cacert/cacert-policies
9
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Moved Netherland WiP as preparation for EU countries to EuropeanUnion-NL. NL: tag can be deltede as soon as there is consensus on EU generalisation.

Browse source 
Move accepted draft sub-pol for Netherlands under new name style, replacing the EU-Nld WiP proposal. Due to wiP and Draft confusion errors for Holland.


git-svn-id: http://svn.cacert.org/CAcert/Policies@849 14b1bab8-4ef6-0310-b690-991c95c89dfd
This commit is contained in:
Teus Hagen 2008-05-22 14:09:59 +00:00
parent d423f003e4
commit b9e26f10e9
2 changed files with 283 additions and 206 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

214
OrganisationAssurancePolicy/OrganisationAssuranceSubPolicyEuropeanUnion-NL.html Normal file
View file

@ -0,0 +1,214 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>
CACert Organisation Assurance Program sub-policy for the Netherlands
</title>
</head>
<body>
<h1>
CAcert Organisation Assurance Program sub-policy for the Netherlands
</h1>
<p>
<a href="../PolicyOnPolicy.html"><img src="../Images/cacert-wip.png" alt="CAcert Policy Status" height="31" width="88" style="border-style: none;" /></a><br />
Author: Teus Hagen<br />
Creation date: 2008-05-01<br />
Status: WiP 2008-05-02<br />
Next status: DRAFT 2008<br />
<!-- $Id: OrganisationAssuranceSubPolicyHolland.html 772 2008-05-01 13:46:20Z teus $ -->
</p>
<h2>
0. Preliminaries
</h2>
<p>
This CAcert sub-policy extends the Organisation Assurance Policy ("OAP") by specifying how Organisation Assurance is to be conducted by the assigned Organisation Assurer ("OA") under the supervision of the Organisation Assurance Officer ("OAO") for entities within the defined scope.
</p>
<!-- handbook OA Assurer:
Holland: effective from 1st of July 2008 is new law about trade office registration (Nieuw Handelsregister, NHR) with will be obligationary end of 2009: all trade entities should be registered with national registrar. Handy document (dutch) http://www.kvk.nl/Images/Catalogus%2005072007_tcm16-152449.pdf .
-->
<h2>
1. Scope
</h2>
<p>
This sub-policy is applicable to:<br />
</p>
<ol style="list-style-type: lower-alpha;">
<li>Legal entities in the Netherlands:<br />
<ol style="list-style-type: lower-roman;">
<li>Private Owned Companies (BV)
</li>
<li>Limited Companies (NV)
</li>
<li>Associations
</li>
<!-- <li>Cooperations and mutual safeguarding societies
</li>
<li>Foundations
</li>
-->
<li>Sole Trader/Professional
</li>
<!-- <li>Trade Partnership (VOF)
</li>
<li>Commanditair Partnership (CV)
</li>
<li>Free Profession Partnership
</li>
<li>Churches/Religious Groups
</li>
-->
</ol>
</li>
</ol>
<!-- handbook OA Assurer:
Ireland: Sole Traders, Partnerships, Companies, Trusts, Government Bodies &amp; Intrumentalities, Clubs &amp; Associations, ?Foundations?.
Holland: Private Owned Companies (BV), Limited Companies (NV), Associations, Cooperations and mutual safeguading societies, Foundations. Sole trade/professional, trade partnership (VOF), commanditair partnership (CV), free profession partnership, churches/religious group.
<li>European legal entities,</li>
handbook OA Assurer:
Holland: European Economic Collaboration (EESV), European Limited Company (SE), European Cooperation (SCE).
<li>foreign legal entities.</li>
handbook OA Assurer:
Holland: e.g. Private Limited Company (Ltd) under subjected to foreign jurisdiction but active in mainly in EU/Holland. The entity has regsitration duties in the EU (fin. year report, extract foreign TRO, accountant report.
-->
<h2>
2. Requirements
</h2>
<p>
This section describes any scope specific requirements that are not otherwise defined in the OAP.
