offending act or conduct.
(4) Where the Controller is satisfied that the measures under subsection (3) are
not sufficient, the Controller may—
(a) suspend the licence, registration or recognition for a specified period; or
(b) revoke the licence, registration or recognition.
14. Surrendering a licence, registration or recognition
(1) A licensee or recognized certification service provider, repository provider or
date and time stamp service provider may discontinue providing services and
surrender the licence, registration or recognition (a)
in the case of a certification service provider, after notifying
subscribers listed in valid certificates issued by the certification service provider;
(b)
in the case of provider of repository services, after notifying
certification service providers for which any certificates have been published;
after making arrangements for the secure preservation of the records of the
provider;
in a manner that will cause minimal disruption to the subscribers of valid
certificates and to relying parties.
(2) A certification service provider, repository or date and time stamp provider
shall surrender the licence, registration or recognition under sub regulation (1)
after the Controller is satisfied that the conditions specified in this regulation
have been complied with.
(3) The notifications referred to in sub regulation (1) shall be in the form specified
in Schedule 1.
PART IV- CERTIFICATION SERVICE PROVIDERS
15. Particulars of certification service provider disclosure records
(1) For the purposes of section 21(3) of the Act the disclosure records of every
licensed or recognized certification service provider shall contain (a)
a statement that the certification service provider disclosure record