SurinameWet Elektronisch Rechtsverkeer, Security Requirements for Certification Service Providers
Wet Elektronisch Rechtsverkeer (Wet van 24 september 2017, S.B. 2017 no. 86), art. 33 and 39
In force since .
A sector security regimes rule binding public and private bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Security
What it requires
- This binds a certification service provider (certificatiedienstverlener) that issues qualified electronic identification means, a natural or legal person, whether a private business or a public body (reached by declaring that you operate an essential service).
- Use trustworthy systems and products that are protected against modification and that keep technical encryption security safe (Article 33, item c).
- Keep a prompt and secure registration system and, where applicable, a system for the immediate revocation of a qualified electronic identification means (Article 33, item f).
- Take measures against forgery of a qualified electronic identification means (Article 33, item g).
These lines are LexLint's reading of the law's text.
Who enforces it
Enforcement body
The accreditation authority (accreditatie-instantie) designated under the Act, which supervises certification service providers' compliance with the legal requirements.
What this law does
Article 33 requires a certification service provider that issues qualified electronic identification means to use trustworthy systems and products that are protected against modification. Article 39 lets the accreditation authority withdraw the provider's accreditation, end its activities or order corrective measures when the provider no longer meets the Article 33 requirements. Article 78 provides that the Act enters into force on the day after its promulgation in the Staatsblad.
When LexLint raises it
When your app profile says your app runs an essential service.
Back to the example · Lint your app
Page updated .