4- where a purpose of the legal requirement for a signature is to provide
assurance as to the integrity of the information to which it relates, any
alteration made to that information after the time of signing is detectable.
The Supreme Council shall issue decisions to determine which electronic signature
processes and technologies satisfy the provisions of the preceding provisions.
Article (29)
Where signature creation information is created by the signatory, each signatory shall
comply with the following:
1- exercise reasonable care to avoid unauthorized use of its signature creation
information.
2- without undue delay, utilize means made available by the certification
service provider pursuant to Articles (36) and (37) of this Law to notify
any person that may reasonably be expected by the signatory to rely on
the electronic signature or to take the necessary measures in support of
the electronic signature if the signature creation information has been
compromised, or circumstances give rise to a substantial risk that the
signature creation information may have been compromised.
3- where a certification certificate is used to support the electronic signature,
exercise reasonable care to ensure the accuracy and completeness of all
material representations made by the signatory that are relevant to the
certification certificate throughout its life cycle or that are to be included
in the certification certificate.
Article (30)
A signatory shall bear the legal consequences of its failure to satisfy the
above-mentioned requirements stipulated in the preceding Article.
Article (31)
A relying party shall bear the legal consequences of its failure to take reasonable steps to
ensure that the requirements of the electronic signature stated in Article (28) of the Law
have been met, or where an electronic signature is supported by a certification certificate,
to verify the validity, origin, suspension or revocation of the certificate, or any limitation
with respect to the certificate.
Article (32)
An electronic signature is legally effective, regardless of the geographic location where
the electronic signature is created or used, or the geographic location of the place of
business of the signatory.
13