{fud qo do (rro-33004/99 REGD. NO. D. L.-33004/99 f- Uh,e 6nz, of Slndio sTfiEtRUT EXTRAORDINARY q[|r u-qoii 3-sq-Ertrg (i)
PART ll-Section 3-Sub-section (i) crftrq,R n rfirRrd PUBLISHED BY AUTHORITY €. 164l No. 1641 T$ ftffi,PTFErt, ertf, 5, zotsztr 't6, lggs NEW DELHI, SATURDAY, APRIL 6,2013/CHAITRA I6, 1935 riq{ o{L{ q+<r ff|ffi deror (E*ff.+d ottq++ ffiffi fuil.r) sTfts-{ Ti f{d, o q}f,, zore u,.6r.ft. zo+ (u).-f+ia-o, qa{r ffiffi G{fuftqq, zooo (zooo or zr) o1 snr 8s of sq-qm (z) d rdc (E) EI{I jrftT vrfui or c-dFr ovfr gS qrfl{ frftq-T{ s",r*Fft qfrfr d cnqst i 3N d*q qrs+x d T{ q-J+qc i ftqfrfua frftqq q-{rfr l, eruta. :- r. dfftc crq *r n{q -
(t) gc ftfrq'ii sT €f$q flq qqiil trrFtot (tdffi frftqrc-o crfuo.-{ur d ffift{ cqrFr 6-{ € f4M qqrurs-di mfffi dt qrqdD fdF{qq, 2org i t
(z) t s-+d rrqqa d norvrq ol dr$rq d e-fn dii I
2. qRr{Nr( - {c ftftq$i d w a-o fu ris$ t or=qeTr'oTtrd_d r d,-
(o) 'tqftftqq" t qfir ffiFT+1oTftftqc, zooo (zooo or zr) oftha {
(g) tlqprudt srffi' q qs aR sTftfd t fra-R qm z+ d sr$-c oiotq fufrio-{ qrTrurqr qrfr 6-{i d ft\ 3r-JsR e-qg o1 G e (rf "ftriT6" t cTEftqq of sM rz ol sq-em (r) d qfi-{ ftTft scrurs-di crffitdT fuTo' sTft}d il 1u; "fti1ft rtffi' t olfqftqq o1 qm z+ d er$-{ etotq ffioq qrrrqq{ qrfr o.qi d fuq cqaw nfuotft t ft-q eqrurfi-dt crffi oTftid t fur+t Bisfl-q ffiEFq qqTurq=it 6) qrfr f{i d ftc wft qfMd ffi *tq-w A wfr Tei t wc*q 3rftir-q-fl, 3fh fi${ qrq-a t qrd{ Qi-qRrd t (g "qpq61sJq frtvt cqrqo.-dt slffi" t tsT fqisft sqTurd-di crfffi srftnd t fri-$ orBftqq o1 qm rg +t sq,-qm (r) d orEsqq t rc frftq'itd orfl-{ qrardl }KFT 01G t
(q) wf r5m srq sitr q-q d qfuirR-d rS t to.-5 qfDt+qq q qfu{rRd t, or m-qcr, q-fr 3Tef t dt v{dT . ffiftqqd| | i t4t6 GU20t3 (l) THE GAZETTE OF INDIA: EXTRAORDINARY IPARr II-SEC. 3(i)
3. fttsft ycrurffit srffidt aif qrqil d orct ter d Rft{nrd stf}o-{ul d oftftn rqrffi 6r G d t
(u) fttlft cclurd-dt nffiit ?df qrqil-
(r) ffi f4ffi sqruro-dl srffi o1 ec frft+lit d sftn-{ crdrf,rclq trlrar lTrv'n, qR s-$ qrsa t ft-q ffi tcr qrt frfui d qft{ rpnft-o qrqmqrq ftftqrrfi Trfuflq em eiotq fuFi6-{ Jrrilqqr e-EH o-ti d ftC cr0-f-d ftqr rrqr t t
(z) qq ftfui d orftq 356 ftftqrro yrFrort o.) Vo qrdrdrsrq ftftqrqo crffi d tq ii frftfiq fuqr qtt'.n, qR vs tcr e1 ftfuqi ftr{d q6-{ ir$ frftqrc-o qr0-o-rur o1 rsnq{r o1 'r$ t oq t oq gTRfrqc d qfi{ oiotq fuFi61 srrTo1t-r qffi s{i d'ftq oTift-a wtd qswtfficcr d wtot eden sqft t dtttff frftqrl-+.
crfuo-rur gs erfuftqq A sftn-{ ft{iT6 ofl-r or5+w xw"roct nffii d W fr qqm rErc 6-{dr t t
(s) F.rriT6, dffiq s{6'n d T{ q-$iqq t qrqc, fi W fqnm S e-d-s{ d fuc qrdKRITqT frftqITo srffifi qfr qrrq{rrq w qfr e-+.lRrd 6-{ trdfi I .
(+) t+ia-o, qa frftolit d l-dt-fi d fuc tqq (s) + sffid v-do qrq*nrq fttr-qwo crfuoqur d etu qrsldr grq{ otrn t
(s) scfrftqc (+) t effi-c fic-Sldr Frc-{ vtrd frqnq q'1drts t ciE s{ qtt 3r4ft d ftc iq €.n I d 3rfi-{ oi6tq fuFio-{ }rTTuFEr qIft o-ti d'fuq oTEltrd frr+sftcar ft{iTo' Enr frfrlqq loc.rc o.rro.i oi EqH q igt gq fuqr c{rvrn 3i{ d\j/- (o') ffiq 3ftq qrl-E €qrr{ fri-{-ditrd tcr d {-ilr eTlfui o1 F-qqmdr e (@ Ergi{i u1r ql6nwc"nftrdtlq't fur+sftqou 1j scrurrii el-r mruwii d s{ri<q d n*iw.qur qt1 cb-qr *t cTFrn{it or vRqriu[ (s1 qqrurqii n q6-qri {q oTfuqrdrcit Sr riqrFft ftd$q qroRt d qa-* o1 vq-aeraD sfs
(s) fqt$ Rti" fto.rq g;tr €vften o1ffia-at 3lh qRqruI
(eil) qrq-drglq Rt{ft ccrurd.di crffi ErtI qn? { rqlurwit or qrff ;I 6Ft.-{c frfut g 3i6ffie ffi erd d drt gC ft ot$ qrqrdrqrq f{kft *truro.-di yrffi qr<-d ii fc-ars o-{ € qrfi-q rtqof dI siatq f{frie-{ sqrqc{ qrfr qfrotqr I w*oqur.-{q frftqlit d firs=ii d fdc " qr{ftq qQo " qq t ot€ sffi, dt{ s-d, qfudi or ol$ tqry, qpdt oT fu6rq q1 oi{ Rnftq erffi fu{-ol qRr$f-d orqtdq qI iDT€r< o-r vqn'orutflI rrRd d or-sRrd t, Yrftd *'n t ($ qrqdl d trdl-
(r) frnqq 3(cr) d or4-{ rff{ dt q{ qrqf,r fu{rq frftqq 3(9 d" srPft{, qqTRIfr, Feifud qr vfr{wq fuC qri d Aq ,Gfr I
(z) w frft+ii d erd-{ c-<H a1.r{ qrqcr si-t€im"ftq t t €) q1qdr fi T{ qrQ si*{ ffair{srqurrii o,r sTRfuqrq *<r - gq frft+'ii d olfi{ qq fiqffi frffi cqruro-dt a qre-m F+c o1qrfi t, d irfr rqrq6-dt crffi Er{ tS q-'q61fr Td qrft qS 3ffiq ft-e{i-6-{ 'IIItqq;I gt{ 3Tfuf{qq d c-qlq=it d laq cTGfuqrq Cin t
(g) qfirfl ol ftic{ qr cftd-Ftolnnqq s(c{) d o1d-{ Fsrt qr1 .rt qrqar 6l trd{r qr cfuiEwr oq Rqr qNrn qR qremsrq ftlrft cqruro-di crffi dt ei+tq fuflioq srrTurr* qrfr 6{i d ftc wgfoa we-cur< Rftqrro crfr-6-tq am qrft srfuon ol tfr Rftqrro vlfuo-rur ERT Ftifi qr sfutieq 6-{Rqr qrer t t
