Master Services Agreement Law in the United States
A Master Services Agreement (MSA) is a contract that sets standard terms for multiple future projects, so you don't renegotiate everything each time. U.S. law does not require any specific clauses in a private MSA, but federal statutes mandate certain terms when the agreement involves healthcare data, financial services, or government contracts, and federal courts enforce arbitration, forum selection, and electronic signature provisions under uniform national standards.
What is a Master Services Agreement?
A Master Services Agreement is a framework contract that establishes standard terms for future engagements, with specific obligations defined through incorporated documents like Statements of Work (SOWs) or Orders. This lets you negotiate once, then add project details later. An MSA is enforceable only if it includes enough concrete details. If it punts everything to future documents with no real commitment, courts may call it an unenforceable "agreement to agree."
What clauses should every MSA include?
While federal law only mandates terms in specific contexts, every MSA should include these baseline clauses: - Scope/Services: A clear description of the work, often detailed in attached SOWs. - Payment Terms: How and when payment is made, including rates and invoicing schedules. - Term/Termination: The agreement's duration and conditions for ending it. - Intellectual Property Ownership: Who owns pre-existing and newly developed IP. - Confidentiality: Obligations to protect proprietary information exchanged under the agreement. - Indemnification: Protections against third-party claims for issues like bodily injury or IP infringement. - Limitation of Liability: Caps on total damages and waivers of indirect damages like lost profits. - Dispute Resolution: Procedures for handling conflicts, which may include arbitration or litigation. - Governing Law: Which state's law applies to interpret the contract.
Does federal law require specific MSA clauses?
No comprehensive federal statute governs all MSAs. Required terms arise only in specific regulatory contexts:
Healthcare: HIPAA Business Associate Agreements
When a covered entity engages a business associate for functions involving protected health information, 45 C.F.R. § 164.504(e) mandates ten specific contractual elements: - Establish permitted and required uses and disclosures of PHI - Prohibit use or disclosure beyond contract permissions or legal requirements - Require implementation of appropriate safeguards, including Security Rule compliance for electronic PHI - Mandate reporting of security incidents and breaches - Facilitate individual rights (access, amendment, accounting of disclosures) - Require compliance with applicable HIPAA obligations when performing covered entity functions - Make internal practices available for HHS compliance auditing - Require return or destruction of PHI upon termination - Ensure subcontractors agree to same restrictions - Authorize termination for material HIPAA breaches
Business associates must notify covered entities of breaches "without unreasonable delay and in no case later than 60 calendar days after discovery" (45 C.F.R. § 164.410). These requirements are non-waivable and enforced by HHS Office for Civil Rights.
Financial Services: GLBA Safeguards
Under 16 C.F.R. § 314.4(f), financial institutions must contractually require service providers to implement and maintain appropriate safeguards for customer information. The contract must "effectuate" this safeguard requirement, though the regulation does not prescribe verbatim language.
Federal Government Contracts: FAR Mandatory Clauses
The Federal Acquisition Regulation imposes non-negotiable terms for service contracts with U.S. government entities. FAR 52.249-2 authorizes termination for government convenience and prescribes post-termination obligations: work stoppage, inventory schedules within 120 days, settlement proposals within one year, and record retention for three years after final settlement. These provisions apply only to federal procurement, not private commercial agreements.
What terms can't I put in an MSA?
Consumer Review Restrictions
The Consumer Review Fairness Act, 15 U.S.C. § 45b, voids three categories of provisions in "form contracts" with consumers: restrictions on consumer review ability, penalties or fees for posting reviews, and intellectual property transfers of review content. This statute does not apply to employment or independent contractor agreements. Enforcement rests with the FTC as unfair or deceptive practice.
Pre-Dispute Arbitration for Sexual Assault and Harassment Claims
Under 9 U.S.C. § 402, effective March 3, 2022, predispute arbitration agreements and joint-action waivers are not valid or enforceable for cases involving sexual assault or sexual harassment if the person alleging the conduct elects not to arbitrate. This provision operates as a claim-specific exception: the claimant's election controls, and if they choose not to arbitrate, the federal court must proceed with litigation for those claims. Other disputes remain subject to arbitration unless separately exempted.
Unconscionable Terms
Federal courts apply general contract principles to assess unconscionability. Between sophisticated business entities with legal counsel that freely entered an agreement after review, procedural unconscionability is typically not found, and substantive terms—even favoring one party—are generally enforced (Schnellecke Logistics USA LLC v. Lucid USA Incorporated, No. CV-22-01893-PHX-SMB (D. Ariz. Aug. 23, 2023)).
Will my MSA hold up in court?
Electronic Signatures
The E-SIGN Act, 15 U.S.C. §§ 7001–7031, establishes that signatures, contracts, and records "may not be denied legal effect, validity, or enforceability solely because it is in electronic form." An electronic signature means "an electronic sound, symbol, or process, attached to or logically associated with a contract or other record and executed or adopted by a person with the intent to sign the record" (15 U.S.C. § 7006(5)). This definition encompasses click-through agreements, typed names, and cryptographic signatures.
Consumer-facing MSAs face additional requirements: affirmative consent, disclosure of right to paper records, withdrawal procedures, and hardware/software accessibility confirmation. Commercial MSAs between business entities operate under the general validity rule without these procedural burdens.
Arbitration Agreements
The Federal Arbitration Act, 9 U.S.C. § 2, establishes that written provisions to settle disputes by arbitration "shall be valid, irrevocable, and enforceable." This provision applies to any contract evidencing a transaction involving interstate commerce. The statute creates federal substantive law governing arbitration validity, displacing contrary state rules that single out arbitration for disfavored treatment.
