Electronic Signatures Act Article 12
Prior to providing services for issuing certificates, a certification authority shall file the certification practice statement stating its operational processes related to the practice or certification services of the certification authority to the competent authority for approval. The same rule shall also apply in the event that there is any modification in the certification practice statement.The certification authority shall publish the approved certification practice statement on its website to the general public for reference. The same rule shall also apply in the event that there is any modification in the certification practice statement.The competent authority shall announce a list of certification authorities whose certification practice statements have been approved, and the versions and the approval numbers of their certification practice statements.A certification practice statement under Paragraph 1 shall state the following matters, of which specific contents of the following matters shall be announced by the competent authority.(1) significant information that could affect the trustworthiness of a certificate issued by the certification authority or the certification authority's operation;(2) grounds for the certification authority to revoke a certificate without being requested;(3) retention of the information related to the verification of the content of a certificate;(4) methods and procedures implemented to protect the personal data; and(5) other important information mandated by the competent authority.
中文原文 電子簽章法第12條
憑證機構應檢具憑證實務作業基準，載明憑證機構經營或提供認證服務之相關作業程序，送經主管機關許可後，始得提供簽發憑證服務；其憑證實務作業基準變更時，亦同。
憑證機構應將經許可之憑證實務作業基準公布在其機構之網站供公眾查詢；其憑證實務作業基準變更時，亦同。
主管機關應公告憑證實務作業基準經許可之憑證機構名單與其憑證實務作業基準版次及許可文號。
第一項憑證實務作業基準應載明下列事項，其各款具體內容由主管機關公告之：
一、足以影響憑證機構所簽發憑證之可靠性或其業務執行之重要資訊。
二、憑證機構逕行廢止憑證之事由。
三、驗證憑證內容相關資料之留存。
四、保護當事人個人資料之方法及程序。
五、其他重要事項。
憑證機構應將經許可之憑證實務作業基準公布在其機構之網站供公眾查詢；其憑證實務作業基準變更時，亦同。
主管機關應公告憑證實務作業基準經許可之憑證機構名單與其憑證實務作業基準版次及許可文號。
第一項憑證實務作業基準應載明下列事項，其各款具體內容由主管機關公告之：
一、足以影響憑證機構所簽發憑證之可靠性或其業務執行之重要資訊。
二、憑證機構逕行廢止憑證之事由。
三、驗證憑證內容相關資料之留存。
四、保護當事人個人資料之方法及程序。
五、其他重要事項。