(u) crqil or rffowt -
(1)'fl ftft$ii + sqdE qrqn d Tfto-iur d ftc frffi eni6q o1 Ecr d i-t arX iit +t fd qr"q-dr d ftq frffi qc en'eqq dl aridt t t
(z) fl-qdlrrq fqffi scrsro-dt srffi qffi q5qgt A =rfi-dq'r d rac tTriqq, ilA-s d emqn d oq t oq ffis Ft q{ ot'n t
(g) qrqil d Tfi-o-rq d ftc aTicq ffliTo arqr &o wFfr'r{ tft erterc\ 3{Fris d v-sq d ft-qr qT sdrll I
(x) r;uct e i6R- f+riT+' qraKII y-EFT twi qr swor q-A-fi-rq E-{i t g6no{s-d{T qF_ qrqf,T o1 ttrot sqrq di o1 a 3ftft{ wi gc q*qn-+t
(i) oTr'{6o i ft{iT6 dr 3Tci qrrsn dfr \ffi qRRrftrit t fti-r-d on-en d €qra-{ d dftd dI qITrF{d o-ri of €qri-{r t, t te-q \'S qs-cl sqmq TS 6.qri t, +qr fd ft{iT6 eTteir 6\ dt{
(ii) (ii)3rft{+. 'qRsqrqq qI vTIFFT d c-#q w t qr
(iii) qrqrdq flrT 3Tirq-6 d {dE ii nqo qT eFrq'' eil-q v-iqo o1 Frgft' oq fr 'r{ t qt a tqrq Il-str-s 3(i)l qrfd ?5I lrqIri : SRIItIRUI
(iv)eni6o qT ffi qrs qR d qrt qr*( qT qrcd t err{ ffi 3lq{rq a fuc fu{*q orcrorrqr t 3il'-{ fti-fi-d' 3{Frdrs-{ i qe qr+orft 3ffiftrd t fo. W qre qfr i o.w[ut qr i-ffi t o.rf toqr t, qr s$ 3tft-F{qrl ur g< ft+ii d qfi{ ffi eiq-qnr d tac fu€Aq aetrqrrqr tqt
(v) ot$ sTriqq' trqrurc qaR oerq d o-1sn sPF-qr oitt q-dfrdi ot cle[{ 6-ri *r 3{crfl{ o1 dr oEot t qt .,lrt+ud Year tqr i (vi)eni<o F?ito. d f,{*it 61 3riqffi{ o-{i d crtrm-d qear t qt , (vii)ftffi qrqarqm t{r o1ftFrit-d orfi-{ rc d eiotq f{flioq sr{ruFr;I qrQ 6ri d fuc a-{fl v'ftdri or fic.iq{ qr sfr€equr o-qRqrrqr t :
vq ur+cr mrq 6-G t {oR' (q) tlqdnrq ftirft nqT'rodf yrffidtqdo.do.-tit
(o) ft{i"-6 o} qrqarqrq fqm nqrurd-dt slErorft d ErlT :
clg {fir qrqdT}ITqT frifr qqurs-dt crErrrfi d sq d o.r{ f,{i t 3{F4{d di t Td Rc T{ q1 qpvar d er+src o1fffts t Td R{ X{ fr qrqfr;
(s) qqrpfr, -l*u, + er+sn t qr qrqarqm f{ffi Fqruro-dt qrer+lft d w d o.rd $-{i fi 3IF{id di d qro Rc Td c{ oT'=1q or iri tg-o wilr{RrT-r qr wii n im ftft ii f{arc-{ tn, +{r fo ffiiTo gnr ci-€rR-d fu-qr q\.
(rr) qrqdrcro, fr1-n sqrur*-dt crffi d w ii o.rd o'-{i t 3rf{id {6i d GTci silcrq.hl vsS aRr qft c-d-q' 3TCft-riEd qr si{fll=r r gv eiot+ q€qH 'TITUFI-I d sTfuqldr o1etffi+a ot'n:
G * fr qqrfuft, ;+dryr< frffi rqrurfi-di nrffi d w d s{ft-{d dli d rsra Fc 5{ ur eufrtien ur o*rt iEv eiotq q-6sn FTITUFT-{ d er+srq t qrs Fc ft q+tr |."ryfri
(s) q+or Frria-o, yqTt{d oTtrqrdrcil eltq o.rs *"n erOo-ciet 4'r 3i-fttq * t fr;aifs-a {-i-d 3i-i ffif( sro t M wcfr;
g {ff niotq fuaioq qqrpii o'r sir q++ o1 q-qft d oi( t 3{cFdriE-d t qr fur-of ercsn'r€f Eqr t o\ cFd{iea oq frqr qrv'n, qR 3Tft-qrdr i sr-d ersR-tirc'r or eqiu fuqr e
(q).es EkT uor qFvdq o-qi o.r gftgffi s-qn{ otn A sq-+1 qt-qcr o'r qrft c {qi t 3lft-<rdBit o\ 3ft-{ ts-q qfu{it E'} ftil€ aorqr eiotq fufliq'-{ qqTsrwii g 3iffieaYs gift d {s{ t 3ffiq fttTiq'-{ ol q-qft-a oqi qft qq6-f,: oIIEsqiS-dT t, g+aq q+rn otRa d;
gfrTff siEI6-r<r;
dG d tdc aTft-<rdpil o\ (qqr siatq fu5i6{ cFdEnrur or r{tq t I or.€. rg(a)/201 3-frwgwg1 O. g. sn, ft{iTf,, qcl'rfldi ql{ffi MINISTRYoFCOMMUNICATIONSANDtNFORMATIoNTECHNoLoGI (Department of Electronics and Information Technology) NOTIFICATION New Delhi, the 6'" APril, 2013 G.s.R.204 (E).- In exercise of the powers conferred by clause (b) of sub-section (2).of Section 89 of the Information Technology Act,2000 (21 of 2000), the controller hlreby, after consultation with the cyber Regulations Advisory committee and with the previous approval of the central Government, makes the following Regulations, namely: - l. Short title and commencement.- (l) These Regulations may be called the Information Technology (Recog,pition of Foreign Certifying Authorities operating under ions' 20 | 3' izjifi.y trtufr corie into force on the date of th zette'
2. Definitions.- In these Regulations' unless t
(4) "Act' means the Information Technology Act, 2000 (21
(b) *Certifying Authority" means a person who has been g issue a Digital Signature certificate under il"f '"::'; i.'"':"H t,'l i,:::"nl J ff : ll:"1"'.:
infrastructure associated with all functions of ates are located outside lndia;
THE GAZETTE OF INDIA: EXTRAORDINARY AR.r II-SEC. 3(i)J
(e) ..Recognized Foreign Certifying Authority" means a Foreign Certifying Authority who has been granted recognitionundertheseregulationspursuanttosub-section(l) ofSection l9oftheAct;
(f; Words and expressions used herein and not defined, but defined in the Act, shall have the meanings respectively assigned to them in the Act.
