25. Confidentiality

Every accredited certification authority and its authorised agent must keep all subscriber‑specific information confidential.

Paragraph (1) does not apply to —

any disclosure of subscriber‑specific information made —

with the permission of the subscriber;

for the purposes of the administration or enforcement of section 23 or 24 or Part 6 of the Act;

for any prosecution under any written law; or

in compliance with an order of court or the requirement of any written law; or

any subscriber‑specific information which —

is contained in the certificate, or is otherwise provided by the subscriber to the accredited certification authority, for public disclosure; or

relates to the fact that the certificate has been suspended or revoked.

Every accredited certification authority and its authorised agent must keep all subscriber‑specific information confidential.

Paragraph (1) does not apply to —

any disclosure of subscriber‑specific information made —

with the permission of the subscriber;

for the purposes of the administration or enforcement of section 23 or 24 or Part 6 of the Act;

for any prosecution under any written law; or

in compliance with an order of court or the requirement of any written law; or

any subscriber‑specific information which —

is contained in the certificate, or is otherwise provided by the subscriber to the accredited certification authority, for public disclosure; or

relates to the fact that the certificate has been suspended or revoked.