Voluntary Certification Authority Recognition Scheme comes into effect
18 - 02 - 2000

Certification Authorities may now apply for government recognition under the voluntary certification authority (CA) recognition scheme which comes into operation today (Friday).

Under the voluntary CA recognition scheme, CAs may apply to the Director of Information Technology Services (the Director) to become a recognized CA under the provisions of the Electronic Transactions Ordinance (Cap. 553) (the Ordinance).

Recognized CAs may also apply to the Director for recognition of digital certificates issued by the CAs as recognized digital certificates.

The Director today gazetted the particulars and documents to be submitted when a CA applies for recognition as a recognized CA and for recognition of the digital certificates issued by the CA as recognized certificates.

CAs serve as trusted third parties to ensure trust and security in electronic transactions.

"The voluntary CA recognition scheme will give consumers confidence in using recognized digital certificates issued by a recognized CA, thus promoting the wider use of electronic transactions in the community," a spokesman for the Information Technology Services Department (ITSD) said.

The application form for seeking recognition from the Director is now available on the web site of ITSD (http://www.itsd.gov.hk/itsd).

The required particulars and documents are also set out in an explanatory note to the application form.

"The Director will grant recognition under the scheme only to those CAs and to their digital certificates that have achieved a standard acceptable to the Government," said the spokesman.

Recognized CAs have to comply with provisions in the Ordinance applicable to a recognized CA and with the Code of Practice for Recognized Certification Authorities (the Code of Practice).

The Director has issued the Code of Practice that specifies the standards and procedures for recognized CAs to carry out their functions.

"A Certification Authority Recognition Office (CARO) has been established in ITSD to deal with matters relating to the voluntary CA recognition scheme," said the spokesman.

"The CARO will process applications for recognition and for renewal of recognition, monitor compliance by recognized CAs with the Ordinance and with the Code of Practice, and handle the revocation or suspension of the recognition granted to a recognized CA or to recognized certificates," he added.

The Ordinance was gazetted on 7 January 2000 after the Legislative Council passed the Electronic Transactions Bill on 5 January 2000.

The Ordinance gives legal recognition to electronic records and digital signatures, and provides a legal framework for the operation of the voluntary CA recognition scheme.

Members of the public can obtain more information about the voluntary CA recognition scheme and the Code of Practice from the web site of ITSD.

Enquiries regarding the voluntary CA recognition scheme can be addressed to the Senior Executive Officer, Certification Authority Recognition Office of the Information Technology Services Department either by mail to 19/F, Wu Chung House, 213 Queen's Road East, Wan Chai, Hong Kong, by fax (2573 7076) or by e-mail (caro@itsd.gov.hk).

- END -