3 Recognition of foreign certifying authorities which operate under a regulatory authority in that country.
(A) Recognition of Foreign Certifying Authorities.- itfe for.-ign certifying authority shall be deemed as recognized under these regulations if it has been authorized to issue iligital Signature Certificates by a recognized regulatory authority established under the laws of a country other than India.
(2) A regulatory authority shall be specified as a recognized regulatory authority under these regulations ifthe laws of the country]nder which such regulatory authority is established require.a level of reliability at least equivalent to that requirid for issue of a Digital Signature Certificate under the Act and such regulatory authority accords similar recognition to the Controller and to certifying authorities licensed under the Act.
(f) ihe Controller may, with the previous approval of the Central Government, publish in the Official Gazette, a list of iecognized regulatory authorities for the purposes of these regulations from time to time.
(a) The Controller shall enter intsa memorandum of understanding with each recognized regulatory authority mentioned in sub-regulation (3) for the purposes ofthese regulations,
(5) A meftorandum of undeistanding mentioned in,su94ggu1.1ion (4) shall remain valid for 5 years from the date of its execution. i
(6) The determination of whether a country's laws fequire a level of reliability at least equivalent to that required for issue of a Digital signature Certificate under the Act, shall be made with regard to the factors decided by the controller and shall, inter alia, include::
(a) financial and human resources, including existence of assets within the country;
(b) trustworthiness of hardware and software systems;
(cj p.ocedu.es for processing ofcertificates and applications for certificates and retention ofrecords;
(dj availability ofinformation to subscribers identified in certificates and to potential relying parties; and
(e) regularity and extent ofaudit by an independent body;
(B) Recognized Foreign Certifying Authority not to issue ceftificates in India.- Notwithstanding anything contained ln these regulations, a Recognized Foreign Certifling Authority shall not issue digital signature certificates to Indian nationals residing in India.
Explanation: For the purposes of these regulations, the term "lndian National" shall include a company' a fiim, an association ofpersons, a body ofindividuals or a local authority whose registered office or principal place ofbusiness is located in India.
(C) Validity of recognition.- (l) A recognition granted under regulation 3(A) shall remain valid unless suspended or revoked, as the case may be, under regulation 3(E).
(2) The recognition granted under these regulations (D) Digital Signature Certilicates issued prior to Wtt...-uny Foieign Certifying Authority is recogni ll digital signature certificates issued by such Certifying eutno.ity prior to such recognition shall be es of this Act' (E) Suspensi0n o, "."o."tion of recognition.- A recognition granted under regulation 3(A) shall be suspended or revoked if the authorization granted by the appropriate recognized regulatory authority to the Recognized Foreign Certifying Authority for issuance of a Digital Signaturb Certificate has been suspended or revoked by such regulatory authority.
(F) Renewal of recognition.- if jfn. provisions of-these regulations shall apply in the case of an application for renewal of recognition as it applies to a fresh application for recognition.
(2) A Recognized Foreign Certifying Authority shall submit an application for the renewal of its recognition not less than forty-five days beforethe date ofexpiry ofthe period ofvalidity ofrecognition.
(3) The appiication for renewal oi rlcognition may be submitted in the form of electronic record sub.iect to such requirements as the Controller may deem fit.
(G) Refuial of recognition.- The Controller may refuse to grant or renew a recognition if-
(i) the appiicant has iot provided the Controller with such information relating to its business, and to any circumstances likely to affect its meth od of conducting business, as the Controller may require; or
(ii) the applicant is in the course ofbeing wound up or liquidated; or iiii) u r"""iu.r has, or a receiver and manager have been appointed by the court in respect ofthe applicant; or iiui tttr applicant or any trusted person has been convicted, whether in India or out of India, of an offence the conviction for which involved a finding that it or such trusted person acted fraudulently or dishonestly, or has been convicted of an offence under the Act or these rules; or
(v) an applicant commits breach of, or fails to observe and comply with, the procedures and practices as per the Certification Practice Statement; or
(vi) an applicant fails to comply with the directions of the controller; or a I lrii ii ii $ I lqrq Il-qu:s 3(i)l qRdiSI {sTTi : e[qTqRUT
(vii) the authorization granted to the applicant, to issue a Digital Signature certificate under laws of a recognizedcountry has been suspended or revoked:
ceasing to act as a hority:
Foreign Certifying ceasing to act as recognized Foreign Certifying Authority, as or newspapers and in such manner as the Controller may
(c) notify its intention to cease acting as a recognized Foreign certifying Authority to the subscriber ofeach unrevoked orunexpired Digital Signature Certificate issued by it:
Provided that the notice shall be given sixty days before ceasing .t9 u:!,ut a recognized Foreign certifyingAlthority or sixty days before the date of expiry of unrevoked or unexpired bigtul signutui. c-.rtin.u,., ^i1,. "ur.'n'ui
(d) the notice shall be sent to the controller, affected subscribers and cross certifying Authorities by digitally signed e-mail and registered post;
(e) revoke all Digital Signature certificates that remain unrevoked or unexpired at the end of the ninety days notice e requested for revocation;
to ensure that discontinuing its recognition causes minimal disruption to its subscribers andverify digital signatures by reference to the public keys contained in outstanding oigiiul
(g) make records for a period ofseven years;
(h) pay r ost involved in obtaining the new Digital Signature Certificate) tosubscribe cates before the date ofexpiry.
