### Electronic Transactions Ordinance 《電子交易條例》

26. Effect of revocation, suspension of recognition or expiry of validity of recognized certificate
(1) Where the revocation or suspension of a recognition of a certification authority has taken effect or the period of validity of a recognition specified under section 21(6)(b) has expired, the provisions of this Ordinance relating to—
(a) a recognized certification authority do not apply to that certification authority;
(b) recognized certificates issued by a recognized certification authority do not apply to the certificates issued by that certification authority; and
(c) digital signatures supported by a recognized certificate issued by a recognized certification authority do not apply to the digital signatures supported by the certificates issued by that certification authority.
(2) Where the revocation or suspension of the recognition of a recognized certificate has taken effect, the provisions of this Ordinance relating to a recognized certificate or digital signatures supported by a recognized certificate do not apply to—
(a) the certificate of which the recognition is revoked or suspended;
(b) any certificate of the type, class or description of certificate the recognition of which is revoked or suspended;
(c) digital signatures supported by that certificate or a certificate of that type, class or description,
as the case may be.
(3) Where the validity of a recognized certificate or the period of validity of a recognition specified under section 22(8) has expired, the provisions of this Ordinance relating to recognized certificates issued by a recognized certification authority and digital signatures supported by a recognized certificate issued by a recognized certification authority do not apply to the certificate and the digital signatures supported by the certificate.
(4) The revocation or suspension of the recognition of a certification authority does not affect the valid use of a recognized certificate issued by that certification authority before the revocation or suspension took effect or after the reinstatement of the recognition.
(5) The revocation or suspension of the recognition of a certificate does not affect the valid use of the certificate concerned before the revocation or suspension took effect or after the reinstatement of the recognition.
(6) The expiry of the period of validity of the recognition of a certificate specified under section 22(8) or the expiry of the period of validity of a recognized certificate does not affect the valid use of the certificate concerned before the expiry of the period of validity of the recognition or the certificate, as the case may be.
(7) The expiry of the period of validity of the recognition of a certification authority specified under section 21(6)(b) does not affect the valid use of a recognized certificate issued by that certification authority during the period of validity of its recognition.

### Electronic Transactions Ordinance 《電子交易條例》

28. Certification authority may appeal to Secretary against decision of Government Chief Information Officer
(1) A certification authority aggrieved by a decision of the Government Chief Information Officer— (Amended L.N. 131 of 2004)
(a) refusing an application for recognition under section 21 or 22;
(b) refusing an application for renewal of a recognition under section 22 or 27; or
(c) revoking or suspending a recognition under section 23 or 24,
may appeal to the Secretary against the decision within 7 days from the date on which the relevant decision is made.
(2) An appeal under subsection (1) must be commenced by sending a notice of appeal to the Secretary as an electronic record or delivering the notice by hand to the Secretary or leaving the notice at the office of the Secretary during the ordinary business hours of that office.
(3) A certification authority who appeals to the Secretary under this section must also give notice of the appeal to the Government Chief Information Officer as soon as practicable. (Amended L.N. 131 of 2004)
(4) On appeal under subsection (1), the Secretary may confirm, vary or reverse the decision of the Government Chief Information Officer. (Amended L.N. 131 of 2004) 
(5) The Secretary must give the appellant notice of the decision on appeal, together with reasons—
(a) by sending it to the appellant as an electronic record; or
(b) by sending it by post or registered post to the last known address of the appellant.
(6) If in a particular case it is not reasonably practicable to give the notice of the decision on appeal by either of the means specified in subsection (5), the notice is taken to have been given if the Secretary publishes it in the certification authority disclosure record maintained under section 31 for the appellant.

29. How Government Chief Information Officer may give notices under this Part
(1) A notice or other document the Government Chief Information Officer is required to give to a certification authority under this Part is taken to have been given if it is— (Amended L.N. 131 of 2004)
(a) sent to the certification authority as an electronic record; or
(b) sent by post or registered post to the last known address of the certification authority.
(2) If in a particular case it is not reasonably practicable to give a notice or other document under this Part by either of the means specified in subsection (1), the notice or document is taken to have been given if the Government Chief Information Officer publishes it in the relevant certification authority disclosure record. (Amended L.N. 131 of 2004)

### Electronic Transactions Ordinance 《電子交易條例》

30. Government Chief Information Officer to specify particulars and documents by notice in the Gazette
(1) The Government Chief Information Officer must specify by notice published in the Gazette any particulars and documents to be furnished under sections 20(3)(a), 22(2) and (10) and 27(5A). (Amended 14 of 2004 s. 17; L.N. 131 of 2004)
(2) A notice under subsection (1) is not subsidiary legislation.

31. Government Chief Information Officer to maintain certification authority disclosure record
(1) The Government Chief Information Officer must maintain for each recognized certification authority an on-line and publicly accessible record.
(2) The Government Chief Information Officer must publish in the certification authority disclosure record information regarding that certification authority relevant for the purposes of this Ordinance (in addition to the information required to be given in it under other provisions of this Ordinance).
(Amended L.N. 131 of 2004)

### Electronic Transactions Ordinance 《電子交易條例》

32. Government Chief Information Officer to notify revocations, suspensions and non-renewals of recognition, etc.
(1) The Government Chief Information Officer must give notice in the relevant certification authority disclosure record, immediately— (Amended L.N. 131 of 2004)
(a) when the Government Chief Information Officer makes a decision to revoke a recognition under section 23(4);
(b) when a revocation has taken effect under section 23(6) or (7);
(c) when the Government Chief Information Officer makes a decision to suspend a recognition under section 24(2);
(d) when a suspension has taken effect under section 24(4) or (5);
(e) when the recognition of a suspended recognition is reinstated;
(f) when the Government Chief Information Officer receives a notice of appeal under section 28(3); or
(g) on becoming aware that the Secretary has confirmed, varied or reversed the decision of the Government Chief Information Officer to revoke or suspend a recognition.
(2) Where the revocation or suspension of a recognition has taken effect, the Government Chief Information Officer must, as soon as practicable, give notice of the revocation or suspension for at least 3 consecutive days in one English language daily newspaper and one Chinese language daily newspaper in circulation in Hong Kong.
(3) If a recognized certification authority does not apply for renewal before the end of the period during which an application for renewal can be made under section 27(2), the Government Chief Information Officer must, at least 21 days before the expiry of the period of validity of the recognition, give notice— (Amended L.N. 131 of 2004)
(a) for at least 3 consecutive days in one English language daily newspaper and one Chinese language daily newspaper in circulation in Hong Kong; and
(b) in the certification authority disclosure record maintained for the certification authority,
of the date of the expiry of the validity and that the certification authority has not applied for renewal.
(Amended L.N. 131 of 2004)