Spanish e-signature legal framework

1. Spanish e-signature legal framework Manel Medina (medina@ac.upc.es) esCERT-UPC (http://escert.upc.es) cANet (Centro de Aplicaciones InterNet) http://www.canet.upc.es UPC (Universitat Politècnica de Catalunya)

2. Legal Framework Law 14/1999 (17th of September 1999) Regulation (O.M. 21/2/2000) Data Protection law European Information Systems Security Schema

3. CSP Registration: DL • Voluntary accreditation schemas established in Regulation (OM 21/2/2000). • CSP must request their Registration, through the Justice Ministry, prior to the start of their public activity in Spain. • CSP may start their activity immediately after registration request.

4. Voluntary Accreditation Schema E-signature Products CSPs Accreditations Certificates Agreement Exchange of information ADMINISTRATION ENAC Evaluation Reports Accreditation Assessment bodies for CSPs Assessment Bodies for E-signature products

5. Agreement ENAC-Administration • cooperation and exchange of information for: • Assessment Bodies accreditation and post supervision and control. • Establishment of standards to be applied: • 1. European standars • 2. International standars • 3. National standars

6. CSPs Accreditation • Standards published in DOCE / BOE applied by the Assessment Bodies to issue an Evaluation Report • Possibility to recognise several levels of accreditation • Accreditation issued by the Administration • Mutual recognition of Accreditations • Publication in Official Journey and Notification to the Commission

7. E-Signature Products Certification • Standards published in DOCE / BOE applied by the Assessment Bodies to issue an Evaluation Report • Certificate issued by the Administration • Mutual recognition of Certificates • Publication in Official Journey and Notification to the Commission