</p>
<h3>
2.1 Organisation
</h3>
<ol style="list-style-type: lower-alpha;">
<!-- <li>For Applicants with individual liability operating under their own name business name registration is OPTIONAL.
</li>
-->
<li>Applicants MUST be a valid legal entity but MAY have an arbitrary number of registered trading names.
</li>
</ol>
<h3>
2.2 Records
</h3>
<ol style="list-style-type: lower-alpha;">
<li>Digital Signatures MAY be accepted under implementation of EU European Directive 99/93/EG and 2000/31/EC in the Wet Elektronische Handtekeningen (WET) of 21st of May 2003.
<!--
Ireland: Electronic Commerce Act of 2000
Norway: ???
Holland: Wet Elektronische Handtekeningen (WET) of 21st of May 2003
<br>Comment:
<i>
The legal requirement is that there is sufficient evidense and trust. This is the case for a digital certificate that can be checked.
Reminder: CA is seen by law as TTP, which is subjected to be registrated with OPTA (governmental control body).
-->
</i>
<li>Historic documents MAY be accepted where it can be proven that material changes have not been made (eg via absence of subsequent submissions in official document listings).
</li>
</ol>
<h3>
2.3 Application Form
</h3>
<ol style="list-style-type: lower-alpha;">
<li>The licensing authority MUST be specified as
<!--
Ireland: Companies Registration Office, Ireland
Norway: Brønnøysundregistrene, Norway
Holland: Kamer van Koophandel, the Netherlands
-->
'Kamer van Koophandel, the Netherlands'
where applicable
<!--
Ireland: (OPTIONAL for sole traders, sole professionals and partnerships operating under their own name(s))
-->
.
</li>
<li>&lt;identifier?&gt; MUST be specified where applicable
<!--
Ireland: (OPTIONAL for sole traders and partnerships operating under their own name(s)) -->
.
</li>
</ol>
<h2>
3. Registration
</h2>
<h3>
3.1 Registries
</h3>
<ol style="list-style-type: lower-alpha;">
<!--
Ireland: <li>Companies Registration Office ("CRO") [<a title="Companies Registration Office" href="http://www.cro.ie/">http://www.cro.ie/</a>] [<a title="Company Search" href="http://www.cro.ie/search/">http://www.cro.ie/search/</a>]
Norway: Brønnøysundregistrene [<a title="Brønnøysundregistrene" href="http://www.brreg.no/">http://www.brreg.no</a>] Nøkkelopplysninger fra Enhetsregisteret</i> [<a title="Nøkkelopplysninger fra Enhetsregisteret" href="http://w2.brreg.no/enhet/sok/">http://w2.brreg.no/enhet/sok/</a>] search???
Holland: Kamer van Koophandel ("KvK") [<a title="Kamer van Koophyandel" href="http://www.kvk.nl/">http://www.kvk.nl</a> [<a title="Company Search" href="http://www.kvk.nl/handelsregister/zoekenframeset.asp?url=https://server.db.kvk.nl/wwwsrvu/html/direct.htm">
-->
<li>Kamer van Koophandel ("KvK") [<a title="Kamer van Koophandel" href="http://www.kvk.nl/">http://www.kvk.nl</a>]<br />
<ol style="list-style-type: lower-roman;">
<li>Company Search
[<a title="Company Search" href="https://server.db.kvk.nl/wwwsrvu/html/direct.htm">https://server.db.kvk.nl/wwwsrvu/html/direct.htm</a>].
</li>
</ol>
</li>
<!--
Ireland: <li>IE Domain Registry Ltd [<a title="IE Domain Registry Ltd" href="http://www.domainregistry.ie/">http://www.domainregistry.ie/</a>]
Norway: ???
Holland: Stichting Internet Domain Registratie ("SIDN") [<a title="SIDN" href="http://www.sidn.nl/">http://www.sidn.nl</a>]
-->
<li>Stichting Internet Domain Registratie ("SIDN") [<a title="SIDN" href="http://www.sidn.nl/">http://www.sidn.nl</a>]
<br />
<ol style="list-style-type: lower-roman;">
<!--
Ireland: .ie ccTLD WHOIS [<a title=".ie WHOIS" href="http://www.domainregistry.ie/cgi-bin/whois.cgi">http://www.domainregistry.ie/cgi-bin/whois.cgi</a>]
Norway: DNS whois???
