3-6 - take out insurance to cover the damages resulting from their professional mistakes;
3-7 - revoke an electronic certificate, when:
(a) it turns out that it was issued on the basis of incorrect or falsified information, that the information
contained in the certificate is no longer true or that the confidentiality of the data relating to the
signature creation has been raped;
b) the judicial authorities order him to immediately inform the holders of the security certificates issued
by him of their non-compliance with the provisions of this law and the texts adopted for its application.
Article 22:
Notwithstanding the provisions of Articles 20 and 21 above:
1 - certificates issued by an electronic certification service provider established in a foreign country have
the same legal value as those issued by an electronic certification provider established in Morocco if the
certificate or the certification service provider is recognized in the framework of a multilateral
agreement to which Morocco is party or of a bilateral agreement of reciprocal recognition between
Morocco and the country of establishment of the provider;
2 - electronic certification service providers whose head office is established abroad may be approved,
provided that the State in whose territory they carry on their activity has concluded with the Kingdom of
Morocco an agreement on the mutual recognition of electronic certification service providers.
Article 23:
The electronic signature certification service provider that issues, issues and manages the electronic
certificates shall inform the administration in advance, within a maximum of two months, of its
intention to terminate its activities.
In which case, he must ensure that the latter is taken over by an electronic certification service provider
guaranteeing the same level of quality and security or, failing that, revokes the certificates within a
maximum of two months after having warned the holders.
It shall also inform the national authority, without delay, of the cessation of its activities in the event of
liquidation.
Article 24:
Providers of electronic certification services are bound, for themselves and their employees, the respect
of the professional secrecy, under penalty of the sanctions provided by the legislation in force.
They are responsible, in terms of common law, for their negligence, incompetence or professional
incompetence vis-à-vis their co-contractors as well as third parties.
The electronic certification service providers must keep the certificate creation data and are obliged, by
order of the Attorney General, to communicate them to the judicial authorities, under the conditions
provided by the legislation in force. In this case, and notwithstanding any legislative provision to the
contrary, electronic certification service providers shall inform the users concerned without delay.
The obligation of professional secrecy, referred to in the first paragraph above, is not applicable:
- in respect of the administrative authorities, duly authorized in accordance with the legislation in force;