Electronic Transactions Act, 2008
Act 772
(a) the financial and human resources, including the assets of
an applicant;
(b) the quality of the applicants hardware and software systems;
(c) procedures for processing products or services;
(d) the availability of information to third parties relying on the
authentication product or service;
(e) the regularity and extent of audits by an independent body;
and
(f) any other relevant factor which may be prescribed or which
the Agency may consider necessary.
(5) A licence is valid for the period and on the terms and conditions
that may be determined by the Agency.
Grant of licence
39. (1) The Agency shall not grant a licence under this Act unless the
Agency is satisfied that a security procedure related to or issued by an
applicant,
(a) is uniquely linked to the user,
(b) is capable of identifying that user,
(c) is created using means that can be maintained under the sole
control of that user, and
(d) will be linked to the electronic record to which it relates so
that any subsequent change of the electronic record is detectable.
(2) The Agency may, prior to licensing any authentication products
or services, stipulate:
(a) the technical and other requirements to be met by certificates
issued by the licence holder;
(b) the requirements for issuing certificates;
(c) the requirements for certification practice statements;
(d) the responsibilities of the certification service provider;
(e) the liability of the certification service provider;
(f) the records to be kept and the manner in which and length
of time for which they must be kept;
(g) requirements concerning certificate suspension and revocation procedures;
(h) requirements as to notification procedures relating to certificate suspension and revocation; and
19