Holland: .nl WHOIS [<a title=".nl WHOIS" href="http://http://www.sidn.nl/ace.php/c,727,4015,,,,Zoeken_naar_domeinnaam-gegevens.html">search for domain information</a>]
-->
<li>.nl WHOIS [<a title=".nl WHOIS" href="http://www.sidn.nl/ace.php/c,727,43,,,,Is_de_naam_nog_vrij_.html">http://www.sidn.nl/ace.php/c,727,43,,,,Is_de_naam_nog_vrij_.html</a>]
.
</li>
</ol>
</li>
</ol>
<h3>
3.2 Identifiers
</h3>
<ol style="list-style-type: lower-alpha;">
<li>???
</li>
</ol>
<h3>
3.3 Documents
</h3>
<ol style="list-style-type: lower-alpha;">
<li>Extract
</li>
</ol>
<h2>
4. Processes
</h2>
<h3>
4.1 Assurance
</h3>
<ol style="list-style-type: lower-alpha;">
<li>Each person listed in an application MUST be individually assured and referenced by a confirmed email.
</li>
<li>All entities MUST be verified by a KvK search (all Dutch organisations including ministries and public offices, religious societies, liberal professions, partnerships, one-man business, association of house-owners, etc. must be registered from 31st of December 2009).
</li>
<li>Partnership applicants MUST additionally be verified via an Extract as a current individual member and SHOULD be a managing partner.
</li>
<li>Company applications MUST be made by an individual who is duly authorised to sign on behalf of the company:
<ol style="list-style-type: lower-roman;">
<li>Officeholder applicants (directors or preferably secretary) MUST be verified in an "Extract" (obtained from the KvK by the OA where fees are reclaimable from the applicant).
</li>
<li>Any other applicant MUST prove that they are duly authorised to sign on behalf of the entity (for example via delegation and/or under company rules) to the satisfaction of the OA, for approval by the OAO.
</li>
</ol>
</li>
</ol>
<p>
<a href="http://validator.w3.org/check?uri=referer"><img src="../Images/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
</p>
</body>
</html>

275
OrganisationAssurancePolicy/OrganisationAssuranceSubPolicyNetherlands.html
View file

@ -1,214 +1,77 @@
<?xml version="1.0" encoding="utf-8"?> <?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml"> <html xmlns="http://www.w3.org/1999/xhtml">
<head> <head>
<title> <title>
CACert Organisation Assurance Program sub-policy for the Netherlands CACert Organisation Assurance Program sub-policy for Holland
</title> </title>
</head> </head>
<body> <body>
<h1> <h1> <font color="blue">Organisation Assurance - sub-policy for Dutch organisations</font></h1>
CAcert Organisation Assurance Program sub-policy for the Netherlands <p>
</h1> <a href="../PolicyOnPolicy.html"><img src="../cacert-draft.png" alt="CAcert Work In Progress" height="31" width="88" style="border-style: none;" /></a><br />
<p> Author: Teus Hagen<br />
<a href="../PolicyOnPolicy.html"><img src="../Images/cacert-wip.png" alt="CAcert Policy Status" height="31" width="88" style="border-style: none;" /></a><br /> Creation date: WIP 2007-10-26 V0.1<br />
Author: Teus Hagen<br /> Status: <font="green">DRAFT</font> 2007-12-07<br />
Creation date: 2008-05-01<br /> Next status: POLICY 2008<br />
Status: WiP 2008-05-02<br /> <!-- $Id: OrganisationAssurance-SubPolHolland.html 745 2008-04-04 15:56:20Z teus $ -->
Next status: DRAFT 2008<br /> </p>
<!-- $Id: OrganisationAssuranceSubPolicyHolland.html 772 2008-05-01 13:46:20Z teus $ --> <h2>0. Preliminaries</h2>
</p> This sub-policy describes how Organisation Assurers ("OAs") conduct assurances on Dutch organisations.
