[Home] [Databases] [WorldLII] [Search] [Feedback] Malaysia Legislation

A person intending to carry on or operate as a repository shall satisfy the following requirements:

(a) it is a body corporate incorporated in Malaysia or a partnership within the meaning of the Partnership Act 1961;

(b) it maintains a registered office in Malaysia;

(c) it has working capital reasonably sufficient, according to the requirements of the Controller, to enable it to conduct business as a repository;

(d) it employs as operative personnel only persons who -

(i) have not been convicted within the past fifteen years of an offence involving fraud, false statement or deception; and

(ii) have demonstrated knowledge and proficiency in following the requirements of the Act and these Regulations;

(e) the repository includes a data base that is capable of containing -

(i) certification authority disclosure records for licensed certification authorities;

(ii) certificates to be published in the repository;

(iii) notices of suspended or revoked certificates to be published by a licensed certification authority or any person suspending or revoking certificates;

(iv) notices of termination of suspension of certificates to be published by a licensed certification authority or any person suspending certificates;

(v) advisory statements, written defences thereto and decisions made by the Controller thereon to be published by the Controller under the Act and these Regulations; and

(vi) such other information as the Controller thinks fit;

(f) it operates by means of a trustworthy system;

(g) the repository contains no significant amount of information that the Controller finds is known or likely to be untrue, inaccurate or not reasonably reliable;

(h) the repository contains certificates published by certification authorities that are required to conform to rules of practice that are similar to or more stringent than the requirements of the Act and these Regulations;

(i) it keeps and maintains an archive of certificates that have been suspended or revoked, or that have expired, within at least the preceding ten years;

(j) it complies with the certification, standards and technical requirements under the Act and these Regulations; and

(k) it complies with such other requirements as the Controller thinks fit.