[F. No. | 9(3)/2013_CLFE1 T.A. KHAN. Controller of Cerrifying Aurhorities orfuq-ffr T$ frlcd, o erfe, zors T -t'ft' 205(3T)-. ft{i"-6, {fir etdffi qftfiqq, 2ooo (2ooo 61 21) a1 qRr Bs o1 sqtw (z) d rds (g a-ir9qd vrfu{ii ET }rfrrr ott gv qrwr frftqqq {ertrDn Hfrft d qirqst t 3f{d41q **o + 1-t ..Ed-- t fiqfdfil frf{qq fift { er-ufq :-- i. (ffrH qrq til-r cr{q--
(1) q{ frfiS or €ffrq ffi Tq-qr ffiffi (fffi Rf{qrr6 srfuo-iur d 3rfi-{ c-4rmq rd} o-r {t frffi scr"r6-dt srffidi 61qpq*r) frftqq, zoia i I
(z) t s-c-d rt"rr{ ii e?D.rcn ol dr-fts o.} e-cn dti I
2. cfuTrs$- ', ET ftftqrif it qs .16 fu Tis{ t 3i-qer ertft-o c d,
(o) "sT&ftqq" t qqqr trtffi qftftqq, 2ooo (2ooo or zr) ufulc t;
(u) "vtroro<i x[ftq;61" q WI qR oTftfd t fta-$ qRr 24 d orEft{ 3iatq fumoq F,TTUFT-{ qrfr o-{i d fdc ar5-sR c-qn of Tg t;
(rf "ftriT6' t 3Tfuftqq of snr 17 ol vqqRr (r) + enn-q ftTfi ccrum-dt crD-orRdi o.r ftqT6 srftt-a t;(q "frAi?ft Fcrroai e[fuq;1q" t sftnqc qft mn 24 A erff{ ciotq fuFifi y,rrurq:r qft 6-{i d fuq o-5*w rrffi t fuq cqruro-ct crffi 3Tfrfd t ft4-s-61 offiq fuflio{ cqrurq-jt q'I qft q.Ri d fuC s'ff sftqlR-o gFffc *t gu-t d wft F-dil t vr+q ow{ird{r, eift xitrq qrrf, t srfl q-ERrd d ;
(sf "q1qqs1q frtsfl ncrurodl srfuor$' t trrTr f{t{ft eqTurfi-dt erffi sTfrtd t fta-t erftnqq o1 qm rsr of sqEm (r) d ergrw d q+ frftqqt d qd-{ qrardr tr<rl o1.r$ t;
j ^^ (s) Esi rgffi vq *r q< "il cR'{rR-f, Tfi d f6-s 3Tftftqq t qR{rRd t or oqn, {& ci-4 t "ir vc-6.r eftftqc t t r s. G+{ft Fqrurffit crffidt q} Affi Aftqmo crffi A srft{ e-qrdn Tff 6r rl d, ol qrqei i.i qn qFrEs (3I) Ahft Fqrur.5,di srflq-q,ftit ol qrqcr.-fqffi scrurf,dt srffii !il fo.-S ftA*"- yrfr-orur d Gltft{ e-qffi{ q-S or € d o1 crqdr t {idRd !frqT ftt Rq erSwn t r i I L t.
lr{ ru bf;lry- u THE GAZETTE OF INDIA: EXTRAORDINARY PARr II-SEC. 3(i)l
(r) qrqcr rqn o-{i A Ac.Triqo-- Aifuq s(or) d oi-dffie ffi srd d eth gC ff, 6i$ FM cqruro-di cIffi f,fli"-o eil qrqdr d fac *a-fi qr{rrdrn I
(z) cnicc ol ftRrRqigs ftfrqq d 3ltft{ f6-S frffi eqrurfi-df crffi dt qril-dr d fac.Trnqq ft{iTo o1tfi ftft { fu-qr ql\'qr frsr fo. fui"-6 ERT wrrq-wrrr qc Gf,fd fr-qr qK, tt eTrn<q d wq"h d t't <Rrilq *< q++ d'ft +{T P5 p4;xo eIneTI of 3lt{ {ff-d 1ryTel 3rq qldt d qrq-{tPl ffifuT trrR-f, d'r, erqto : -
(o) go rqrurq r€fr 6w (€ftqs);
(u) oTra-{o ft1tr6-4n ol qwd vo oer{ frl-q-d eidfd Yffi fr t iO netpn <riotq fusioc crtTuFt=r flEfFT+1 e.iffi qT T=d{ fuq qri Erd e-qrd=it d tr+tr{ 3fu qRqM rl-{ v6'oPFI;
(s) fttqft nqluro-di Hfffi dr qtqiiT sre o-G 6T 3IRl-q tsar t' d orrErq qfusosq cwrfqi 6l ccrFrd cftqi;
€'ffi ff qe.qr or ft-aqq frRrqd, srq qr $ Rcrm+ru-t d 3Trn{o. d qrqorcrq frffi sqrrm-dt srffi d rc ii o.r{ 6qi q{ aTffio qqn GloT soar &
(s) eTrt4-6 Enr \o ffirriq fu s{-+1q-{il qrorft sfti ftr-4rw d eryn EF srTTurt.rqfr osn of edercil oT srFFr 6-{ wFdT g sYq qffi{ ot'n ; i (E sT\tud vttr ;*t t
(q) t,rri"-o snr eT\lFd ott erq q+cr t
(e) i'o-tvfifr d w it crtr{ duu-*-- EH frfiqq A effi{ rdo. oTi{<o v6 crcr{ r{uv-* rga 6'{'n 3t-{ fui"-6 d qe{ it i-t c-sc ailt i'S ftft d ffsr f6 ft{iT6 ErqI fiJ*Rd f6-qr qrq, \o' 6,q}e 3ffiAiq't dili t 3rq{ v1q o1 qrro t ffi .r{qh" t-{' t tr{ ftx|? rqd d{rrT ei-r-qrdq i*qq-r t6-r cFiltfr strdl rqo oti o1 <r-A-q t w e{ q,1 q-cfu d ftc as {*fr t
(a) qro-c dtrr{ ofk A'€{ cFd1fr o.r srsais- A-e nrm dI oTfutrp-d of qr q-+n qr ot{ s{Frdl"{-{ d gs erfuftqq qT trRrrFI rfd frffi orq ftft d 3ttfl-{ fr#t 3TT{1E d fdC a6q f6-+ qT F6rn, w ffi-qa yqrq sr& fe-{, sqRf{qq (a) d erfi-t qrcq iiqq-{ 3i{ d'6c sfuIfr o.T ffifuc qRRrfcrii d 3i-sii{ fuqr qI sd'n, 3{PIid : - @ ve ffliTfi ErrI gc ftft{lit d or$-{ fs-S fi{*ft yqT"r6-dt srffi d qrqcr or Fdqc fO-qr rrq t qr
(s) tf,iTo ERr eft-6-rd v-srs d risrq d ftc;qr O Att nquro-ci crffi, ssd erffii qr idi silTr d orqur <rfrr€t *{ Suno ar.$ ot r{qrq ; qI tq "R f4A$ nqruro-dt qrffi or vs-S 1a t:r d srtrori ql c.Irdq qlft Tfr {qI qrdl i .iI f4ffi Yqr"rf,di vrerort d e-qrd-it d qrQ c {si qr eiatq wgqrrd drrrd\ 6I €qrq d fuq ;qt 19 f+ffi ycrur6-dt crffi em eifrtq fuflb-{ s{rqwit d q-w, qfft o.-ri 3ftr fis{ q sqdlffid er*irqTl d nrqien* w scrd dt-.t.ii d fqrq d fuc sR ir$ drrnii o.) f4irft tqTuro-di srfrroft ERr 3r<r r€t fuqFrqr t t 1q) qfuftqq qr wsd ildgt{ {flq'rq ftqlii qr ftFr+ii 6 gqifr d irgvra-t t sqrsro-di erffi em foqr rrqt ot{ qtunq I w€oqur.- E-s sqftftqq d rd-r{ d fuC "qq[d{ ol oid{oT" G{FrqR or afr 3i'ri dtn d $fft5T sTrq-6-t oTftftqq, tsot (tsot or +a) of snr z d tis +z d t t
(s) enftq q'rqh.q - rd-{' ent<o rnsa t vo enftq q'rqtmq 61pnq{r q'trn I
(o) or*iru-* ol riqQeil Rq€-- O *a- oTri{6 oi-+tq Fraio-{ srrTUFFr d q-w, qft o.-ri oit xttn ertq qRrsIR-d gfrsrcil^ott s-6d-€ {1fr gdi o1 oq t qrq qftftqq + 3rfi{ qrgd frFftd qmqii d erSwrv €vftftra fuq qri q,1 ricfreTr futE r-qt o'wtt 1-
(s) rds (O t strrd ffisTr Rc}€-ii gs cqra or r iame dr'n fd dqflrn tnq t oq 3Tfuftqq d f4trtrq qr-ilcq qmo.t d qwnol'r$ t t
(z) otsio) qTqf,T r+q 6-ri d ftc ad6 ur'aqq 6 qrer ft{iTtr'd qeT d tq ffi lto qrwqr tq dsqd nrqq t T*fl wrq eTqffi ddrot oTcfttq st€ ddr{ iFft |
(s) fi+ia-o dt qrqer d Tftowr d fuv rqo enicq 6 qrq l+i*o d qer it tq frffi i'o Erw qr tq efr-gs d qrqq t q*s rtrr* eT{ffi €ttr{ d 3Tcfriq frfl Tidr{ fr'ft | (.T) sts qr vsd ffi qFr or sR-srq o6y foqr qr\"n qR qrqor oi s{-tbt as-dr o1 q-{E d dnrq FFiRd qr cFirried 6-r Rqr qrar t .
