[CZ01] CZ_Data Boxes. CZ_Data Boxes

Similar documents
Domain model. ID Initiative Short description. Owner Contact Type Sub-Type Context Base Registry type Operating model

Digital Signatures Act 1

Data subject ( Customer or Data subject ): individual to whom personal data relates.

BOARD OF THE BANK OF LITHUANIA. RESOLUTION No 46 ON THE REGULATIONS ON KEEPING THE PUBLIC REGISTER OF PAYMENT INSTITUTIONS. of 24 December 2009

Mailbox Rental Terms and Conditions

Information memorandum. SUNČANI HVAR d.d.

Section I. GENERAL PROVISIONS

PRINCIPLES OF PROTECTION OF PERSONAL DATA (GDPR) WITH EFFICIENCY FROM

Part of the service for dedicated servers includes 24/7 technical support and the guarantee of HW repair within two hours of the customer s request.

General Terms and Conditions

LAW OF THE REPUBLIC OF KAZAKSTAN «ON CERTIFICATION»

RULEBOOK ON NUMBER PORTABILITY FOR SERVICES PROVIDED VIA PUBLIC MOBILE COMMUNICATIONS NETWORKS

PRIVACY POLICY. We are committed to protect your personal data, while you visit our Website (hereinafter called the Website ).

Electronic signature framework

What options NETIM offers, including those related to gaining of access to and updating of information.

TURKISH STANDARDS INSTITUTION

SIX Trade Repository AG

PRIVACY POLICY OF.LT DOMAIN

MÁV-START e-ticket (online ticket purchase) Privacy Policy

E-invoice. Service Description

Terms of Use and Protection of Personal Information

Registration to Tender arena

Act CXII of 2011 on the right to information self-determination and freedom of information. Act ;

WE ARE COMMITTED TO PROTECTING YOUR PERSONAL DATA

TERMS OF USE ONLINE STORE ZMORPH3D.COM

ORDINANCE ON NUMBER PORTABILITY. Unofficial consolidated text 1

Terms and Conditions for Electronic Banking Services (Internet Banking and ELBA business)

VTJ INTERFACE. Service description

* Free calls from landlines and public phones. Some standard network charge applies.

Terms and Conditions of Mobile Phone Service (Post-Paid) Between Operator and Subscriber

Wesley House data protection statement and privacy notice (short-course delegates)

ECA Trusted Agent Handbook

GOVERNMENT OF THE RUSSIAN FEDERATION RESOLUTION. No. 128 dated 8 February, 2018 MOSCOW

General Terms & Conditions (GTC)

Terms and Conditions of Purchase

Data Protection systems in the Republic of Azerbaijan

General Terms and Conditions

HF Markets SA (Pty) Ltd Protection of Personal Information Policy

BUSINESS NAME REGISTRATION INCLUDING A GUIDE TO ONLINE FILING INFORMATION LEAFLET NO. 14 / SEPTEMBER Information Leaflet No.

THE RULES FOR OBLIGATORY CERTIFICATION OF BUILDING MATERIALS, PRODUCTS AND CONSTRUCTIONS 1. FIELD OF APPLICATION

Privacy Shield Policy

3. What is the name of the organisation that runs your business registry?

NOTICE OF PRIVACY PRACTICES

This Policy has been prepared with due regard to the General Data Protection Regulation (EU Regulation 2016/679) ( GDPR ).

DATA PROCESSING TERMS

"PPS" is Private Practice Software as developed and produced by Rushcliff Ltd.

Privacy Policy Hafliger Films SpA

Regulations for Compulsory Product Certification

We reserve the right to cancel your participation in this program at any time.

Be-novative Privacy Policy

Subject: Kier Group plc Data Protection Policy

INFORMATION MEMORANDUM ON DATA PROCESSING

ING Public Key Infrastructure Technical Certificate Policy

Recognition as an Account Agent (User Registration) in the Compliance Instrument Tracking System Service (CITSS)

Clauses contain important provisions about our liability to you in relation to Royal Mail's Online Postage. Please read them carefully.

