Private key control requires subscribers to safeguard digital signature keys and promptly notify compromise, with liability continuing until notification.

Subscribers must exercise reasonable care to retain control of the private key corresponding to the public key in their Digital Signature Certificate and prevent unauthorised disclosure. A compromised private key must be promptly reported to the Certifying Authority in the prescribed manner. Liability continues until the Certifying Authority is informed of the compromise.

---

---

---