<h2> It fits within the overall web-of-trust or assurance process and the Organisation Assurance Policy (OAP) of CAcert.
0. Preliminaries <br><br><br>
</h2>
<p>
This CAcert sub-policy extends the Organisation Assurance Policy ("OAP") by specifying how Organisation Assurance is to be conducted by the assigned Organisation Assurer ("OA") under the supervision of the Organisation Assurance Officer ("OAO") for entities within the defined scope.
</p>
<!-- handbook OA Assurer:
Holland: effective from 1st of July 2008 is new law about trade office registration (Nieuw Handelsregister, NHR) with will be obligationary end of 2009: all trade entities should be registered with national registrar. Handy document (dutch) http://www.kvk.nl/Images/Catalogus%2005072007_tcm16-152449.pdf .
-->
<h2>
1. Scope
</h2>
<p>
This sub-policy is applicable to:<br />
</p>
<ol style="list-style-type: lower-alpha;">
<li>Legal entities in the Netherlands:<br />
<ol style="list-style-type: lower-roman;">
<li>Private Owned Companies (BV)
</li>
<li>Limited Companies (NV)
</li>
<li>Associations
</li>
<!-- <li>Cooperations and mutual safeguarding societies
</li>
<li>Foundations
</li>
-->
<li>Sole Trader/Professional
</li>
<!-- <li>Trade Partnership (VOF)
</li>
<li>Commanditair Partnership (CV)
</li>
<li>Free Profession Partnership
</li>
<li>Churches/Religious Groups
</li>
-->
</ol>
</li>
</ol>
<!-- handbook OA Assurer:
Ireland: Sole Traders, Partnerships, Companies, Trusts, Government Bodies &amp; Intrumentalities, Clubs &amp; Associations, ?Foundations?.
Holland: Private Owned Companies (BV), Limited Companies (NV), Associations, Cooperations and mutual safeguading societies, Foundations. Sole trade/professional, trade partnership (VOF), commanditair partnership (CV), free profession partnership, churches/religious group.
<li>European legal entities,</li> <h2>1. Purpose</h2>
handbook OA Assurer: This is a subsidiary policy to the OAP.
Holland: European Economic Collaboration (EESV), European Limited Company (SE), European Cooperation (SCE). <br><br>
a. This sub-policy is applicable for the assurance of organisations in the Netherlands only.<br>
b. This sub-policy is an implementation of the OAP.<br>
c. In the below, where the Assurance Officer (AO) is referred to, this includes his local delegate.
<br><br><br>
<li>foreign legal entities.</li> <h2>2. Organisation Assurers</h2>
handbook OA Assurer:
Holland: e.g. Private Limited Company (Ltd) under subjected to foreign jurisdiction but active in mainly in EU/Holland. The entity has regsitration duties in the EU (fin. year report, extract foreign TRO, accountant report.
-->
<h2>
2. Requirements
</h2>
<p>
This section describes any scope specific requirements that are not otherwise defined in the OAP.
</p>
<h3>
2.1 Organisation
</h3>
<ol style="list-style-type: lower-alpha;">
<!-- <li>For Applicants with individual liability operating under their own name business name registration is OPTIONAL.
</li>
-->
<li>Applicants MUST be a valid legal entity but MAY have an arbitrary number of registered trading names.
</li>
</ol>
<h3>
2.2 Records
</h3>
<ol style="list-style-type: lower-alpha;">
<li>Digital Signatures MAY be accepted under implementation of EU European Directive 99/93/EG and 2000/31/EC in the Wet Elektronische Handtekeningen (WET) of 21st of May 2003.
<!--
Ireland: Electronic Commerce Act of 2000
Norway: ???