tqFr II-s!-s 3(i)l slfkl ?FT {nn:T : 3l{llclRul r (a) qrqar qrft orcr-
(o) t+i?-6 {q ftfrqq d qft{ uri6a a1 crR 01 il-fts t sR wkn6 o1 e-qB d frir{ uri.6a 6 qrer daq T€rAEii w *r t-t erq tnrroi w Ser fu qc sfoe srt ft-qtr e;ti d rT{qrd qrqflr trEr=T o-q {d{T qT rfi-o-qq oq sfin qr 3Tr'f<T dI or$o-Rqqsdrn :
. T{g eTrq-{rR-6 qRRfcdt d 3fl-{ oR'it @i dE-{€ o€ gv sR qqTr6 o1 q-qfu or Stn fu fuT6 sF4il {T* W , et-sfu eo d ena qqr6 t or-{fuo. dtft fuKn fuqr qr FdqT ' , q{g q6 olt{ fu orrifi 61 3rd-o.n ori gv 3rffd d o-Ruri dt frBffq fr-qr qglT I
(s) qRfrift F{rur6-di yrffi qfi qrdrdr d atrtcq ol gs frftqq d 3tt?H 3rg+rRd o-rRqT qrar t il enfco :
{ ' (i) ft{ie-d o1 fqn+qq 3(sT) d sqRt+qq (s) d. sciisl d er5n-w lt tt ogm qt1 drfts t vo qrs a1 sr-{E + ftmc1-6{ drrq* *rd'o s|drtfr nqc tntrr ;
(ii)ft{iT+. d qpr qrqf,r d ftds=ii *{ yrdT ol W o-qi d ft\ R{i o) anqq o€ gv \-6' oax FqrR-d o'tTr I
(s) E*n qFl-qqi6 fu€id--
(o) qs nnqq d 3ffiq qrqdrqrq 66 ftffi eqrq+-dt crErorq qfr EftfioT, qa,ft-o-iuT, ffiosq, lisnut, erfrrrq oit* uvi gru, TiffidnT sts rsm{ o1 qrrir d erSwn qqil o.r asII vsd nqrac d ftdltsd 3n q-sfrEr, rM{dr fi{{iceT'r oI g6qra Elft-d drfi |
(u) w frftqq d' srft{ qrqdT,nq frffi sqruro-df d fuv qFfl eHFr+1 Ew wffio Miit ei( gwr cFHo fuqkii mr str+ q+<r ffiffi (Fqrqo-dt crffi) f{qq, zooo tfi trqvt, 3r$$ z ofu er-5t1fr s t qJTrfrftffq W orEfrqq d erfi-{ ot-gww rrruro-ci fiffi d r<-q d sqoel s$+1q-flftgT, rM{dr Gn-{ +4r o1 sqtrqdr or qreTur o-{{r t t
(rr) w frf{qq d Grfi-{ qrakrTrrTqT Ateft sqruro-df crffi rqrct d ftc {c qrtk{fr fuqidi or c{gcrf,{ ovi gv erq-ft qq-fl cHM ottt E<eu frfr fftFdd 6trn oi{ sS ftd-To. ol x-qd otn :
q{E qs frftqq d orfi{ qrqilnrq frt{ft sqruro-dt srtrqtrft ERr q.d{r ffiffi eflr Eten frfr q fuc q ffi cfuq-fu o) ?t wqn q,1 ol-qft A fi-ft fl.riTo d rqa fu-w qT\''n I
(ro) r+ra=ii of {cfteTr--
(o) Cfl frftqc A ordt{ qrqdTril-q dr$ fqi:ft cqruro-dt crffi sqfrftqq (o) d ed-c at-jdRd fu-rt *iqftqrn t Erffifi Fq t orci s-qro=ii o1€qftnr orqrvn Gfttfi €cfreil d orq ekil d qpT-lrrq ffifuc $rft-d iin,- (itEqeTI ftfr oil'-rtqn;
(ii)til6- =* '
(iii)rHtM geior ;
(iv)t-q IRIRFT ;
(v)Ewn sflq-q q€fr oen ;
(vi)Ewn vqrun rr€fr oen iFT 3rgcrf,{ ;
(vii)tiffigt o-w;
(viii)f+i*o EM ftFd ftftqq ;
(ix)mruro-ot tnfustrft l+qq, zooo of ffi edeTt( t (<1 qrqarsrw ftffi qqruro-dt srffi sTci e-qrd.ii o1 Ew ffi, rltfuo Ewr eilq d-q-{r o1 erffio w t eridR-6 qrrftqTT 6trn I
(rr) qrqdrqrq F{t?ft qqrurfi-dt creffirft fS *ivften d Xo e}i d qrs qqiE ft1 q-qft d fi-d-{ v-do riqfteTr RfE o1 cfr fu"-a. o1 rEa o'r'n *r "5i ffi cr$ qrfr t, T6i sqr"ro-at ererort {rS uFr+tremeil o\ q* ori d tac S{d qgfua sqrq otn I
(rr) ftfterr-
(o) tfliTo ra-E sfuo qr$, W emqq d 3rtr{ qr;{ilrsrq ffi fttRft eqrsro-df crffi t ri{€ oiotq fusio-{ sriluFrr d qul, q-ft o-{i *c fiq{ t sraq qft ?-d ol gfrtlrcit st}s or-f,{il-{{r or ftfteTq o-ci 6T 3il-8ffi o-{ sdrn I (u; qrqanrq n*t mrurq,-ci srffi W frftqq d ds (O d sFrd ftftsTor d qftiq t qfr drkii sltq q{ii dr got1'rn I
(eil) cffidrcrq frtsft cqrurodf crffi EF{r qRtt { rqrurrCi or qrQ q iFFIT. - {l frfa+lii t eidtr€ t6-fr qrd + drfr Sc ft 6-{ nvcnrw f4ffi ccrq6-df nffi qrrd ii ftqrs oc € r+r*ftq qqdi dr oifrq fufliaq cqrqm qrft q€t ottn I w+.rrq.--gt frft$ii d trffii A fug " rrrrftq {rq6 " qE ii oH dq-ft, oi$ o-{, qfrdi or d-{ *iqq, qfuii or ftorq qr ot$ renftq crfuilft fu{-6r ffig-d o.rqtcq qt orreruol cqn orqidq qrqa d enRr< t, crR-d #r t t- THE GAZETTE OF INDIA. : EXTRAORDINARY [PARr II-SEC. 3(i)] (9 qrqm d nrfl--
(1) frftqc a(er) d schfrqq (e) d vft l-<H of T$ qrq-dr ssd qrfr o.-ti o1dfts t qiq s{ E1 sr-4fr d frc Aq ci-Ift t
(z) qr frfrqrit d orfi{ trqrl ol rr$ qrqcn 3i-6wimoftq t I . €) qrqcr t T{ qr0 si-frtq fuaioq crqurrtt *fl - {c ftfui d 3rfi{ qs ffi ftffi vqrurr-df d qrqar r+c o1qrfr t a N sqruro-at srffi Er{ tS qrqar t T{ qffr wS sffiq frFioc criluTs-{ w erDftqq d sd-sit d fuq sThfuqrq dit t
(v) rr;r* 6r ftic{ ut rft€EtrF-
(t) ftftqq 3(sr) + sqhftq{ (a) d orfi-{ ffi fttcft cqruro-dt vIffi ol r<rq o1 rr{ qrqcT fuR-d d qrV,ft w tt scrq6-di trffi ERI GrrIr fuC 'rC qrct dEITr qr rqd 61 'rg io-{ cftTfr o.T frftqq o(u) d' cqftftqq (c) d erft cfuriE{ul o-{Rqr qTq I
(z) f+i*o or tS qiq 6{i d c€K fsi T6 sFdd s{i {ortIFT d qri .m fu funn* 3(3r) d sqGfrq{
(a) d ed-c fo-S fqffi yqr"r6-df srffi t-
(o) qrcrcr ti qr qrdrdr d c-fi-6-rur d fav.r;* d ridu d ot{ oq-c fio.-qr t dl drfuo frRrRii d'rac qr fte4rt; '
(q) tS ftffii elti srd 6T q-6q 6qi d ersw-a )€f t fui-d erff{ qF{dr v-+c o1 'r{ tft ;
(9 ft{iTo. Enr frRHq ebqrcil *r cn-di, qFet{ t, or er-g*i'r o-G d ersm-a qa t ;
(u) gg erftftw, ftqq, frf{qq qr ilqfi-{ fsc fc aTrtsT d cqddi or BcdE{ foqr t ;
