A licensed certification authority shall deposit the records required by part 8275.0065 in escrow once each calendar year with the organization conducting the audit required by this chapter. The escrowed records must also include a copy of the software needed to read the records or the records must be stored in a retrievable, readable, accurate, complete, and accessible manner. Escrowed records must be kept permanently by the auditor. A licensed certification authority that discontinues providing certification authority services without making other arrangements for preservation of the certification authority's records shall:
revoke all valid certificates and return all records concerning them to the appropriate subscriber; and
submit the escrowed records held by the auditor to another licensed certification authority or authorities designated by the secretary or to another certification authority or authorities not licensed, but recognized in this state, and designated by the secretary.
If the auditor goes out of business, it must transfer all of the escrowed records to an auditing firm designated by the secretary.
23 SR 1352
October 27, 2003