Holland: Wet Elektronische Handtekeningen (WET) of 21st of May 2003
<br>Comment: <h2>2.1 Requirements for the Organisation Assurer</h2>
<i> In addition to the requirements defined in the OAP, an OA must meet the following requirements for assuring Dutch organisations:<br>
The legal requirement is that there is sufficient evidense and trust. This is the case for a digital certificate that can be checked. a. Knowledge on common legal forms of organisations in the Netherlands.<br>
Reminder: CA is seen by law as TTP, which is subjected to be registrated with OPTA (governmental control body). b. Must pass an additional test on local knowledge even if he is already an OA.<br>
--> c. Should help the AO to define local requirements.
</i> <br><br><br>
<li>Historic documents MAY be accepted where it can be proven that material changes have not been made (eg via absence of subsequent submissions in official document listings).
</li>
</ol>
<h3>
2.3 Application Form
</h3>
<ol style="list-style-type: lower-alpha;">
<li>The licensing authority MUST be specified as
<!--
Ireland: Companies Registration Office, Ireland
Norway: Brønnøysundregistrene, Norway
Holland: Kamer van Koophandel, the Netherlands
-->
'Kamer van Koophandel, the Netherlands'
where applicable
<!--
Ireland: (OPTIONAL for sole traders, sole professionals and partnerships operating under their own name(s))
-->
.
</li>
<li>&lt;identifier?&gt; MUST be specified where applicable
<!--
Ireland: (OPTIONAL for sole traders and partnerships operating under their own name(s)) -->
.
</li>
</ol>
<h2>
3. Registration
</h2>
<h3>
3.1 Registries
</h3>
<ol style="list-style-type: lower-alpha;">
<!--
Ireland: <li>Companies Registration Office ("CRO") [<a title="Companies Registration Office" href="http://www.cro.ie/">http://www.cro.ie/</a>] [<a title="Company Search" href="http://www.cro.ie/search/">http://www.cro.ie/search/</a>]
Norway: Brønnøysundregistrene [<a title="Brønnøysundregistrene" href="http://www.brreg.no/">http://www.brreg.no</a>] Nøkkelopplysninger fra Enhetsregisteret</i> [<a title="Nøkkelopplysninger fra Enhetsregisteret" href="http://w2.brreg.no/enhet/sok/">http://w2.brreg.no/enhet/sok/</a>] search???
Holland: Kamer van Koophandel ("KvK") [<a title="Kamer van Koophyandel" href="http://www.kvk.nl/">http://www.kvk.nl</a> [<a title="Company Search" href="http://www.kvk.nl/handelsregister/zoekenframeset.asp?url=https://server.db.kvk.nl/wwwsrvu/html/direct.htm">
-->
<li>Kamer van Koophandel ("KvK") [<a title="Kamer van Koophandel" href="http://www.kvk.nl/">http://www.kvk.nl</a>]<br />
<ol style="list-style-type: lower-roman;">
<li>Company Search
[<a title="Company Search" href="https://server.db.kvk.nl/wwwsrvu/html/direct.htm">https://server.db.kvk.nl/wwwsrvu/html/direct.htm</a>].
</li>
</ol>
</li>
<!-- <h2>3. Process</h2>
Ireland: <li>IE Domain Registry Ltd [<a title="IE Domain Registry Ltd" href="http://www.domainregistry.ie/">http://www.domainregistry.ie/</a>]
Norway: ??? <h2>3.1 Organisations</h2>
Holland: Stichting Internet Domain Registratie ("SIDN") [<a title="SIDN" href="http://www.sidn.nl/">http://www.sidn.nl</a>] Acceptable organisations under this sub-policy must be:
--> <br><br>
<li>Stichting Internet Domain Registratie ("SIDN") [<a title="SIDN" href="http://www.sidn.nl/">http://www.sidn.nl</a>] a. Organisations created under the rules of the jurisdiction in the Netherlands.<br>
<br /> b. Organisations must not be revoked or pending by a competent authority with direct oversight over the organisation.
