Electronic Commerce Act, 2000
In short
This law provides legal recognition for electronic contracts, electronic writing, electronic signatures, and original information in electronic form for both commercial and non-commercial transactions. It also addresses the admissibility of electronic evidence, the regulation of certification service providers, and domain name registration.
What it regulates
- The legal validity of electronic communications and information in electronic form.
- The use and legal standing of electronic signatures.
- The accreditation, supervision, and liability of providers of certification services for electronic signatures.
- The registration of domain names.
Who it concerns
- Individuals and public bodies engaging in commercial and non-commercial transactions using electronic means.
- Certification service providers who issue certificates or offer services related to electronic signatures.
Key points
- Electronic form does not affect the legal validity or enforceability of documents, contracts, or information.
- "Writing" in other laws includes electronic forms of representing or reproducing words in visible form.
- Electronic signatures are legally recognized as a method of authenticating the purported originator of electronic data.
- Fraud and misuse of electronic signatures and signature creation devices are prohibited.
Legal text
Electronic Commerce Act, 2000 Disclaimer Feedback Helpdesk Gaeilge Séanadh Aiseolas Deasc chabhrach English Gaeilge English Produced by the Office of the Attorney General Táirgthe ag Oifig an Ard-Aighne Home Legislation Acts of the Oireachtas Statutory Instruments Pre-1922 Legislation Constitution External Resources Bills (Houses of the Oireachtas) Iris Oifigiúil / Official Gazette Revised Acts (LRC) Classified List of Legislation (LRC) Translations (acts.
- ie)Translations (Houses of the Oireachtas) Government Publications for Sale EU Law (EUR-Lex) FAQ Search Baile Reachtaíocht Achtanna an Oireachtais Ionstraimí Reachtúla Reachtaíocht Réamh-1922 Bunreacht Acmhainní Seachtracha Billí (Tithe an Oireachtais) Iris Oifigiúil Achtanna Athbhreithnithe (CAD) (An Coimisiún um Athchóiriú an Dlí) Liosta Rangaithe Reachtaíochta Aistriúcháin (achtanna.
- ie)Aistriúcháin (Tithe an Oireachtais) Foilseacháin Rialtais ar Díol Dlí AE (EUR-Lex) CCanna (Ceisteanna Coitianta) Cuardach TitleTeideal Year(
- s)or rangeBliain nó blianta nó raon TypeCineál All Legislation Acts Statutory Instruments Advanced SearchCuardach Casta HomeBaile ActsAchtanna 2000 Electronic Commerce Act, 2000 Electronic Commerce Act, 2000 Permanent Page URL View by SectionAmharc de réir Ailt View Full ActAmharc ar an Acht Iomlán Bill History Stair Bille Commencement, Amendments, SIs made under the Act Tosach Feidhme, Leasuithe, IRí arna ndéanamh faoin Acht Revised Act Acht Athbh… Open PDFOscail PDF Print Full ActPriontáil an tAcht Iomlán Number 27 of 2000 ELECTRONIC COMMERCE ACT, 2000 ARRANGEMENT OF SECTIONS PART I Preliminary and General Section 1. Short title and commencement. 2. Interpretation. 3. Regulations. 4. Laying of orders and regulations before Houses of Oireachtas. 5. Expenses of Minister. 6. Prosecution of offences. 7. Offences by bodies corporate. 8. Penalties. PART 2 Legal Recognition and Non-Discrimination in respect of Electronic Signatures, Originals, Contracts and Related Matters Legal Recognition of Electronic Communications and Information in Electronic Form 9. Electronic form not to affect legal validity or enforceability. 10. Excluded laws. 11. Certain laws not to be affected. 12. Writing. 13. Signatures. 14. Signatures required to be witnessed. 15. Consumer law to apply. 16. Documents under seal. 17. Electronic originals. 18. Retention and production. 19. Contracts. 20. Acknowledgement of receipt of electronic communications. 21. Time and place of dispatch and receipt of electronic communications. 22. Admissibility. 23. Defamation law to apply. General 24. Electronic form not required. 25. Prohibition of fraud and misuse of electronic signatures and signature creation devices. 26. Activities partly outside the State. 27. Investigative procedures. 28. Confidentiality of deciphering data. PART 3 Certification Services 29. Accreditation and supervision of certification service providers. 30. Liability of certification service providers. PART 4 Domain Name Registration 31. Registration of domain names. SCHEDULE Acts Referred to Companies Act, 1990 1990, No. 33 Consumer Credit Act, 1995 1995, No. 24 Criminal Evidence Act, 1992 1992, No. 12 Petty Sessions (Ireland) Act, 1851 14 & 15 Vict., c.93 Succession Act, 1965 1965, No. 27 Number 27 of 2000 ELECTRONIC COMMERCE ACT, 2000 AN ACT TO PROVIDE FOR THE LEGAL RECOGNITION OF ELECTRONIC CONTRACTS, ELECTRONIC WRITING, ELECTRONIC SIGNATURES AND ORIGINAL INFORMATION IN ELECTRONIC FORM IN RELATION TO COMMERCIAL AND NON-COMMERCIAL TRANSACTIONS AND DEALINGS AND OTHER MATTERS, THE ADMISSIBILITY OF EVIDENCE IN RELATION TO SUCH MATTERS, THE ACCREDITATION, SUPERVISION AND LIABILITY OF CERTIFICATION SERVICE PROVIDERS AND THE REGISTRATION OF DOMAIN NAMES, AND TO PROVIDE FOR RELATED MATTERS. [10th July, 2000] BE IT ENACTED BY THE OIREACHTAS AS FOLLOWS: PART 1 Preliminary And General Short title and commencement. 1.—
