Act 7 Electronic Signatures Act 2011 (3) The certification service provider named in a statement as creating or causing a risk may protest the publication of the statement by filing a brief written defence. (4) On receipt of a protest made under subsection (3), the Controller shall publish a written defence together with the Controller’s statement and shall immediately give the protesting certification service provider notice and a reasonable opportunity of being heard. (5) Where, after a hearing, the Controller determines that the publication of the advisory statement was unwarranted, the Controller shall revoke the advisory statement. (6) Where, after a hearing, the Controller determines that the advisory statement is no longer warranted, the Controller shall revoke the advisory statement. (7) Where, after a hearing, the Controller determines that the advisory statement remains warranted, the Controller may continue or amend the advisory statement and may take further legal action to eliminate or reduce the risk prohibited under subsection (1). (8) The Controller shall publish his decision under subsection (5), (6) or (7), as the case may be, in one or more recognised repositories. 81. Obligation of confidentiality (1) Except for the purpose of this Act or for any prosecution for an offence under any written law or under an order of court, a person under any powers conferred under this Act, shall not obtain access to any electronic record, book, register, correspondence, information, document, other material or grant access to any other person. (2) A person who contravenes subsection (1) commits an offence and is liable, on conviction, to a fine not exceeding one hundred twenty currency points or imprisonment for a term not exceeding five years or both. 47