Forum Selection Clauses
Federal courts give "controlling weight" to mandatory forum selection clauses "in all but the most exceptional cases" (Atlantic Marine Construction Co. v. U.S. District Court for the Western District of Texas, 571 U.S. 49 (2013)). The party seeking transfer must show that public-interest factors strongly disfavor the selected forum. Private-interest factors are treated as waived by the clause. Ambiguous language is construed against the drafter: "shall" or "must" indicates mandatory exclusive jurisdiction, while "may" suggests permissive non-exclusive jurisdiction (Arkel International, L.L.C. v. Parsons Global Services, Inc., No. 07-474-FJP-DLD (M.D. La. Jan. 8, 2008)).
Definiteness and "Agreement to Agree"
MSAs deferring material terms to future SOWs risk being found unenforceable for indefiniteness. Courts examine whether the parties intended to be bound by the MSA alone or only upon SOW execution. The presence of detailed dispute resolution mechanisms supports a finding of intent to be bound, but does not cure total indefiniteness in essential performance terms like scope, price, or duration.
Is an MSA legally binding?
An MSA is a legally binding contract if it contains mutual assent, consideration, and definite essential terms. However, it risks being unenforceable if it defers all material terms to future SOWs without commitment mechanisms, making it merely an "agreement to agree." The key is whether the MSA alone creates binding obligations or just a framework requiring later SOW execution.
Can I use a template or do I need a lawyer?
You can use a template for routine commercial MSAs between businesses. However, you need a lawyer to draft or review an MSA if it involves: - Healthcare data, requiring HIPAA business associate clauses (45 C.F.R. § 164.504(e)) - Financial customer information, requiring GLBA safeguards (16 C.F.R. § 314.4(f)) - U.S. government contracts, requiring FAR clauses - Complex intellectual property ownership or licensing - High-value services with significant liability exposure
Because these rules depend on your specific industry and contract terms, Ask Sawyer researches federal and state law to answer questions about your facts.
What mistakes make MSAs fail?
Hierarchy Conflicts Between MSA and SOW
An SOW's "Order of Precedence" clause giving SOW priority over "attachments" does not necessarily override the MSA's arbitration clause when the provision does not explicitly address MSA-SOW conflicts (Schnellecke Logistics USA LLC v. Lucid USA Incorporated, No. CV-22-01893-PHX-SMB (D. Ariz. Aug. 23, 2023)). Drafting should include explicit precedence language: "In the event of conflict between this Agreement and any SOW, the terms of this Agreement shall govern except as expressly modified in the SOW."
Ambiguous Liability Caps
Limitation of liability clauses face potential invalidation if ambiguous regarding coverage of gross negligence or willful misconduct. Courts construe such ambiguity against the drafter (Xat.com Limited v. Hosting Services, Inc., No. 1:16-cv-00092-PMW (D. Utah Mar. 27, 2018)). Drafters should explicitly exclude gross negligence and willful misconduct from liability caps.
Liquidated Damages as Penalties
Under Restatement (Second) of Contracts § 356, a stipulated sum is enforceable if the anticipated loss is uncertain or difficult to prove and the stipulated sum is a reasonable forecast of compensatory damages. A clause is stricken as penalty if grossly disproportionate to foreseeable loss or if it functions as a threat to secure performance. Service credits and tiered failure remedies should be structured as reasonable forecasts rather than penalties.
Worker Classification Labels
Federal law does not defer to contractual labels for worker classification. Under the Fair Labor Standards Act, the Department of Labor applies an "economic realities" test examining whether the worker is economically dependent on the employer or in business for themselves. The 2024 DOL rule identifies six non-determinative factors: opportunity for profit or loss depending on managerial skill; investments by the worker and employer; permanence of the work relationship; nature and degree of control; whether the work is integral to the employer's business; and skill and initiative.
Where State Law Goes Further
The federal baseline for MSAs is not a prescriptive code but a patchwork: state common law governs formation and general enforceability, while federal law imposes sector-specific overlays. Many states impose additional requirements that can override or supplement federal rules:
| Area | Federal Position | State Variation |
|---|---|---|
| Non-competes | No federal prohibition (FTC rule enjoined Aug. 20, 2024; appeal dismissed Sept. 5, 2025) | California near-total ban to enforcement-friendly jurisdictions |
| Indemnity scope | No federal limit; subject to general public policy | Anti-indemnity statutes in construction, energy sectors |
| Data breach notification | Sector-specific: 60 days HIPAA, 30 days FTC (500+ consumers) | All states have separate breach notification laws with varying timelines |
| Statute of frauds | State law applies | "Capable of performance" vs. "likely duration" interpretive splits |
| Electronic signatures | E-SIGN establishes validity parity | UETA adopted in most states provides equivalent framework |
Federal MSA Requirements by Industry
| Industry | Required Clauses | Notification Deadlines | Enforcing Agency |
|---|---|---|---|
| Healthcare (HIPAA) | 10 specific elements under 45 C.F.R. § 164.504(e) | 60 calendar days after discovery (45 C.F.R. § 164.410) | HHS Office for Civil Rights |
| Financial Services (GLBA) | Contractual safeguards obligation under 16 C.F.R. § 314.4(f) | 30 days after discovery for events affecting 500+ consumers (16 C.F.R. § 314.4(j)) | FTC and federal banking regulators |
| FTC Health Breach | Notification obligations under 16 CFR Part 318 | 60 calendar days after discovery (16 C.F.R. §§ 318.3, 318.5) | Federal Trade Commission |
| Federal Government (FAR) | Mandatory clauses like FAR 52.249-2 | Inventory within 120 days, settlement within 1 year (FAR 52.249-2) | Contracting Officer |
Because specific notification obligations depend on your industry, data types, and applicable regulators, Ask Sawyer researches the full federal and state framework for your facts.