- a)uniquely linked to the signatory, (
- b)capable of identifying the signatory, (
- c)created using means that are capable of being maintained by the signatory under his, her or its sole control, and (
- d)linked to the data to which it relates in such a manner that any subsequent change of the data is detectable; “certificate” means an electronic attestation which links signature verification data to a person or public body, and confirms the identity of the person or public body; “certification service provider” means a person or public body who issues certificates or provides other services related to electronic signatures; “Directive” means the European Parliament and Council Directive 1999/93/EC of 13 December, 19991 ; “electronic” includes electrical, digital, magnetic, optical, electro-magnetic, biometric, photonic and any other form of related technology; “electronic communication” means information communicated or intended to be communicated to a person or public body, other than its originator, that is generated, communicated, processed, sent, received, recorded, stored or displayed by electronic means or in electronic form, but does not include information communicated in the form of speech unless the speech is processed at its destination by an automatic voice recognition system; “electronic contract” means a contract concluded wholly or partly by means of an electronic communication; “electronic signature” means data in electronic form attached to, incorporated in or logically associated with other electronic data and which serves as a method of authenticating the purported originator, and includes an advanced electronic signature; “excluded law” means a law referred to in section 10 ; “information” includes data, all forms of writing and other text, images (including maps and cartographic material), sound, codes, computer programmes, software, databases and speech; “information system” means a system for generating, communicating, processing, sending, receiving, recording, storing or displaying information by electronic means; “legal proceedings” means civil or criminal proceedings, and includes proceedings before a court, tribunal, appellate body of competent jurisdiction or any other body or individual charged with determining legal rights or obligations; “Minister” means the Minister for Public Enterprise; “originator”, in relation to an electronic communication, means the person or public body by whom or on whose behalf the electronic communication purports to have been sent or generated before storage, as the case may be, but does not include a person or public body acting as a service provider in relation to the generation, processing, sending or storing of that electronic communication or providing other services in relation to it; “person” does not include a public body; “prescribed” means prescribed by regulations made under section 3 ; “public body” means— (
- a)a Minister of the Government or a Minister of State, (
- b)a body (including a Department of State but not including a non-government organisation) wholly or partly funded out of the Central Fund or out of moneys provided by the Oireachtas or moneys raised by local taxation or charges, or (
- c)a commission, tribunal, board or body established by an Act or by arrangement of the Government, a Minister of the Government or a Minister of State for a non-commercial public service or purpose; “qualified certificate” means a certificate which meets the requirements set out in Annex I and is provided by a certification service provider who fulfils the requirements set out in Annex II; “secure signature creation device” means a signature creation device which meets the requirements set out in Annex III; “signatory” means a person who, or public body which, holds a signature creation device and acts in the application of a signature by use of the device either on his, her or its own behalf or on behalf of a person or public body he, she or it represents; “signature creation data” means unique data, such as codes, passwords, algorithms or private cryptographic keys, used by a signatory or other source of the data in generating an electronic signature; “signature creation device” means a device, such as configured software or hardware used to generate signature creation data; “signature verification data” means data, such as codes, passwords, algorithms or public cryptographic keys, used for the purposes of verifying an electronic signature; “signature verification device” means a device, such as configured software or hardware used to generate signature verification data.