Domain Names & Hosting

1. Anti-Piracy Services. 2. Brand Protection (SAAS) 3. Brand Protection Services. Data Protection and Permitted Purpose. Services

Completion instructions 1 (7) Application for message exchange with Finnish Customs

Notification Form AP50 Minor Update to Risk Management Programme Details

Identity of the controller: CHARVAT CTS a.s., ID No.: , with the registered office at Okrinek 53, Podebrady, Czech Republic, Postcode

VFS GLOBAL PVT LTD PRIVACY DISCLAIMER

TaxiMe Privacy Policy for Passengers

TITLE 595. DEPARTMENT OF PUBLIC SAFETY CHAPTER 10. CLASS D DRIVER LICENSES AND IDENTIFICATION CARDS AND MOTOR LICENSE AGENT PROCEDURES

SURGICAL REVIEW CORPORATION Privacy Policy

PRIVACY POLICY PRIVACY POLICY

Testing and Certification Regulations For an SA8000 Applicant Status Certification

Description of the TÜV NORD CERT certification procedure GMP+ FC (Feed Certification scheme) of GMP+ International B.V. (NL)

1 About GfK and the Survey What are personal data? Use of personal data How we share personal data... 3

Chapter 1. Purpose, definitions and application

Business Terms and Conditions for use of the PIDLítačka Mobile Application valid from

M T BUCKLEY & Co Chartered Accountants

Privacy Notice - Stora Enso s Supplier and Stakeholder Register. 1 Purpose

IEC System of Conformity Assessment Schemes for Electrotechnical Equipment and Components (IECEE System)

Telecommunications Authority of Trinidad and Tobago

Loyalty program CHARMING REWARDS

BKK CENTRE FOR BUDAPEST TRANSPORT PRIVATE LIMITED COMPANY. PRIVACY POLICY on the BKK Online Shop sales

TERMS AND CONDITIONS OF PROVIDING ELECTRONIC SERVICES. 1. General provisions

Supplementary Terms and Conditions

SERVICES and MICROSOFT HOSTED EXCHANGE

PRIVACY POLICY SECTION 1 CONTACTS

Privacy Policy. Effective date: 21 May 2018

Privacy Statement for Use of the Certification Service of Swisscom (sales name: "All-in Signing Service")

When this policy mentions WanderJaunt, we, us, or our, it refers to the WanderJaunt, Inc.

When you join the Hedon Fan Club, we process the following personal data:

Signe Certification Authority. Certification Policy Degree Certificates

Business terms and conditions

Vistra International Expansion Limited PRIVACY NOTICE

BT One Cloud Cisco UK Schedule to the General Terms

GENERAL ASSEMBLY OF NORTH CAROLINA SESSION 2007 H 1 HOUSE BILL 1699

TERMS & CONDITIONS OF E-COMMERCE STORE Pricecheck.tools of 29 May 2017

H. R To reduce unsolicited commercial electronic mail and to protect children from sexually oriented advertisements.

Islam21c.com Data Protection and Privacy Policy

Entrust SSL Web Server Certificate Subscription Agreement

Emsi Privacy Shield Policy

PRIVACY POLICY. 1.Information. a) Information you provide to BAYOGOC

CALIFORNIA INDEPENDENT SYSTEM OPERATOR CORPORATION FERC ELECTRIC TARIFF ORIGINAL VOLUME NO. III Original Sheet No. 977 METERING PROTOCOL

Domain Hosting Terms and Conditions

APPROVAL PROCESS TO BE FOLLOWED FOR PROVISIONAL ACCREDITATION OF CBs UNDER FM CERTIFICATION SCHEME

Article 1. Amazon/Royal Mail Online Postage Terms and Conditions

Rules governing staff access to and use of Parliament's system

Transcription:

[CZ01] CZ_Data Boxes ID Initiative Short description Owner Contact Type Sub-Type Context Base Registry type Operating model CZ_Data Boxes Summary CZ01 Not Ava The Datove Schranky / Data boxes are an electronic archival system that facilitates communications between citizens, businesses, and public administration bodies in the Czech Republic. The system s web interface replaces the traditional exchange of printed documents, such as submitting tax returns, and allows for immediate access from any Internetconnected computer. Technical specifications of the system are publicly available, and applications for mobile devices are offered by third parties. The use of the system is mandatory for the state administration and legal entities, and citizens may choose to set up a data box of their own if they so choose. In that case, the state administration is obliged to use the data box for communicating with them. Czech Republic https://www.datoveschranky.info/kontakty Service Operational application Cross-sector Persons, Business, Public Administration A data box can be controlled in two ways. Either via the data boxes web portal, which is a free online application operated as a part of the data box system, or using software developed and supplied by a third party. Third-party applications use the publicly available API of the ISDS. The use of the application interface is free and requires no registration by data box users. The method of communication through data boxes completely replaces the classic method of delivery in paper form because the law on data boxes gives equal value to paper and electronic versions of documents. Public authorities and certain groups of legal entities and businesses have their data boxes set up automatically by law, while all others do so at their own discretion.

IPR Status Aggregated business need Functionalities The goal of data boxes is to arrive at a more efficient that is, quicker, cheaper, and more reliable public administration. Not Available/Not Found Operational More details ABN 8 Need for a technology solution enabling the data exchange The data box is an electronic repository that is designed to: a) delivery of public authorities, b) of interacting with public authorities c) delivery of documents of individuals, self-employed natural persons and legal entities. The data box individuals (1) The data mailbox individuals set up free of charge at the request of the Ministry of the natural person who is fully qualified to perform legal acts, within 3 working days of the request. (2) A natural person is entitled to set up a data mailbox individuals. (3) The requirements for an application for the establishment of a data mailbox individuals are a) the name or names, surname and any amendment thereto, b) maiden name, c) the date, month and year of birth, d) the place and district of birth, if a natural person born in a foreign country, the place of birth and the state in which the born e) citizenship, unless an individual citizen of the Czech Republic. (4) An application for the establishment of individual data box must contain the signature of a certified person. (5) Where the application for setting up a data mailbox individuals requirements set out in paragraphs 3 and 4, the Ministry will establish a data box of a natural person, or an individual after previous futile challenge to eliminate shortcomings in the application shall inform that individual data box can not be established. If an individual has

established a data box individual or if full legal capacity, it shall notify the Department that the data box individuals cannot be established. Data box-employed individual (1) The data mailbox enterprising individuals set up free of charge at the request of the Ministry of the person within 3 working days of the request. (2) Entrepreneurs are entitled to set up a data mailbox enterprising individuals. (3) The data mailbox enterprising individuals set up free ministry lawyers, tax advisers and insolvency administrators immediately after receiving information about their inclusion in the statutory records. The provisions of paragraph 2 shall apply to lawyers, tax advisers and insolvency administrators analogy. (4) The requirements for an application for the establishment of a data box enterprising individuals are a) the name or names and surname or company name, b) maiden name, c) the date, month and year of birth, d) the place and district of birth, if a natural person born in a foreign country, the place of birth and the state in which the born e) citizenship, if a natural person is a citizen of the Czech Republic, f) identification number, if assigned; g) place of business or residence. (5) An application for setting up a data mailbox employed individual must include a certified signature enterprising individuals. (6) Where the application for setting up a data mailbox employed individual requirements set out in paragraphs 4 and 5, the Ministry will establish a data box-employed individual, business or individual after previous futile challenge to eliminate shortcomings in the application shall inform the data box business individuals cannot be established. If a natural person has established a data box enterprising individuals

