Provided that, the foregoing provision shall not affect the applicability or operation of the
provisions of the Pakistan Telecommunication (Reorganisation) Act, 1996 (XVII of 1996) to the
telecommunication systems or telecommunication services, other than cryptography services,
provided by the cryptography service providers.
23. Repository.__ (1) The Certification Council shall establish and manage a repository for all
accreditation certificates, certificates issued by accredited certification service providers and for such
other information as may be specified in regulations made by the Certification Council.
(2) The Certification Council shall take appropriate measures to ensure the security of all
information contained to the repository.
(3) All information contained in the repository shall be open to public inspection.
(4) Notice of suspension or revocation of any accreditation or of certificate issued by an
accredited certification service provider, shall be posted in the repository within the prescribed time.
24. Grant of accreditation.(1) The Certification Council may grant accreditation to certification
service provider, its cryptography services, electronic signature or advanced electronic signature and
security procedures who complies with the criteria for accreditation specified in the regulations.
(2) The terms and conditions of the accreditation, including those relating to duration of the
accreditation, renewal, suspension or revocation, shall be specified in the regulations.
(3) The fee for grant and renewal of the accreditation shall be as prescribed.
(4) The form and manner of proceedings for the consideration of application for grant, renewal,
suspension or revocation of accreditation shall be specified in the regulations.
Provided that, the regulations shall provide for a transparent procedure with due regard to the
right of hearing.
25. Certification practice statement.(1) Each certification service provider, desirous of being
accredited, shall prepare and have at all times accessible a certification practice statement in such
form and with such details, particulars and contents as may be specified to the regulations made by
the Certification Council.
(2) Without prejudice to the generality of the foregoing, the regulations may provide for:__
(a) prompt information to persons likely to be adversely affected by any event relating to the
information system of the certification service provider or inaccuracy, invalidity or
misrepresentation contained in a certificate;
Page 13 of 21