- a)a reference to a section is a reference to a section of this Act, unless it is indicated that a reference to some other enactment is intended, (
- b)a reference to a subsection, paragraph or subparagraph is a reference to a subsection, paragraph or subparagraph of the provision in which the reference is made, unless it is indicated that a reference to some other provision is intended, (
- c)a reference to an enactment shall, except to the extent that the context otherwise requires, be construed as a reference to that enactment as amended by or under any other enactment, and (
- d)a reference to an Annex by number is a reference to the Annex so numbered to the Directive and included in the Schedule to this Act.
- a)a body is a non-government organisation, or (
- b)a body, commission, tribunal or board is or was established by an Act or by arrangement of the Government, a Minister of the Government or a Minister of State for a non-commercial service or purpose, is in issue then, for the purpose of establishing whether it is or is not a public body as defined in subsection
- i)he or she is the appropriate Minister for determining whether the body is or is not a non-government organisation, and that in fact it is or is not such an organisation, or (
- ii)he or she is the appropriate Minister for determining whether the body, commission, tribunal or board was or was not so established for a non-commercial service or purpose, and that in fact it was or was not so established, is sufficient evidence of those facts, until the contrary is shown, and the Minister, Minister of the Government or Minister of State may make such a declaration. Regulations. 3.—
- a)on summary conviction, to a fine not exceeding £1,500 or, at the discretion of the court, to imprisonment for a term not exceeding 12 months, or to both the fine and the imprisonment, or (
- b)on conviction on indictment, to a fine not exceeding £500,000 or, at the discretion of the court, to imprisonment for a term not exceeding 5 years, or to both the fine and the imprisonment. PART 2 Legal Recognition and Non-Discrimination in respect of Electronic Signatures, Originals, Contracts and Related Matters Legal Recognition of Electronic Communications and Information in Electronic Form Electronic form not to affect legal validity or enforceability. 9.—Information (including information incorporated by reference) shall not be denied legal effect, validity or enforceability solely on the grounds that it is wholly or partly in electronic form, whether as an electronic communication or otherwise. Excluded laws. 10.—
- a)the law governing the creation, execution, amendment, variation or revocation of— (
- i)a will, codicil or any other testamentary instrument to which the Succession Act, 1965 , applies, (
- ii)a trust, or (iii) an enduring power of attorney, (
- b)the law governing the manner in which an interest in real property (including a leasehold interest in such property) may be created, acquired, disposed of or registered, other than contracts (whether or not under seal) for the creation, acquisition or disposal of such interests, (
- c)the law governing the making of an affidavit or a statutory or sworn declaration, or requiring or permitting the use of one for any purpose, or (
- d)the rules, practices or procedures of a court or tribunal, except to the extent that regulations under section 3 may from time to time prescribe.
- a)technology has advanced to such an extent, and access to it is so widely available, or (
- b)adequate procedures and practices have developed in public registration or other services, so as to warrant such action, or (
- c)the public interest so requires, he or she may, after consultation with such Minister or Ministers as in the Minister's opinion has or have a sufficient interest or responsibility in relation to the matter, by regulations made under section 3 , for the purpose of encouraging the efficient use of electronic communication facilities and services in commerce and the community generally while at the same time protecting the public interest, extend the application of this Act or a provision of this Act to or in relation to a matter specified in subsection
- a)any law relating to the imposition, collection or recovery of taxation or other Government imposts, including fees, fines and penalties, (
- b)the Companies Act, 1990 (Uncertificated Securities) Regulations, 1996 ( S.I. No. 68 of 1996 ) or any regulations made in substitution for those regulations, (
- c)the Criminal Evidence Act, 1992 , or (
- d)the Consumer Credit Act, 1995 , or any regulations made thereunder and the European Communities (Unfair Terms in Consumer Contracts) Regulations, 1995 No. 27 of 1995 ). Writing. 12.—
- a)if at the time the information was given it was reasonable to expect that it would be readily accessible to the person or public body to whom it was directed, for subsequent reference, (
- b)where the information is required or permitted to be given to a public body or to a person acting on behalf of a public body and the public body consents to the giving of the information in electronic form, whether as an electronic communication or otherwise, but requires— (
- i)the information to be given in accordance with particular information technology and procedural requirements, or (
- ii)that a particular action be taken by way of verifying the receipt of the information, if the public body's requirements have been met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- c)where the information is required or permitted to be given to a person who is neither a public body nor acting on behalf of a public body—if the person to whom the information is required or permitted to be given consents to the information being given in that form.
