Electronic Communications and Transactions Act, 2002 (Act No. 25 of 2002)Accreditation RegulationsChapter IV : Requirements for certification service providers25. Termination |
| (1) | An authentication service provider whose authentication products or services resulting in and used to support an electronic signature have been accredited may terminate such accreditation at any time in terms of the Act: Provided that the authentication service provider must— |
| (a) | give the South African Accreditation Authority notice of its intention to cease operations 90 days before the termination of its accreditation or its ceasing to act as an authentication service provider; |
| (b) | before the termination of its accreditation or its ceasing to act as an authentication service provider, as the case may be, advertise its intention to terminate its accreditation in a national newspaper and in such other manner as the South African Accreditation Authority may determine; |
| (c) | give all its subscribers and holders of each unrevoked or unexpired certificate issued by it 60 days' notice by electronic mail and registered post of its intention to cease acting as an authentication service provider; |
| (d) | ensure that discontinuing its operations causes minimal disruption to its subscribers and to persons who need to verify certificates; |
| (e) | make arrangements for the preservation of records as contemplated in section 38(4)(f) of the Act; and |
| (f) | destroy all expired certificates. |
| (2) | South African Accreditation Authority must follow the provisions of regulation 23(1)(b), (c), (d), (e), (f), and (g) as soon as it receives a notice of termination from an authentication service provider. |