Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services...

19
Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market XVI GENERAL ASSEMBLY Brussels, 4th December 2012 Scotland House: Rond-Point Schumann, 6 (8th floor) [email protected]

Transcript of Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services...

Page 1: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic

Transactions in the Internal Market

XVI GENERAL ASSEMBLY Brussels, 4th December 2012

Scotland House: Rond-Point Schumann, 6 (8th floor)

[email protected]

Page 2: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.
Page 3: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

In the Netherlands, as in other European Member States, the civil law notary sends electronic copies of notarial deeds, signed with the use of qualified electronic signatures (QES), to the Registrar.

In some countries (like in Spain), the registrars issue the qualified certificates supporting those QES themselves.

In other countries (e.g.: the Netherlands), the registrars do not issue qualified certificates themselves. These registrars rely on the services by a small number of Trusted Service Providers (TSP`s). 

Question (1)

Page 4: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Notaries and other parties (e.g. bailiffs) do not use a qualified certificate, issued to themselves as a private person, to send a copy of the deed (or seizure).

They use a qualified certificate , issued to them as a notary/bailiff). In other words, there is a specific 'role': 'notary', 'candidate-notary', 'bailiff' added to the certificate.

Question (2)

Page 5: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

 The TSP`s(in the Netherlands), while issuing a QES/ Certificate to a notary, do check whether a notary truly is a notary.

When issuing a qualified certificate to a (candidate) notary, the TSP asks the notary for specific proof.

The TSP wants to know whether the notary truly is a notary, before issuing a qualified certificate with the role: ‘notary’ to the notary concerned. 

Question (3)

Page 6: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Once the qualified certificate is issued, the TSP`s, do not check whether a notary still is a notary or whether the notary is suspended or not.

It is possible that the notary is suspended after the issuance of the certificate and that the certificate is still in use because the TSP does not know about the suspension.

In fact, quite recently I found out that a notary used his qualified certificate, while being suspended for several weeks. Right now I am starting a disciplinary case against the notary.

Question (4)

Page 7: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Traditional Context: Sign and Transmit

10/04/23 7

Page 8: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

At the end of last century, people were asking themselves:

How can we sign and transmit documents in the digital environment?

Page 9: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.
Page 10: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.
Page 11: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Since last decade we have understood that it makes no sense

to sign and to transmit electronic documents

Page 12: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.
Page 13: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Digital evidence

10/04/23 13

Page 14: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

The relevant question is: what happened ?

10/04/23 14

Page 15: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

In the context of digital processes we produce evidence by registering what happens.

Not by exchanging signed documents!

10/04/23 15

Page 16: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Now back to our initial question …

Page 17: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Policy Enforcement Model

UserPolicy

Enforcement( PEP )

Application

Policy Decision(PDP)

Action on

application Decisionrequest

Decisionreply

Actionon

applicationPERMITTED

Policy Information ( PIP )

Informationrequest/

reply

Policy Administration ( PAP )

Policyretrieval

Authentic source

Policy Information ( PIP )

Informationrequest/

reply

Policyrepository

Actionon

applicationDENIED

Manager

Policymanagement

Authentic source

Page 18: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Transition

Transmission of electronicallysigned documents

Page 19: Critical Observations on the Proposed EU Regulation for Electronic Identification and Trust Services for Electronic Transactions in the Internal Market.

Jos DumortierK.U.Leuven / iMinds Sint-Michielsstraat 6B-3000 Leuven(t) +32 (0)16 32 51 49www.icri.be / [email protected]

Jos Dumortiertime.lex - Information & Technology LawCongresstraat 35B-1000 Brussel(t) +32 (0)2 229 19 47www.timelex.eu / [email protected]

10/04/23 Bull Executive Roundtable - Legal Digital Archiving 19