- a)in accordance with particular information technology and procedural requirements, (
- b)on a particular kind of data storage device, or (
- c)by means of a particular kind of electronic communication.
- a)make an application, (
- b)make or lodge a claim, (
- c)make or lodge a return, (
- d)make a request, (
- e)make an unsworn declaration, (
- f)lodge or issue a certificate, (
- g)make, vary or cancel an election, (
- h)lodge an objection, (
- i)give a statement of reasons, (
- j)record and disseminate a court order, (
- k)give, send or serve a notification. Signatures. 13.—
- a)where the signature is required or permitted to be given to a public body or to a person acting on behalf of a public body and the public body consents to the use of an electronic signature but requires that it be in accordance with particular information technology and procedural requirements (including that it be an advanced electronic signature, that it be based on a qualified certificate, that it be issued by an accredited certification service provider or that it be created by a secure signature creation device)— if the public body's requirements have been met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- b)where the signature is required or permitted to be given to a person who is neither a public body nor acting on behalf of a public body— if the person to whom the signature is required or permitted to be given consents to the use of an electronic signature.
- a)the signature to be witnessed is an advanced electronic signature, based on a qualified certificate, of the person or public body by whom the document is required to be signed, (
- b)the document contains an indication that the signature of that person or public body is required to be witnessed, and (
- c)the signature of the person purporting to witness the signature to be witnessed is an advanced electronic signature, based on a qualified certificate.
- a)where the signature required or permitted to be witnessed is on a document to be given to a public body or to a person acting on behalf of a public body and the public body consents to the use of an electronic signature of both the person attesting the document and witnessing the signature but requires that the document and signatures be in accordance with particular information technology and procedural requirements (including that a qualified certificate on which the signature or signatures are based be issued by an accredited certification service provider)— if the public body's requirements are met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- b)where the document on or in respect of which the signature is to be witnessed is required or permitted to be given to a person who is neither a public body nor acting on behalf of a public body— if the person to whom it is required or permitted to be given consents to the use of an advanced electronic signature based on a qualified certificate for that purpose. Consumer law to apply. 15.—All electronic contracts within the State shall be subject to all existing consumer law and the role of the Director of Consumer Affairs in such legislation shall apply equally to consumer transactions, whether conducted electronically or non-electronically. Documents under seal. 16.—
- a)where the document to be under seal is required or permitted to be given to a public body or to a person acting on behalf of a public body and the public body consents to the use of an electronic signature but requires that it be in accordance with particular information technology and procedural requirements (including that a qualified certificate on which it is based be issued by an accredited certification service provider)— if the public body's requirements have been met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- b)where the document to be under seal is required or permitted to be given to a person who is neither a public body nor acting on behalf of a public body— if the person to whom it is required or permitted to be given consents to the use of an advanced electronic signature based on a qualified certificate. Electronic originals. 17.—
- a)if there exists a reliable assurance as to the integrity of the information from the time when it was first generated in its final form, whether as an electronic communication or otherwise, (
- b)where it is required or permitted that the information be presented— if the information is capable of being displayed in intelligible form to a person or public body to whom it is to be presented, (
- c)if, at the time the information was generated in its final form, it was reasonable to expect that it would be readily accessible so as to be useable for subsequent reference, (
- d)where the information is required or permitted to be presented to or retained for a public body or for a person acting on behalf of a public body, and the public body consents to the information being presented or retained in electronic form, whether as an electronic communication or otherwise, but requires that it be presented or retained in accordance with particular information technology and procedural requirements— if the public body's requirements have been met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- e)where the information is required or permitted to be presented to or retained for a person who is neither a public body nor acting on behalf of a public body— if the person to whom the information is required or permitted to be presented or for whom it is required or permitted to be retained consents to the information being presented or retained in that form.