Ministry will notify the data box-employed individual can set up. Additional information on the Data Box (1) Data Box is an information system of public administration 4), which contains information about the data boxes and their users. (2) The administrator of the information system of data boxes is the ministry. The operator of the information system of data boxes is the postal license holder. Reward postal license holder for the operation of the information system of data boxes is determined by price regulations 5). Costs associated with the operation of the information system of data boxes covered by the state from the state budget allocated by the Ministry's proposal for the stated purpose in the chapter General Treasury Administration 5a). (3) The information system of data boxes to keep the information on data boxes: 5) a) data box identifier (hereinafter "identifier"); b) the date of the creation, access, disablement and withdrawal data box indicating the hours, minutes and seconds c) the date the person authorized to access the data box in the data box indicating the hours, minutes and seconds, and information identifying the person d) the date of dispatch of the document or perform an act from the data box indicating the hours, minutes and seconds, and information identifying the person who sent the document or act done, e) the name or names, surname, date and place of birth, address of permanent residence or another residence in the Czech Republic or home address outside the Czech Republic, a natural person for which it was established data box, f) the name or names and surname or company name enterprising individuals for which it was established data box, date and place of birth, address of permanent residence for citizens of the Czech Republic, the place where he has a residence permit or a permanent residence in the Czech

Republic, including the address, and the address of residence abroad in the case of foreigners, address of residence in a Member State of the European Union, in which it is established, if it is a national of a Member State of the European Union that does not have a residence permit or for permanent residence in the Czech Republic, place of business and identification number, if assigned; g) the trade name or corporate name for which it was established data box, seat and identification number, if assigned; h) the name and address of the branch of a foreign legal entity registered in the Commercial Register, has been set up data box, i) the name of the public authority for which it was established data box, seat and identification number, if assigned; j) the name or names, surname, date of birth, address of permanent residence or another residence in the Czech Republic or home address outside the Czech Republic a person authorized to access the mailbox, access data, access data links to access information about an individual user accounts pursuant to 14a, the extent of access and the date of creation and destruction of authorized access to the data box indicating the hours, minutes and seconds k) the name or names, surname, date of birth, address of permanent residence or another residence in the Czech Republic or home address outside the Czech Republic, the administrator and the date of the determination and termination administrator indicating the hours, minutes and seconds l) e-mail address, or a similar figure for the delivery notification message data into the mailbox, or contact address to which it should be delivered to the addressee, a list of contact addresses for which consent for publication, heads the Department in a manner allowing remote access, m) The date and time of the events associated with the operation of the information system of data boxes. (4) The information referred to in paragraph 3 are private and cannot give to others, with the exception of the addresses to which is to be delivered to the addressee, if it was given

consent to its publication. Ministry to identify data box so that it could be to delivered. (5) The administrator and operator information system data box provides adequate safety measures information system of data boxes. (6) The administrator or operator of an information system of data boxes are not authorized to access the data boxes of others. Design/Architecture EGON Shared Services in the Czech Republic EGON is a marketing interpretation of egovernment in the Czech Republic. EGON does not bend legislation so it fits information technology. EGON respects long-term existing administrative processes in public administration. EGON consists of components mapped as parts of human body: Technologies Specifications Management Czech POINT (fingers) Databox system (blood) Base Registry (brain) KIVS (veins) Legislation changes (heart) Not Available/Not Found ISO / IEC 27001 series: 2006 - Information Security Management System ISMS Moreover, Extensible Markup Language (XML) and Web Services are used to guarantee a high degree of flexibility, openness and easy expandability, which comes directly from the basic conception of an information system platform and that is the focus on the use of standardized technologies. Entering the Data Box Identifier

