Electronic
Communications
and Transactions
[ N o . 21 of 2009
249
PART V
ACCREDITATION AND RECOGNITION OF AUTHENTICATION SERVICE
PROVIDERS
25.
In this
Part,
" a c c r e d i t a t i o n " m e a n s recognition of an
Definition
authentication product or service by the Accreditation Authority.
26. (1) For the purposes of this Part, the Authority shall act as
the Accreditation Authority.
Appointment
Accreditation
Authority
and other
officers
(2) T h e Accreditation Authority, after consultation with t h e
Minister, may appoint employees of any G o v e r n m e n t department
as Accreditation officers.
2 7 . Subject to section twenty-two, a person may, without the
prior authority of any other person, sell or provide authentication
products or services in Zambia.
28. (1) T h e Accreditation A u t h o r i t y —
(a) shall monitor the conduct, systems and operations of an
authentication service provider to ensure compliance
w i t h s e c t i o n thirty
and the other obligations of
authentication service providers stipulated under this
Act;
(b) m a y s u s p e n d o r r e v o k e t h e a c c r e d i t a t i o n o f a n
authentication product or service; and
(c) m a y appoint an independent auditing firm to conduct
periodic audits of an authentication service provider to
ensure c o m p l i a n c e with section thirty and the other
obligations of authentication service providers provided
for under this Act.
(2) T h e A c c r e d i t a t i o n Authority shall maintain a publicly
accessible database in respect of—
(a) a u t h e n t i c a t i o n p r o d u c t s or services accredited u n d e r
section
twenty-nine;
(b) authentication products and services recognised under
section
thirty-two;
(c) revoked accreditations or recognitions; and
(d) such other information as m a y be prescribed.
Selling of
authentication
products or
service
Powers and
duties of
Accreditation
Authority