ss+t qrqm o'r f{dfud qr vft{-a-a sr{Rqt qKrrT :
crg ffi crqdr o\ TE il6 ftritrd ql yft€-ea rfr f6.-qr qKrrT un ao fu frtsft sqruro-dt crffi 6'r rRrft-d cFtrriarq d f{€ onq sqqfrd o-ri or gRgffi er+w q-fr t Rqr qrdr t t
(st) qrqdr or rftowr--
(r) qq frfrqrit A sqdE qpqar d Tfto-rur d fuc ffi etrnq{ olqcn t tt drrl€in +S fu qrqar d ftc ffi cq eniqq of ar.1dt d !
(z) qrqsnrq f4M sqrurfldt qrffi orrfr qrqdT d Tfi-6-tq d tav url*, qr;qm o1ftror qqrq di o1 dftq d crdrsn ?ii oq t oq ffis fu g{ o'*'n t
(s) crqdl d Tfi-o-rq d ftc aTrifi f+i"-6 Er{ &m qrfr'r{ tS erteTrctl + old-{-rri gc E-*qrfto1 ' GrFrds d y-sq t fd'ql qT lrdrn I
(t) ftf+qq 3(Qn) d wRf+qq (a) d qft{ ffi qrqorcrq frffi suuo-di srlffi d qrqm d Tfi-flur d oTrifi 6r orTdIEq o-r Rqr wm t dr sqr"r6-dl srftrot-ft, --
(o) tt sr-{m-<n o1 il-ftq t r-o qrq of orqfr d ffi frftqq 3(s{) d sqfrftqq (s) d erSww d fr{i"-6 dI qra{ iiErq{ *id'6-r cfilfd rga ot'n ; *r (9 f+iTo. d qrq qrqf,r d ftds=it *rsrdT *ieTfuft{Iq olttilqfi-{ qilc rc ftqrit ei-tfrfrqdi 6 sq*e} o\ Xtt oti d ftc K{i o1 otr+€ o€ Ev gq 6rrt ffid 6trn I
(x) wgcr * io.n - ft{iTo' qrardr q-<FT o-si qr srflor rfi-6-rur o-{i t {s'R or sdrn qR--
(i)sTri{o, i fr{iT6 dr 3Tci orEErc *{ ffi qRRfcdt t fui-d orrer d €qra-{ + dQ-d dt TqrF{d o-ri 61 thfl-r{I t t *iaa im q-q-{r sqffiI Tfr flr{ t, +tTI fu t+riTfi oTteil dt; elt*
(ii)sTifio qRsffq{ qT {FTFFT d roq qt t ; qr
(iii)qrqffiq am enf{6 d' €-ds d vrq-o qT Hqo *t x*qo o1 Frgft o-qfr .r$ t ; qr
(iv)eTriqo qT ffi qrfi qR o,) qri qwd zrr qr*a t Errt ffi etq-qnr d ftc fs€<\q eflrql.r+r t 3tt FffiS oTFrqtqq d qe qrc-orft offifrd t fo' Vn qr$ qfr i 6q-c{ut qr a-+crfi t o.r{ fuqr t, qr st qfrftqc qr g{ ftqdt d snf{ Girfi errqs d toc Rrfi}q dflFfl rrqr t;qr
(v) dr{ enico cqrr{ q<ft o-+q d erSrn yF6-qr *t r€frdt .rT rllet=T o-ti *{ oqcrffi o} {q ovor t qr srtTr5-dr-rtrt;qr
(vi)enico ft{iTo. A f{icri oT qlqrn o{i t srss-d rrat t ; qr
(vii)ffi qrqarsrq tcr 6t frRrdi d srft{ oni{o- d 3iotq fuFisq sqlulr-r qrft 6-ti d faC a-{fl crfufl{ or Fdcc qr cfrdatq ovRqrrqr t :
c{E qrqdr q-qn o.-ri t go.Royi d onuit or qrrq fr;-q qr sdrn t
(q) trqflfiq fttlft sqrurodi mffi d w { orfud *i Q T{ orierc. -qFrf,TcTRI fcm qqr"r6-di yrffi d w t or{ o.-ii t ofi€ Eti t X4 qre-cnrq feM cqrurr-dt srffi ffifuc TR otqr,- 161 ftri*o q|1 qrq6rqrq Atet yqrsro-di srffi d w it o.r{ s-{i t oTft-rd dti d eilcrq o1q+a11* ' TrE q-s-{r rnakTrlrrqr frffi y{r'ro.-df crffi d w it o.rd 6-{i t orFffd *i t rA Rc T{ q1 q-q6 S erw+n o1dlfts t Td R-{ T{ A q\',ft ;
tqr4II-qdE 3(i)l tll{il iFI llttq:t : gRFil{uI
(tt) qqrRtft, qr{rdl + sr+{ffi t qI qFIdrvIqT ftkft rqruro-dt nrfufirft d w d o.r{ o.-ri + srFd{d *i d qrd F{ t{ gs sllqq 6.r tS tFtfi wltrFgrr tII {fiFrrrrit d W ftft t ffilq-{ tn, +sr ft fu'a-€ eRr srqtiiftd fuqr qtc ;
_ (q) qrikrrilqr fdkfr sqluro-df cffi d isq d o.rd 6-{i i orFfid r6i d emi snsrq o} str+ pa{ qrft ipo "rcfdri6 qr sf,{sH I gq ffiq tr6qr{ rFrroTrlr + srk(ldr af slm{d otn :
, q.q rre ffi qrryfuft, ql=qemq fdffi eqrqudt Frffi d w t irft*a erf d wrs frc $ ur wfrtiw u orirgFT rr gv eti-ota v6qFr gfio[q-d d emsn * qro Rc $ q{fl { qrglft ;
(q) {q{r frdTo., sfiFc-d sTfrqrcrsfi efk nrs mrun srFr6-dfufi dI oiotq sc t fuHiftd t-i-d'tr1frr€|F srotffiqrvfr;
(9 qft oifrq ftaia{ rqrorrtt ol dt q++r d er-qB + sia d qxFfrri6d t qr ft-{o.r er+sn rfi Esr f at cffiEd oqfuqr qrV'n, qRo{ft-qrdr i sr-d eisfftieqq or crgtu fu4 t i
(e) w i{RT irr gFr€q od or gfugqffi v-qrs sfor fo ss-+t qrqar o\ qrft c {si t crfuqrdrcfi dt oltr s{ qfut sn fti-+ Eorqr siotq f{flior sqIUITit d sffi€d}d Eifi + rislf d ci+tq fuFiq,r 6.} ssrR-d E-ri o1 qq6-d: clrrqiftTr t T{-dc qqEH oTfu d;
(9 vn Ed fr er4B d frq qfu&it o.) cr$ft-d 6-ri + ffrq gfuT€ miq 6-i-{r;
(q) sifiq fusior erilqq-d df Bn-d q-{sn t T{ sffi'ac 6-{i d fuq 3Tfu{Hrcfi of (c-qr oiq,tq fuai6-{ trrrrurr-r oifrsrq o{i d stiltfud arq-d t sr-{fuo) gftgffi cFdEnur or dtq t lqt.d. tg(s)lzot+ffi1 N'TIFI.ATI'N 3'q' s''f+iTr' Hql'rs-di *ffi New Delhi, the 6th April,20l3 G.S.R 205 (E).- In exercise of the powers confened by clause (b) of sub-section (2) of section 89 of the Information Technology Act,2000 (21 of 2000), the Controller hereby, after consultation with the Cyber Resulations Advisory. Committee and with the previous approval of the Central Government, makes the followingsRbg:ulations, namely : -I' Short titlc and Commencement.- (l ) These Regulations may be called the Information Technology (Recognition of Foreign Certifying Authorities not operating under any Regulatory Authority) Regulations, 2013. !t11 ..,it:'
(2) They shall come into force on the date of their publication in the Official Gazette.
