Digital Electronics Signature Regulations & Laws in the World

courtesy Prakash [prakash2757@yahoo.com] from cisspstudy@cccure.org mailing list

Australia
November 25, 2000: Approved electronic signature bill law with action to take place from July 2001. Gatekeeper model set up and designed to guide development of PKI infrastructure. Australian Customs has developed a system called the Cargo Management Re-Engineering Project (CMR). CMR was designed to leverage PKI for improving Customs paperwork for import and export of goods.

Austria
Digital signature legislation provides full recognition of secure digital signatures with less (but some) support for insecure digital signature methods.

Bermuda
July 1999: Enacted Electronic Transactions Act of 1999, which provides legal recognition of electronic signatures.

Brazil
Superior Court of Justice will now publish its decisions online with a digital signature affixed to the decision to vouch for its authenticity.

Canada
The city of Toronto provides for the land (in other words, deed) registration documents that can be submitted and maintained electronically with digital signatures. More than 50 percent of the city’s land documents have been implemented through this system.

Finland
January 2000: Act on Electronic Service in the Administration. This act defines the scope and structure of the elements of a PKI for digital signatures. Specific exclusions of the act are listed; unlike in other countries, this law excludes the use of digital certificates for the application to administrative judicial procedures

France
March 13, 2000: Electronic signature law implemented.
July 16, 2002: A decree was issued that required cryptographic service providers to provide authorized (government-recognized) agents the ability to decrypt data on demand. Effectively, this required either an escrow ability for private keys in PKI or a cryptographic system that allowed for a “back-door.”

Hong Kong
Hong Kong’s government is offering free digital certificates for the first year of its Smart ID card program. The program was designed to build a system that can provide smart cards for all electronic activities requiring authentication for digital transactions.

Italy
The government has passed a regulation that provides for digital signatures in support of the relevant EU directive (93/99/EC). The regulation identifies two types of signatures: a light signature for person identification and access to general public administration services and a more secure signature for digital signatures of electronic documents.

Korea
The Ministry of Information and Communication requires Internet-based banking organizations to use government-issued banking digital certificates. Organizations already using nongovernment-issued certificates will be required to go to government-issued certificates by May 2003.

Malaysia
One of the earlier legislations on digital signatures, Malaysia passed its Digital Signature Act in 1997.

New Zealand
October 2002: Electronic Transactions Bill passed that provides electronic documents and digital signatures on par with physical contracts and signatures.

Singapore
June 1998: Singapore passed its digital signature act called the Electronic Transactions Act 1998 that provides for the legal recognition of digital signatures.

United States
https://www.csoonline.com/article/3391587/finra-rule-4512-u-s-sec-approves-electronic-signatures.html

Cybersecurity Security Service Provider (CSSP)

A Cybersecurity Security Service Provider (CSSP) is required per [] on DoD networks. A CSSP provides Protect, Detect, Respond, and Sustain services.
​What is a Tier1 versus 2 CSSP?
Who are the approved CSSPs for DoD and subordinate military Departments?
DoD:

• DISA. Tier 2.

Army:

• Army Research Lab (ARL). Tier [].​