- a)in accordance with particular information technology and procedural requirements, (
- b)on a particular kind of data storage device, or (
- c)by means of a particular kind of electronic communication.
- a)the criteria for assessing integrity is whether the information has remained complete and unaltered, apart from the addition of any endorsement or change which arises in the normal course of generating, communicating, processing, sending, receiving, recording, storing or displaying, and (
- b)the standard of reliability shall be assessed in the light of the purpose for which and the circumstances in which the information was generated. Retention and production. 18.—
- a)if there exists a reliable assurance as to the integrity of the information from the time when it was first generated in its final form as an electronic communication, (
- b)in the case of a document to be produced— if the information is capable of being displayed in intelligible form to the person or public body to whom it is to be produced, (
- c)in the case of a document to be retained— if, at the time of the generation of the final electronic form of the document, it was reasonable to expect that the information contained in the electronic form of the document would be readily accessible so as to be useable for subsequent reference, (
- d)where the document is required or permitted to be retained for or produced to a public body or for or to a person acting on behalf of a public body, and the public body consents to the document being retained or produced in electronic form, whether as an electronic communication or otherwise, but requires that the electronic form of the document be retained or produced in accordance with particular information technology and procedural requirements— if the public body's requirements have been met and those requirements have been made public and are objective, transparent, proportionate and non-discriminatory, and (
- e)where the document is required or permitted to be retained for or produced to a person who is neither a public body nor acting on behalf of a public body— if the person for or to whom the document is required or permitted to be retained or produced consents to it being retained or produced in that form.
- a)in accordance with particular information technology and procedural requirements, (
- b)on a particular kind of data storage device, or (
- c)by means of a particular kind of electronic communication.
- a)the criteria for assessing integrity is whether the information has remained complete and unaltered, apart from the addition of any endorsement or change which arises in the normal course of generating, communicating, processing, sending, receiving, recording, storing or displaying, and (
- b)the standard of reliability shall be assessed in the light of the purpose for which the information was generated and the circumstances in which it was generated. Contracts. 19.—
- a)if the originator or addressee has more than one place of business, the place of business is the place that has the closest relationship to the underlying transaction or, if there is no underlying transaction, the principal place of business, and (
- b)if the originator or addressee does not have a place of business, the place of business is taken to be the place where he or she ordinarily resides.
- a)an electronic communication, an electronic form of a document, an electronic contract, or writing in electronic form— (
- i)on the sole ground that it is an electronic communication, an electronic form of a document, an electronic contract, or writing in electronic form, or (
- ii)if it is the best evidence that the person or public body adducing it could reasonably be expected to obtain, on the grounds that it is not in its original form, or (
- b)an electronic signature— (
- i)on the sole ground that the signature is in electronic form, or is not an advanced electronic signature, or is not based on a qualified certificate, or is not based on a qualified certificate issued by an accredited certification service provider, or is not created by a secure signature creation device, or (
- ii)if it is the best evidence that the person or public body adducing it could reasonably be expected to obtain, on the grounds that it is not in its original form. Defamation law to apply. 23.—All provisions of existing defamation law shall apply to all electronic communications within the State, including the retention of information electronically. General Electronic form not required. 24.—Nothing in this Act shall be construed as— (
- a)requiring a person or public body to generate, communicate, produce, process, send, receive, record, retain, store or display any information, document or signature by or in electronic form, or (
- b)prohibiting a person or public body engaging in an electronic transaction from establishing reasonable requirements about the manner in which the person will accept electronic communications, electronic signatures or electronic forms of documents. Prohibition of fraud and misuse of electronic signatures and signature creation device. 25.—A person or public body who or which— (
- a)knowingly accesses, copies or otherwise obtains possession of, or recreates, the signature creation device of another person or a public body, without the authorisation of that other person or public body, for the purpose of creating or allowing, or causing another person or public body to create, an unauthorised electronic signature using the signature creation device, (