2. Definitions.- In these Regulations, unless the context otherwise requires ,--.
(a) *Act'means the Information Technology Act, 2000 (21 of 2000) ;
(b) "Certifying Authority' means a person who has been granted a licence to issue a Digital Signature Certificate under section 24 ;
(c)'(Controller'nfeans the Controller of Certifying Authorities appointed under sub-section (l) of section l7 of the Act;
(d) "Forcign Certifying Authority" means a certifying authority other than one licensed to issue a digial signature certificate under section 24 of the Act and whose installed facilities and infrastructure associated with all functions of generation, issue and management of digital signature certificates are located outside India ;
(e) "Recognized Foreign Certifying Authority" means a Foreign Certifying Authority who has been granted recognitionundertheseregulationspursuanttosub-section(l)ofsection lgoftheAct;
(f) Words and expressions used herein and not defined, but defined in the Act, shall have the meanings respeetlvely assigned to them in the Act.
3. Criteria for recognition of foreign ceftifying authorities which docs not operates under any regulatory authority.
(A) Recognition of Foreign Certifying Authoritics.- The procedure relating to recognition of Foreign Certifying Authorities which does not operate under any Regulatory Authority is as under :
(l) Application for grant of recognition.- Notwithstanding anything contained in regulation 3(A), any lbreign certifying authority may apply to the Controller for recognition.
' (2) Particulars of application.-Every application for recognition of a Foreign Certifying Authority under tlris -. regulation shall be made to the Controller, in such manner as the Controller may, from time to time, deterrninE.
. supported by such documents and information as the Controller may require and it shall inter alia, inclu& t6ic* ' following, namely:-
(a) a Certification Practice Statement (CPS) ;
(b) a statement including the procedures with respect to identification ofthe applicant ;
(c) a statement for the purpose and scope of anticipated Digital Signature Certificate technology, management, or operations to be outsourced ;
| \t 6 Gflr3 -3 10 THE GAZETTE OF rNDrA: EXTRAORDINARY [PAR'[ Il-sEc.3(i)] I
(d) certified copies ofthe business registration documents and licences ofthe Foreign Certifying Authority that intends to be recognized ;
olvency, that could materially affect the applicant's edge and belief it can and will comply with the ntee- Every applicant under this regulation shall submit a a scheduled bank in India in favour of the Controller in e Controller for an amount of not less than one crore of US dollars and the performance bond and banker's guarantee shall remain valid for a period of six years from the date of its submission.
tee -or prosecution which may be initiated for any offence under p.ifottun". bond and banker's guarantee submitted under mstances,namelY:- n ofthe foreign certifying authority under these regulations;
the Controller; or ts attributed to the negligence of the fbreign Certilying inuation or transfer of operations of the foreign Certifying uthorization in the country of its origin or operations is discontinued; or
(e) for payment of the costs incurred in the inspection of the infrastructure utilized by the foreign certifying authority tbr generation, issue and management or oigit"t signature certificates if such costs are not defrayed by the foreign certifying authority'
(f) any other o.iuu1t'*u-a. uy the certifying Authority in complying with the p'ovisions of the Act or rules made thereunder or under these re gulations'
Explanation.- ror tft. purpJr" of this sub-regulation , the expression "transfer of operation" shall have the meaning assignJ to it in ciause (47) of section 2 of the Income-tax Act, l96l (43 of l96l)'
(5) Local office- Etnery applicant shall establish a local office in Indiq'
(6) Audit Report of infrastructure-
(a) Every applicant shall furnish an aud,it report ofits installed facilities and infrastructure associated with all .
functions of generation, issue and management of digital signature certificate audited accordingto standards at least equivalent to those specified under the Act'
(b) The audit report mentioned in clause (a) shall contain a statement to the effect that the audit has been performed u..o.iing to standards at least equivalent to those specified in the Act' shall be accompanied by a nonrefundable fee oftwenty five pay order drawn in the nam€ of the Controller' renlwat of recognition shall be accompanied by a nonle by a bank draft or by a pay order drawn in the name of the Controller.