<ol style="list-style-type: lower-roman;"> <br><br>
<!--
Ireland: .ie ccTLD WHOIS [<a title=".ie WHOIS" href="http://www.domainregistry.ie/cgi-bin/whois.cgi">http://www.domainregistry.ie/cgi-bin/whois.cgi</a>] <h2>3.2 Documents</h2>
Norway: DNS whois??? The organisation has to provide documents to prove the essential standard of Organisation Assurance as defined in the policy:<br>
Holland: .nl WHOIS [<a title=".nl WHOIS" href="http://http://www.sidn.nl/ace.php/c,727,4015,,,,Zoeken_naar_domeinnaam-gegevens.html">search for domain information</a>] a. The primary mechanism to prove existence is to get an official extract from the official Trade Office (Kamer van Koophandel) Register (Extract), either via an online interface
--> or via physical means (the organisation is asked to carry these direct costs)<br>
<li>.nl WHOIS [<a title=".nl WHOIS" href="http://www.sidn.nl/ace.php/c,727,43,,,,Is_de_naam_nog_vrij_.html">http://www.sidn.nl/ace.php/c,727,43,,,,Is_de_naam_nog_vrij_.html</a>] b. Where not available, an official document will be required from the company, subject to such checks as defined by the AO.<br>
. c. If copies of official Extracts from the official register are provided, they must be officially certified<br>
</li> d. The Extract should not be older than 4 weeks. The Extract should state registrated official administrative details of the organisation.<br>
</ol> e. The AO maintains a list of which specific documents and tests can be acceptable for the certain types of organisations. At least the following information is required: official name, address, administrative contact(s) and email addresses, domain name(s), legal representative of the organisation and restrictions.<br>
</li> f. The OA can ask for additional documents if needed to validate required information for the assurance action.
</ol> <br>
<h3> Note: from 31st of December 2009 all Dutch organisations (also: ministery and public offices, religious sociaties, liberal professions, partnerships, one-man business, association of house-owners, etc.) will need to be registered with the Trade Office.<br><br>
3.2 Identifiers
</h3> <h2>3.3 COAP</h2>
<ol style="list-style-type: lower-alpha;"> </P>
<li>??? In addition to the checks defined in the policy, the COAP form for Dutch organisations requires:<br>
</li> a. The OA must keep all provided documentation and will maintain digital readability if documents are provided in digital format for 7 years.<br>
</ol> b. Signatures from organisation officials must meet the following requirements<br>
<h3> &nbsp&nbsp&nbsp i.&nbsp&nbsp as legally specified for the type of organisation<br>
3.3 Documents &nbsp&nbsp&nbsp ii.&nbsp as specified in the official documents (f.e. the extract from the Register)<br>
</h3> &nbsp&nbsp&nbsp iii. as delegated within the organisation (proof of delegation needed)
<ol style="list-style-type: lower-alpha;"> </p>
<li>Extract <p>
</li> <a href="http://validator.w3.org/check?uri=referer"><img src="http://www.w3.org/Icons/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
</ol> </p>
<h2> </body>
4. Processes
</h2>
<h3>
4.1 Assurance
</h3>
<ol style="list-style-type: lower-alpha;">
<li>Each person listed in an application MUST be individually assured and referenced by a confirmed email.
</li>
<li>All entities MUST be verified by a KvK search (all Dutch organisations including ministries and public offices, religious societies, liberal professions, partnerships, one-man business, association of house-owners, etc. must be registered from 31st of December 2009).
</li>
<li>Partnership applicants MUST additionally be verified via an Extract as a current individual member and SHOULD be a managing partner.
</li>
<li>Company applications MUST be made by an individual who is duly authorised to sign on behalf of the company:
<ol style="list-style-type: lower-roman;">
<li>Officeholder applicants (directors or preferably secretary) MUST be verified in an "Extract" (obtained from the KvK by the OA where fees are reclaimable from the applicant).
</li>
<li>Any other applicant MUST prove that they are duly authorised to sign on behalf of the entity (for example via delegation and/or under company rules) to the satisfaction of the OA, for approval by the OAO.
</li>
</ol>
</li>
</ol>
<p>
<a href="http://validator.w3.org/check?uri=referer"><img src="../Images/valid-xhtml11-blue" alt="Valid XHTML 1.1" height="31" width="88" style="border-style: none;" /></a>
</p>
</body>
</html> </html>