- b)knowingly alters, discloses or uses the signature creation device of another person or a public body, without the authorisation of that other person or public body or in excess of lawful authorisation, for the purpose of creating or allowing, or causing another person or public body to create, an unauthorised electronic signature using the signature creation device. (
- c)knowingly creates, publishes, alters or otherwise uses a certificate or an electronic signature for a fraudulent or other unlawful purpose, (
- d)knowingly misrepresents the person's or public body's identity or authorisation in requesting or accepting a certificate or in requesting suspension or revocation of a certificate, (
- e)knowingly accesses, alters, discloses or uses the signature creation device of a certification service provider used to issue certificates, without the authorisation of the certification service provider or in excess of lawful authorisation, for the purpose of creating, or allowing or causing another person or a public body to create, an unauthorised electronic signature using the signature creation device, or (
- f)knowingly publishes a certificate, or otherwise knowingly makes it available to anyone likely to rely on the certificate or on an electronic signature that is verifiable with reference to data such as codes, passwords, algorithms, public cryptographic keys or other data which are used for the purposes of verifying an electronic signature, listed in the certificate, if the person or public body knows that— (
- i)the certification service provider listed in the certificate has not issued it, (
- ii)the subscriber listed in the certificate has not accepted it, or (iii) the certificate has been revoked or suspended, unless its publication is for the purpose of verifying an electronic signature created before such revocation or suspension, or giving notice of revocation or suspension, is guilty of an offence. Activities partly outside the State. 26.—The provisions of section 25 extend to activities that took place partly outside the State. Investigative procedures. 27.—
- a)to enter, within 7 days from the date of the warrant, and if necessary by the use of reasonable force, the place named in the warrant, (
- b)to search the place and any person reasonably suspected of being connected with any activities of the place found thereon, and (
- c)to seize anything found there, or anything found in the possession of a person present there at the time of the search, which that officer or member reasonably believes to be evidence of or relating to an offence under this Act and, where the thing seized is or contains information or an electronic communication that cannot readily be accessed or put into intelligible form, to require the disclosure of the information or electronic communication in intelligible form.
- b)fails or refuses to comply with a requirement under this section, or (
- c)gives a name or address which is false or misleading, is guilty of a summary offence.
- a)The Minister, after consultation with the Minister for Enterprise, Trade and Employment, may by regulations made under section 3 establish a scheme of voluntary accreditation of certification service providers for the purpose of the Directive and to enhance levels of certification service provision in the State, and may designate accreditation authorities and prescribe such matters relating to their designation as the Minister thinks appropriate for the purpose. (
- b)A person or public body who or which provides certification or other services in the State relating to electronic signatures may apply as prescribed to the accreditation authority designated under paragraph (
- a)to participate in any scheme of voluntary accreditation established pursuant to that paragraph. (
- c)The regulations may prescribe— (
- i)the rights and obligations specific to the provision of certification services of participants in a scheme of voluntary accreditation, and (
- ii)the manner in which the accreditation authority designated under paragraph (
- a)shall elaborate and supervise compliance with those rights and obligations in accordance with the Directive and, in particular, Annex II. (
- d)A participant in a scheme referred to in paragraph (
- a)shall not exercise a right under the scheme without the prior permission of the accreditation authority.
- a)The Minister may, after consultation with the Minister for Enterprise, Trade and Employment, by order, designate persons or public bodies for the purposes of determining whether secure signature creation devices conform with the requirements of Annex III. (
- b)The Minister may, by order, amend or revoke an order under this subsection, including an order under this paragraph.
- a)the accuracy of all information in the qualified certificate as at the time of issue and that the certificate contains all the details required by Annex I to be so contained in a qualified certificate, (
- b)that, at the time of the issue of the certificate, the signatory identified in the certificate held the signature creation device corresponding to the signature verification device given or identified in the certificate, and (
- c)that the signature creation device and the signature verification device act together in a complementary manner, in cases where the certification service provider generates both.
