Technology

The hierarchy that governs every technology decision

Ask "can we do this online" and the honest answer is always layered. Federal law sets the floor: it does not tell your board what to do, only what a state or your documents cannot take away. Above that sits state statute, which can require or forbid specific practices and which your bylaws cannot lawfully override. Above that sit your own governing documents, which can permit what state law allows but does not require, and can be stricter than state law but never looser. A parliamentary authority such as Robert's Rules of Order fills whatever gap is left, and only where the bylaws have adopted it.

"a signature, contract, or other record relating to such transaction may not be denied legal effect, validity, or enforceability solely because it is in electronic form."

Source: 15 U.S.C. section 7001, ESIGN Act, U.S. Code (Cornell Legal Information Institute)

That single federal sentence is why most board resolutions, vendor contracts, and owner consent forms can be signed and stored electronically at all. It does not answer whether a particular document also needs a notary stamp or a county recording, and it does not apply to every document type. Some notices, including default, foreclosure, and eviction notices, are excluded from ESIGN's general validity rule; check whether the document you're handling falls into a carved-out category.

What most boards get wrong

A few beliefs show up in almost every association, and the research base contradicts each one.

"Everybody does Zoom board meetings now, so it's fine even though our bylaws don't mention it." Under Robert's Rules of Order, an electronic meeting is not a valid official meeting unless the bylaws affirmatively authorize it. Widespread practice is not the same as authorization.

"It's just a friendly text reminder about dues, so consent rules don't apply." They can.

"any telephone call to any residential telephone line using an artificial or prerecorded voice to deliver a message without the prior express consent of the called party"

Source: 47 U.S.C. section 227, Telephone Consumer Protection Act, U.S. Code (Cornell Legal Information Institute)

The TCPA's consent requirement is not limited to telemarketing or debt collection. An association's own automated dues reminder or violation notice by text or robocall can trigger it, which makes it a consent-first system, not an opt-out system.

"Our payment processor handles PCI compliance, so it's not our problem." PCI DSS obligations attach to any entity that stores, processes, or transmits cardholder data, or that could affect the security of the environment that does, which can include the association's own portal or website even when a processor sits in the middle.

What varies by state, and how to check

This course was researched in depth for California, Florida, and Texas. Those three states alone show how differently the details can land: California requires an internet-based voting system to authenticate each ballot, issue a receipt, and permanently separate identity from vote; Florida's version centers on member-by-member consent instead of a board resolution; Texas requires that a meeting notice for an electronic or telephonic board meeting include actual instructions for connecting, not just a date and time.

"A record or signature may not be denied legal effect or enforceability solely because it is in electronic form."

Source: California Civil Code section 1633.7, California Legislature

If your association is outside California, Florida, or Texas, or is a condominium rather than an HOA in one of those three states, treat every specific figure in this course as a starting question, not an answer, and confirm it against your own state's statute and your governing documents.