- with regard to the agents and experts of the National Authority and agents and officers referred to in
Article 41 below in exercising the powers provided for in Articles 19 and 41 of this Law;
- the holder of the electronic signature has consented to the publication or communication of the
information provided to the electronic certification service provider.
Section 3: The obligation of the electronic certificate holder
Article 25:
From the moment of the creation of signature creation data, the holder of the electronic certificate is
solely responsible for the confidentiality and integrity of the data related to the signature creation that
he uses. Any use of these is deemed, unless proven otherwise, to be its act.
Article 26:
The holder of the electronic certificate is required, as soon as possible, to notify the certification service
provider of any change in the information contained therein.
Article 27:
In case of doubt as to the maintenance of the confidentiality of the data relating to the creation of
signature or loss of conformity with the reality of the information contained in the certificate, its holder
is obliged to have it revoked immediately in accordance with the provisions of the Article 21 of this law.
Article 28:
When an electronic certificate has expired or been revoked, the holder can no longer use the
corresponding signature creation data to sign or have this data certified by another electronic
certification service provider.
Chapter III: Sanctions, Preventive Measures and the Recognition of Offenses
Article 29:
Is punished with a fine of 10,000 to 100,000 DH and imprisonment from three months to one year,
whoever has provided secure electronic certification services without being approved under the
conditions provided for in Article 21 hereof. above or will have continued its activity despite the
withdrawal of its authorization or has issued, issued or managed secure electronic certificates in
violation of the provisions of Article 20 above.
Article 30:
Without prejudice to more severe penal provisions, is punished by imprisonment of one month to six
months and a fine of 20,000 DH to 50,000 DH whoever divulges, incites or participates to divulge the
information entrusted to him in the framework for the exercise of its activities or functions.
However, the provisions of this article are not applicable to the publication or the communication
authorized, in writing in paper form or electronically, by the holder of the electronic certificate or to the
publication or the communication authorized by the legislation in force. .
Article 31:
Without prejudice to more severe penal provisions, is punished by imprisonment of one year to five
years and a fine of 100,000 DH to 500,000 DH, who made knowingly false statements or handed false
documents to the provider electronic certification services.