(4) The qualifications, experience and terms & conditions of service of Controller, Deputy
Controllers and Assistant Controllers shall be such as may be prescribed by the Service Code.
(5) The Head Office of the Controller shall be located at Dhaka and as the Government may
think fit may establish Branch Offices at such places for fixed time duration or permanently.
(6) There shall be a seal of the office of the controller, which will be used in places approved
by the Government and other defined areas.
(7) For the purpose of preserving all electronic records under this Act there shall be a room in
the Office of Controller which will be named as "electronic records repository room."
19. Functions of the Controller.--The Controller may perform all or any of the following
functions, namely:-(a) exercising supervision over the activities of the Certifying Authorities;
(b) laying down the standards to be maintained by the Certifying Authorities;
(c) specifying the qualifications and experience which employees of the Certifying
Authorities should possess;
(d) specifying the conditions subject to which the Certifying Authorities shall conduct
their business;
(e) specifying the contents of written, printed or visual materials and advertisements that
may be used in respect of a Digital Signature Certifying;
(f) specifying the form and content of a Digital Signature Certificate;
(g) specifying the form and manner in which accounts shall be maintained by the
Certifying Authorities;
(h) specifying the terms and conditions subject to which auditors may be appointed and
the remuneration to be paid to them for auditing the Certifying Authorities;
(i) facilitatining the establishment of any electronic system by a Certifying Authority
either solely or jointly with other Certifying Authorities and regulation of such
systems;
(j) specifying the manner in which the Certifying Authorities shall conduct their
dealings with the subscribers;
(k) resolving any conflict of interests between the Certifying Authorities and the
subscribers;
(l) laying down the duties and responsibilities of the Certifying Authorities;
(m) maintaining computer based databases, which-(i) contain the disclosure record of every Certifying Authority containing such
particulars as may be specified by regulations; and
(ii) shall be accessible to the member of the public;
(n) perform any other function under this Act or Codes prepared under this Act.
20. Recognition of foreign Certifying Authorities.-- (1) Subject to such conditions and
restrictions as may be specified by regulations, the Controller may, with the previous approval of the
Government, and by notification in the Official Gazette and additionally optionally in Electronic
Gazette, recognize any foreign Certifying Authority as a Certifying Authority for the purposes of this
Act.
(2) Where any Certifying Authority is recognized under sub-section (1) of this section, the
Digital Signature Certificate issued by such Certifying Authority shall be valid for the purposes of this
Act.
(3) The Controller may, if he is satisfied that any Certifying Authority has contravened any of
the conditions and restrictions subject to which it was granted recognition under sub-section (1) of this
section, for reasons to be recorded in writing, by notification in the Official Gazette and additionally
optionally in Electronic Gazette, revoke such recognition.
8