The appropriate Government may direct every service provider and authorised agent to keep an updated and accurate account of the transactions, receipts, vouchers and specify the formats for maintaining accounts of transactions and receipt of payment in respect of the electronic services delivered and the said records shall be produced for inspection and audit before an agency or person nominated by the appropriate Government.
Rule 6: Procedure for making changes in a repository of electronically signed electronic records
(1) The appropriate Government may either suo moto or after receiving an application from an interested party, make or order to make an appropriate change in a repository of electronically signed electronic records along with recording the reasons for making such a change.
(2) Any change effected to any record in a repository of electronically signed electronic records and any addition or deletion of a record from such repository shall be electronically signed by the person who is authorised to make such changes along with the time stamps of original creation and modification times.
(3) The appropriate Government may determine the manner of electronically signing the event of deletion of a record from the repository of electronically signed electronic records.
(4) The appropriate Government may also determine the manner of provisioning secure access to the repository of digitally signed electronic records.
(5) The appropriate Government may also determine the requirements for maintaining audit trails of all changes made to repository of digitally signed electronic records.
Rule 5: Creation of repository of electronically signed electronic records by Government Authorities
(1) All authorities that issue any license, permit, certificate, sanction or approval electronically, shall create, archive and maintain a repository of electronically signed electronic records of such licenses, permits, certificates, sanctions or approvals, as the case may be, online with due timestamps of creation of these individual electronic records.
(2) The appropriate Government may specify the manner of creating, establishing, archiving and maintaining the repository of electronically signed electronic records referred to in sub-rule (1).
(3) The authorities may electronically sign the electronic records of such licenses, permits, certificates, sanctions or approvals for each record or as a whole for a specific duration and shall be responsible in administering them online.
(4) The appropriate Government may specify the security procedures in respect of the electronic data, information, applications, repository of digitally signed electronic records and information technology assets under their respective control and that security procedures shall be followed by the Head of the Department and the signing authorities.
Explanation.- The expression “security procedures” referred to in sub-rule (4) shall include requirements for the storage and management of cryptographic keys, restrictions for downloading the certificates on to browsers, and of complying with the requirements of certifying authorities.
Rule 4: Notification of Electronic Service Delivery
(1) The appropriate Government may notify the services that shall be delivered electronically from time to time.
(2) The appropriate Government may identify and notify, from time to time, the list or signing authorities in respect of different classes of licenses, permits, certificates, sanctions, payment receipt approvals and local limits of their respective jurisdictions.
(3) The notification shall specify the nature of certificate, the names of the signing authorities, as approved by the appropriate Government, the period of effectiveness of the authority and the extent of their jurisdiction.
(4) The appropriate Government may notify changes to the list of signing authorities from time to time, taking into consideration the terms and conditions of the services of employees holding positions of signing authorities.
Rule 3: System of Electronic Service Delivery
(1) The appropriate Government may on its own or through an agency authorised by it, deliver public services through electronically- enabled kiosks or any other electronic service delivery mechanism.
(2) The appropriate Government or its agencies may specify the form and the manner of Electronic Service Delivery.
(3) The appropriate Government may determine the manner of encrypting sensitive electronic records requiring confidentiality, white they are electronically signed.
(4) The appropriate Government shall notify the service providers and their agents authorised for Electronic Service Delivery.
(5) The appropriate Government may allow receipt of payments made by adopting the Electronic Service Delivery System to be a deemed receipt of payment effected in compliance with the financial code and treasury code of such Government.
(6) The appropriate Government may authorise service providers or their authorised agents to collect, retain and appropriate such service charges as may be specified by the appropriate Government for the purpose of providing such services from the person availing such services:
Provided that the apportioned service charges shall be clearly indicated on the receipt to be given to the person availing the services.
(7) The appropriate Government shall by notification specify the scale of service charges which may be charged and collected by the service providers and their authorised agents for various kinds of services.
(8) The appropriate Government may also determine the norms on service levels to be complied with by the Service Provider and the authorised agents.