IT Infrastructure and Standards - Measures to facilitate IT and E-business Development

Office of the Government Chief Information Officer, The Government of the Hong Kong Special Administrative Region | Brand Hong Kong

IT Infrastructure and Standards > Measures to facilitate IT and E-business Development > Recognition of Certification Authorities and Certificates

To foster the development of electronic commerce in Hong Kong, the Government has taken initiatives to provide a clear legal framework and a secure environment for the conduct of electronic transactions by members of the public. One of the initiatives was the establishment in February 2000 of a scheme for recognition of certification authorities ("CA") and certificates under the Electronic Transactions Ordinance (Cap. 553) ("Ordinance"). The scheme enhances public confidence in electronic transactions with the use of recognized digital certificates issued by recognized CAs.

The Government encourages private sector initiatives in the provision of CA services. To keep regulatory control to a minimum, there is no mandatory licensing requirement for CAs to operate in Hong Kong. Under the scheme for recognition of CAs and certificates, CAs may apply to the Government for recognition on a voluntary basis.

The Ordinance empowers the Government Chief Information Officer ("GCIO") to grant recognition to CAs and digital certificates. Recognition will only be granted to those CAs and digital certificates that have reached a standard acceptable to the Government, thus protecting the interest of users of CA services and enhancing their confidence in electronic transactions.

There are currently a total of 2 recognized CAs. Recognition has been granted to 1 CA under the voluntary recognition scheme while the Postmaster General is also a recognized CA by virtue of the Ordinance. The list of recognized CAs is available on the disclosure records of Recognized CAs maintained by the GCIO.

The GCIO has published a Code of Practice that specifies the standards and procedures for recognized CAs to carry out their functions. The Code of Practice, together with the Ordinance, governs the operation of recognized CAs for better protection of the interest of users of CA services.

An Advisory Committee on the Code of Practice was established in February 2000, comprising members from the industry, to advise the GCIO on matters relating to the Code of Practice.

Top

End of page