Commencement of certification authority recognition scheme announced
14 - 01 - 2000

Certification authorities (CAs) operating in Hong Kong may apply for Government recognition under a voluntary recognition scheme which is expected to come into operation next month (February).

The Electronic Transactions Ordinance (Cap. 553) (the Ordinance) was enacted by the Legislative Council last Wednesday (January 5). The Government gazetted today (Friday) a commencement notice which provided that the provisions in the Ordinance relating to the operation of the CA recognition scheme would come into effect on February 18. Subject to negative vetting of the notice by the Legislative Council, CAs in Hong Kong may apply for Government recognition from 18 February.

To support the operation of the scheme, the Secretary for Information Technology and Broadcasting and the Director of Information Technology Services (the Director) respectively gazetted the Electronic Transactions (Fees) Regulation and issued the Code of Practice for Recognized Certification Authorities (the Code of Practice) today.

The Electronic Transactions (Fees) Regulation sets out the fees for applying for Government recognition of CAs and of digital certificates issued by recognized CAs. The fees are set on a full cost recovery basis. The Regulation is also subject to negative vetting by the Legislative Council.

The Code of Practice issued by the Director specifies the standards and procedures for recognized CAs to carry out their functions in a trustworthy manner. It was prepared after an extensive public consultation process. The Director will set up an advisory committee with wide representation to ensure that the Code of Practice takes into account the latest technological and related developments in the provision of certification services.

The Government encourages the private sector to set up CAs in Hong Kong to serve the needs of different sectors of the community, and to apply for Government recognition.

The number of CAs to be established locally will be determined by the market.

"Under the Ordinance, the Director is the authority for granting Government recognition to CAs," a spokesman of the Information Technology Services Department said.

"CAs may apply to the Director for Government recognition on a voluntary basis," he added.

The spokesman said that the Director had established a dedicated web site which would maintain the CA disclosure record for each recognized CA and the Code of Practice and other related information on the CA recognition scheme.

"Information concerning recognized CAs, such as the types of digital certificates issued by the CAs and recognized by the Director, will be published in the CA disclosure records," he noted.

The web site is accessible through http://www.itsd.gov.hk/itsd.

"Through the issue of digital certificates by CAs and the use of digital signatures, participants in electronic commerce will be able to establish the identity of the opposite party in electronic transactions, ensure the integrity of the electronic messages received and guard against the repudiation of the transactions," said the spokesman.

Enquiries regarding the CA recognition scheme and the Code of Practice can be addressed to the Senior Executive Officer, Certification Authority Recognition Office of the Information Technology Services Department either by mail to 15/F, Wanchai Tower, 12 Harbour Road, Wan Chai, Hong Kong, by fax (2802 4549) or by e-mail (caro@itsd.gov.hk).

- ENDS -