Electronic Transactions Law

A certification service provider shall observe the following: 1. Obtain the necessary license from the Commission before commencing activities. 2. Issue, deliver, and store digital certificates in accordance with the license issued therefor by the Commission and the procedures specified in the Electronic Transactions Law Regulations. 3. Use reliable means to issue, deliver, and store certificates, and take necessary measures to protect said certificates from forgery, fraud, and damage, in accordance with the Regulations and the license issued thereto. 4. Create a database for the certificates issued thereby and store said data and any modifications thereon, including suspended and revoked certificates, and grant continuous electronic access to such data. 5. Maintain, along with its staff, the confidentiality of information obtained in the course of business, excluding information that certificate holders permit – in written or electronic form- to be published or disclosed, or as provided for by law. 6. Obtain applicant's personal information, directly or indirectly, subject to the applicant's written consent. 7. Issue certificates containing data specified in the Regulations in accordance with the requirements of the security and protection of systems, the rules and protection of systems, and the rules of digital certification set by the Center. 8. Deliver, whenever his activities cease, all information and documentation in his possession to the Commission, to be disposed of in accordance with the provisions and standards provided for in the Regulations.