(4) Where the repository provider is unable to comply with sub regulation (3),
the provider shall upon receipt of the information immediately notify the person
providing or requiring the publication of the information and the Controller in
Form 6 in Schedule 1.
(5) A repository provider who contravenes this regulation commits an offence
and is liable on conviction to a fine not exceeding seventy two currency points or
imprisonment not exceeding three years or both.
27. Archive of suspended or revoked certificates
A repository provider shall maintain for ten years, an archive of certificates that
have been suspended or revoked.
PART VIII- DATE AND TIME STAMP SERVICES
28. Operations of date and time stamp service provider
(1) A date and time stamp service provider shall upon receipt of a document for
date and time-stamping, immediately stamp the date and time on the document
and digitally sign the date and time-stamp.
(2) The date and time-stamped on the document shall be the date and time on
which the document is received.
(3) A date and time stamp service provider shall at the end of each business day
publish, in at least one recognized repository, all documents date and timestamped by the provider that day.
(4) For the purpose of sub regulation (3), only the hash result shall be published.
(5) Where a date and time stamp service provider is unable to comply with sub
regulation (3), the provider shall immediately notify the person requesting for
the date and time stamp and the Controller in Form 6 in Schedule 1.
(6) A date and time stamp services provider who contravenes this regulation
commits an offence and is liable on conviction to a fine not exceeding seventy
two currency points or imprisonment not exceeding three years or both.