Feuser
Trestlework, LLC
Chicago, IL
Original Message:
Sent: 20-Mar-2020 07:57
From: Anonymous Member
Subject: Temporary solution for hard copy signatures
This message was posted by a user wishing to remain anonymous
Hi All
In light of many people working from home now and in light of the fact that many small firms still use hand signed approvals, I would be interested in hearing of any creative solutions (scans, emails etc) and to hear of people's views on the acceptability of these temporary approval methods in light of the extraordinary situations we are going through at the moment.