Regulation 49. Functions of recognised repository.
(1) A recognised repository shall -
(a) maintain a publicly accessible data base for the purposes of publishing the information required to be published under the Act and these Regulations;
(b) publish the certification authority disclosure records for licensed certification authorities as the Controller may require;
(c) publish such advisory statements, written defences thereto and decisions by the Controller thereon and such other information as the Controller may require;
(d) publish such information as a licensed certification authority may require; and
(e) publish such other information as the recognised repository deems fit.
(2) A recognised repository shall publish all information received and requested to be published not later than one business day after receipt of the request and information.
(3) If for any reason the recognised repository is unable to comply with the time limit specified in subregulation (2), the recognised repository shall immediately upon receipt of the request and information notify the requester in writing of that fact.
(4) A person who contravenes subregulation (3) commits an offence and shall on conviction be liable to a fine not exceeding twenty thousand ringgit or to imprisonment for a term not exceeding six months or to both.
