Singapore legislation
Regulation 32
of Electronic Transactions (Certification Authority) Regulations 2010
Regulation 32
Disclosure
Subregulation 1
The accredited certification authority must submit half‑yearly progress and financial reports to the Controller.
Subregulation 2
The half‑yearly progress reports must include information on —
the number of subscribers;
the number of certificates issued, suspended, revoked, expired and renewed;
system performance including system up and down time and any extraordinary incidents;
changes in the organisational structure of the certification authority; (e)changes since the preceding progress report was submitted or since the application for the accreditation; and
changes in the particulars of any trusted person since the last submission to the Controller, including the name, identification number, residential address, designation, function and date of employment of the trusted person.
Subregulation 3
The accredited certification authority has a continuing obligation to disclose to the Controller any changes in the information submitted.
Subregulation 4
All current versions of the accredited certification authority’s applicable certification practice statements together with their effective dates must be published in the accredited certification authority’s Internet website.