(c) The Fee or any part thereof shall not be refunded if the recognition is suspended or revoked during its validitY Period.
weeks from the date of receipt of the application under this panying the application and such other factors' as he may aPPlication:
and for reasons to be recorded in writing, the period offour weeks may be extended to such period, not exceeding eight weeks in all as the Controller may deem fit:
provided further while rejecting the application, reasons for rejection of the same.may be specified'
(b) Ifthe application for recognition of-the Foreign certifying Authority under'this regulation is approved' the apPlicant shall:
(i) submit a performance bond and furnish a banker's guarantee within one month from the date of ,u.t uppiouut to the controii.. in u..oraunce with the provisions of sub-regulation (3) of regulation 3(A);
(ii) execute an agreement with the Controller binding himself to comply rvith the terms and conditions of the recognition' tqn Il-lso-s 3(i)l ql(d if,'l {!ttl-N : 3I{IIgIRUI l1
(9) Security Guidelines-
(a) AnV Foreign Certifying Authority recognized under this regulation shall have the sole responsibility of iniegrity, confrdentiality and protection of information and information assets employed in its operation, .onr-id.ring classification, declassification, labeling, storage, access and destruction of information assets according to their value, sensitivity and impoftance of operation'
(b) Information Technology Security Guidelines and Security Guidelines for a Foreign Certifying Authority iecognized under this regulation aimed at protecting its integrity, confidentiality and availability of service shall be oia level equivalentio that ofa certifying Authority licensed under the Act as specified under Schedule-Il and Schedule-Ill of the Information Technology (Certifying Authority) Rules 2000 respectively'
(c) A Foreign Certifying Authority recognized under this regulation shall formulate its lnformation Technology and Security policy for operation complying with these guidelines and submit it to the Controller:
provided that any change made by any Foreign Certifying Authority recognized under this regulation in the Information Technology and Security Policy shall be submitted by it within a period of twQ weeks to the Controller.
(10) Audit of operationsia) A foreign ...titying authority recognized under this regulation shall get its operations audited annually by an auditor approved under sub-regulation (6) and such audit shall include inter alia,-
(i) securitY PolicY and Planning;
(ii) PhYsicalsecuritY;
(iii) technologYevaluation;' (iv) services administration;
(v) relevant Certit-ication Practice Statement;
(vi) compliance to relevant Certification Practice Statement;
(vii) contracts or agreements;
(viii) regulations prescribed by the Controller;
(ix) policy requirements of Certifying Authorities Rules, 2000'
(b) The Recognized ior.ign Certifying Authority shall conduct internal half yearly audit of the Security Policy, physical security n.
i.ift,. Recognt ority shall submit copy of each audit report to the Controller within a period of iour of such audit and where irregularities are found, the Certifying .Autttority shall take immediate appropriate action to remove such irregularities' (l l) lnspection -(a) The Controller may, when he deems fit, call for physical inspection of the facilities and infrastructure associated with all functions of generation, issue and management of digital signature certificate belonging to a Foreign Certifying Authority recognized under this regulation'
(b) Tt e Recognizid Foreign Certiiying Authority shall bear all costs and expenses with regards to the inspection mentioned in clause (a) of this regulation.
(B) Recognized Foreign Ccrtifying Authority not to issue certificates in India.-Notwithstanding anything contained init.r. r-egulations, a RecognizeA:Foreign Clrtifying Authority shall not issue digital signature certificates to lndian nationals residing in India.
ExpUnltion: For the purposes of these regulations, the term Indian national shall include a company' a firm, an association of pe.sons, a iody of individu-als or a local authority whose registered office or principal place of business is located in India.
(C) Validity of rccognition.-
(l) A recognition granted under sub-regulation (8) ofregulation 3(A) shall be valid for a period offive years from the date of its issue,
(2) The recognition granted under these regulations shall not be transferable.
(D) Digital Signature Ce cognition to be invalid.- where any Foreign Certifying Authority is recognized und signature certificates issued by such certifying Authority prior to such recognitionshall be Act' (E) Suspension or revocation of recognition.-
(l) A recognition granted to a Foreign Certifying Authority under sub-regulation (8) of regulation 3(A) shall stand suspended when the performance bond submitted-or the banker's guarantee furnished by such certifying Authority is invoked under sub-regulation (4) ofregulation 3(A) '
(2) The Controller may, if he is satisfied after making such inquiry, as he may think fit, that a Foreign Certifying Authority recognized under sub-regulation (8) ofregutation 3(A) has,- .
" (a) made a statement in, or in relation to, tle application for the issue or renewal of the recognition, which is , incorrect or false in materia
(b) failed to comply with th nditions subject to which the recognition was granted;
i.j tuit.O to maintain the pr tandards, if any, specified by the Controller, idj .ontruu.n.d any provlsi , rule, regulation or order made thereunder, shall suspend or revoke the recognition:
t2 THE GAZETTE OF INDIA: EXTRAORDINARY IPARr ll-SEc. 3(i)l provided that no recognition shall be suspended or revoked unless the recognized Foreign Certifying Authority has been given a reasonable op-portunity of showing cause against the proposed revocation' (F) Renewal of iecognition.-
(l) The provisions of these Lgulations shall apply in the case of an application for renewal of recognition as it applies to application for the renewal ofits recognition not less than y of recognition, mitted in the form of electronic record subject to such ertifying Authority recolnized under sub-regulation (8) of tee ufithin a period one month from the date of such of regulation 3(A); and comply with the terms and conditions of the recognition e thereunder' ith such information relating to its business, and to any business, as the Controller may require; or ated: or ointed by the court in respect ofthe applicant; or . whether in India or out of India, of an offence the ch trusted person acted fraudulently or dishonestly, or has been convicted ofan offence under the Act or these rules; or
(v) an applicant commits breach of, or fails to observe and comply with, the procedures and practices as per the Certifi cation Practice Statem ent; or
(vi)anapplicantfailstocomplywiththedirectionsoftheController;or
(vii) the auttrorizaiion grante'd io the applicant, to issue a Digital Signature certificate under laws of a recognized country has been suspended or revoked:
Provided that the reasions for refusal of recognition may be mentioned' (H) Re rtifYing AuthoritY'- Before , the recognized Foreign Certifying Authority shall, - ng as a recognized Foreign Certifying Authority:
ninety days before ceasing to act as a recognized Foreign i C.rtifying Authority or ninety days before the date of expiry of recognition
(b) advertise sixty days befoie the expiry of recognized or ceasing to act as recognized Foreign Certifying Authority, as thetase'may be, the intention in such daily newspaper or newspapers and in such manner as the Controller
(c) notify acting as a recognized Foreign Certifying Authority to the subscriber of each unrelptia ignature Certificate issued by it:
ice shall be given sixty days before ceasing to act as a recognized Foreign Certifying Authority or sixty days before ih" O rt. of expiry of unrevoked or unexpired Digital Signature Certificate, as the case maY be;
(d) the notice shall be sent to the controller, affected subscribers and cross certifying Authorities by digitally ain unrevoked or unexpired at the end of the ninety days vocation;
uing its recognition causes minimal disruption to its signatures by reference to the public keys contained in for a Peri od of seven Years;
ed in obtaining the new Digital Signature Certificate) before the date ofexPirY.
[F. No. l9(3Y2013-CLFE] T. A. KHAN' Controller of Certifying Authorities dre Manager, Government ot lnola rrcss' KlnE Koru' ruayaPur r' rtc and-Published by the Controller ofPublicalions, Delhi-l 1005