Because of this, major countries that widely use electronic signatures generally put forward specific provisions and requirements on the security requirements and legal effect of electronic signatures through laws, regulations and standards, and generally require the use of third-party security technologies such as digital identification and electronic signatures to solve information security risks and legal liability risks.
Legal basis: People's Republic of China (PRC) Electronic Signature Law.
Article 27 If an electronic signer knows that the electronic signature production data has been or may have been compromised, fails to notify the relevant parties in time, stops using the electronic signature production data, fails to provide true, complete and accurate information to the electronic certification service provider, or has other faults, thus causing losses to the relying party of the electronic signature and the electronic certification service provider, he shall be liable for compensation.
Article 28 If an electronic signer or electronic signature dependent suffers losses from engaging in civil activities based on the electronic signature authentication service provided by an electronic authentication service provider, and the electronic authentication service provider cannot prove his innocence, he shall be liable for compensation.
Twenty-ninth without permission to provide electronic certification services, the competent department of information industry in the State Council shall be ordered to stop the illegal act; Illegal income, confiscate the illegal income; If the illegal income is more than 300,000 yuan, a fine of more than one time and less than three times the illegal income shall be imposed; If there is no illegal income or the illegal income is less than 300,000 yuan, a fine of100,000 yuan but not more than 300,000 yuan shall be imposed.
Article 30 If an electronic certification service provider suspends or terminates the electronic certification service and fails to report to the competent information industry department of the State Council 60 days before the suspension or termination of the service, the competent information industry department of the State Council shall impose a fine of 1 10,000 yuan but not more than 50,000 yuan on the directly responsible person in charge.
Thirty-first electronic certification service providers do not abide by the certification business rules, fail to properly preserve certification related information, or have other illegal acts, and the competent information industry department of the State Council shall order them to make corrections within a time limit; If no correction is made within the time limit, the electronic certification license certificate shall be revoked, and the directly responsible person in charge and other directly responsible personnel shall not engage in electronic certification services within ten years. If the electronic certification license certificate is revoked, it shall be announced and notified to the administrative department for industry and commerce.
Article 32 Whoever forges, fraudulently uses or embezzles another person's electronic signature, which constitutes a crime, shall be investigated for criminal responsibility according to law; If losses are caused to others, they shall bear civil liability according to law.
Article 33 If the staff of the department responsible for the supervision and administration of electronic certification services according to this Law fail to perform their duties of administrative licensing and supervision and administration according to law, they shall be given administrative sanctions according to law; If a crime is constituted, criminal responsibility shall be investigated according to law.