Mauritius regulatory update: Financial Services Commission (“FSC”) guidelines for digital signatures
On Monday, October 23 2023, the FSC announced the launch of a framework governing the use of digital signatures, detailed in its “Guidelines for Digital Signature” document.
Scope and objectives:
The purpose of the guidelines is to specify the minimum standards which the FSC would expect its applicants and licensees to observe, with respect to the adoption of digital signatures as a means for electronically signing documents, during the conduct of their financial business activities.
One of the objectives of the guidelines is to specify the criteria and standards, which applicants and licensees shall observe, for the FSC to accept the use of digital signatures as a substitute for wet signatures.
The guidelines govern the use of digital signatures for signing documents related to:
1.Application for a certification through the FSC One platform involving the electronic submission of PDF document(s) by an applicant which is digitally signed;
2.Post-licensing requests through the FSC One platform, involving the electronic submission of PDF document(s) by a licensee, which are digitally signed;
3.Inspections run by the FSC whereby licensees are required to provide documentary demonstrations of PDF documents that include digital signatures; and
4.Submissions of other digitally signed PDF documents may be determined by the commission.
Technical aspects:
·The commission accepts the use of digital signatures for the above listed purposes subject to the seven criteria of usage listed in Appendix A and described in more detail in the guidelines.
·The FSC has adopted a vendor-neutral approach to digital signature software, as explained in section six of the guidelines. However, readers will note from section 6.2 that DocuSign’s EU Advanced Signature is being referred to as the benchmark.
·Tutorial videos are available for the following:
oHow to execute a digital signature that complies with the FSC's guidelines for digital signatures;
oHow to verify that a digitally signed document complies with the FSC's guidelines.
·Failure to comply with the requirement of the guidelines shall result in the non-acceptance of the digital signature by the commission, as well as other regulatory actions.
Other implications:
From the above guidelines and further to discussion with the FSC, we conclude that the guidelines are also applicable to:
·Customer due diligence documents are collected as certified true copies by local financial institutions to onboard clients. Following interactions with the FSC and industry association, we understand that the FSC Anti-Money Laundering and Countering the Financing of Terrorism Handbook will also be amended/updated in due course to reflect this option.
·Subscription/application documents. As per the Electronic Transactions Act, an agreement can be signed digitally, and it will not be denied legal effect. Subscription agreements and application forms can hence also be digitally signed, provided the licensee’s constitutive documents allow the same.
Effective date:
It is deemed when the guidelines were issued – Monday, October 23, 2023. For assistance with digital signatures, contact our team.
Issued by Compliance, November 2023
Appendix A – Criteria of use
1.The signatory shall be a natural person.
2.The digitally signed document shall be in the PDF format and the digital certificate used to sign the document shall have been issued by a certificate authority listed on the Adobe Approved Trust List.
3.The digital signature shall meet the PDF Advanced Electronic Signatures Long Term Validation standard.
4.The validity of the digital signature shall be automatically verifiable within Adobe Reader/ Adobe Acrobat through the “signature panel”, “certificate details” and “signature validation” capabilities.
5.The security level of the digital signature must meet or exceed the security level required by the electronic Identification, Authentication, and trust services regulations for advanced electronic signatures.
6.For record-keeping and auditing purposes, a certificate of completion (shall be generated and retained by the digital signature software for every digitally signed document.
7.The signed document shall include an embedded timestamp.
First, please LoginComment After ~