- a)designated registration authorities, (
- b)the form of registration, (
- c)the period during which registration continues in force, (
- d)the manner in which, the terms on which and the period or periods for which registration may be renewed, (
- e)the circumstances and manner in which registrations may be granted, renewed or refused by the registration authorities, (
- f)the right of appeal and appeal processes, (
- g)the fees, if any, to be paid on the grant or renewal of registration and the time and manner in which such fees are to be paid, (
- h)such other matters relating to registration as appear to the Minister to be necessary or desirable to prescribe.
- a)an indication that the certificate is issued as a qualified certificate; (
- b)the identification of the certification-service-provider and the State in which it is established; (
- c)the name of the signatory or a pseudonym, which shall be identified as such; (
- d)provision for a specific attribute of the signatory to be included if relevant, depending on the purpose for which the certificate is intended; (
- e)signature-verification data which correspond to signature-creation data under the control of the signatory; (
- f)an indication of the beginning and end of the period of validity of the certificate; (
- g)the identity code of the certificate; (
- h)the advanced electronic signature of the certification-service-provider issuing it; (
- i)limitations on the scope of use of the certificate, if applicable; and (
- j)limits on the value of transactions for which the certificate can be used, if applicable. ANNEX II Requirements for certification-service-providers issuing qualified certificates Section 29
- a)demonstrate the reliability necessary for providing certification services; (
- b)ensure the operation of a prompt and secure directory and a secure and immediate revocation service; (
- c)ensure that the date and time when a certificate is issued or revoked can be determined precisely; (
- d)verify, by appropriate means in accordance with national law, the identity and, if applicable, any specific attributes of the person to which a qualified certificate is issued; (
- e)employ personnel who possess the expert knowledge, experience and qualifications necessary for the services provided, in particular competence at managerial level, expertise in electronic signature technology and familiarity with proper security procedures; they must also apply administrative and managerial procedures which are adequate and correspond to recognised standards; (
- f)use trustworthy systems and products which are protected against modification and ensure the technical and cryptographic security of the processes supported by them; (
- g)take measures against forgery of certificates, and, in cases where the certification-service-provider generates signature-creation data, guarantee confidentiality during the process of generating such data; (
- h)maintain sufficient financial resources to operate in conformity with the requirements laid down in the Directive, in particular to bear the risk of liability for damages, for example by obtaining appropriate insurance; (
- i)record all relevant information concerning a qualified certificate for an appropriate period of time, in particular for the purpose of providing evidence of certification for the purposes of legal proceedings. Such recording may be done electronically; (
- j)not store or copy signature-creation data of the person to whom the certification-service-provider provides key management services; (
- k)before entering into a contractual relationship with a person seeking a certificate to support his electronic signature, inform that person by a durable means of communication of the precise terms and conditions regarding the use of the certificate, including any limitations on its use, the experience of a voluntary accreditation scheme and procedures for complaints and dispute settlement. Such information, which may be transmitted electronically, must be in writing and in readily understandable language. Relevant parts of this information must also be made available on request to third-parties relying on the certificate; (
- l)use trustworthy systems to store certificates in a verifiable form so that: —only authorised persons can make entries and changes, —information can be checked for authenticity, —certificates are publicly available for retrieval in only those cases for which the certificate-holder's consent has been obtained, and —any technical changes comprising these security requirements are apparent to the operator. ANNEX III Requirements for secure signature-creation devices Section 29
- a)the signature-creation-data used for signature generation can practically occur only once, and that their secrecy is reasonably assured; (
- b)the signature-creation-data used for signature generation cannot, with reasonable assurance, be derived and the signature is protected against forgery using currently available technology; (
- c)the signature-creation-data used for signature generation can be reliably protected by the legitimate signatory against the use of others. 2. Secure signature-creation devices must not alter the data to be signed or prevent such data from being presented to the signatory prior to the signature process. 1 OJ No. L13/12 of 19/1/2000, p. 13 Privacy Statement Accessibility European Legislation Identifier (PDF) Open Data License Ráiteas Príobháideachais Inrochtaineacht Aitheantóir Eorpach Reachtaíochta (ELI) Ceadúnas Sonraí Oscailte © Government of Ireland. Oireachtas Copyright Material is reproduced with the permission of the Houses of the Oireachtas © Rialtas na hÉireann. Atáirgtear ábhar faoi Chóipcheart le cead ó Thithe an Oireachtais