When a new data box is made available, the ISDS enters a corresponding data box identifier into the Register of Entities or the Register of Inhabitants (depending on whether the data box was created for a private individual, an entrepreneur, a legal entity, or a public authority). A prerequisite for the entry is that a company registration number (IČO) is assigned to the data box created in the ISDS, and an entity with that registration number is entered in the Register of Entities. When a data box is cancelled, the ISDS removes the entry from the respective register. Entering into the Register of Rights and Duties The act on Base Registers requires that upon each change of reference data in the Base Registers, an entry is recorded in the Register of Rights and Duties about the decision that led to the change. The Ministry of the Interior is, with regard to data boxes, expected to edit a single piece of reference data the data box identifier. So, the ISDS records a new entry in the Register of Rights and Duties every time this identifier is either entered into or erased from the Register of Entities or the Register of Inhabitants. Use of Data from the Base Registers The Ministry of the Interior uses reference data from the Base Registers extensively for managing the data boxes. Base Registers are therefore the most important source of data on the basis of which data boxes are created and their users identification data is updated. Establishment of Data Boxes by Law Based on information from the Register of Entities, data boxes are established for entities that are required by law to have one. This is the case for all legal entities, with the exception of a small set of entities that do not have entries in the Register of Entities because they have not been assigned an identification number (public authorities without legal status). Freezing Data Boxes

Data boxes are frozen for entities that have had a termination date entered in the Register of Entities. Similarly, once an individual person has had the date of their death entered in the Register of Inhabitants, their data box is frozen from that date. Updating Data Box Information Identification data about entities with records in the Base Registers that is stored with data boxes of all types is automatically updated based on changes entered into the Base Registers. This means that changing the name of an entity or a company address does not need to be reported to the Ministry of the Interior the changes are reflected automatically. Adding / Removing Authorised Agents Authorised agents for data boxes of those entities that are registered in the Register of Entities are updated to reflect changes in the list of statutory representatives kept for a given entity in the Register of Entities. So, if a new statutory representative is entered into the Register, an authorized agent account is automatically created for them for their company s data box. The same works the other way round as well: if a statutory representative is removed from the Register, the authorized agent account for the respective data box is cancelled. Updating the Personal Data of Data Box Users For all users of data boxes, the Ministry of the Interior attempts to automate their identification to the relevant entry in the Register of Inhabitants. For users whose identification succeeds, current reference data from the Register of Inhabitants is automatically utilised in the ISDS. For example, changes in name or address are automatically reflected. Governance Data boxes are set up and administered by the Ministry of the Interior (hereinafter referred to as the "Ministry"). 14a Role of the Ministry

(1) The Ministry may, at the request of the person providing their services on the internet, which are accessed through her individual user accounts operated by recipients of such services (hereinafter "ISP"), allow the use of the information system interface, data boxes, which are used for managing access of data and the identity of the persons authorized to access the data boxes and access data links these people to access information to individual user accounts (the "Access Interface"). The application includes a description of the use of access points. (2) The Ministry shall decide on the application within three months from the date of its submission. Meets the ISP material, personnel, technical, safety and organizational conditions, the Ministry may issue a permit him to use access points. Permit is issued for a period of 5 years. (3) The Ministry establishes material, personnel, technical, safety and organizational conditions for the use of access points and published in the Bulletin of the Ministry and in a manner allowing remote access. If the Department provides new conditions under the first sentence, the obligation internet service provider must meet the following conditions occurs first on the first day of the third calendar month following the calendar month in which they were published, unless the ministry for a long time. (4) ISP pays for the use of access points annual fee calculated by multiplying the amount of CZK 100 and the number of user accounts to its services, which, in a given calendar year used access points. The fee is paid by 31 January of the following calendar year. The fee income of the state budget, it selects the Ministry. (5) The Internet Service Provider is responsible for any damage caused in connection with the use of access points. ISP liability relieved, if he proves that the damage could not be prevented even with all effort that can be required to. (6) The Ministry monitors your Internet service provider filling material, personnel, technical, safety and organizational conditions for the use of access points. (7) The Ministry shall decide to revoke the license to use the access interface

a) failing ISP material, personnel, technical, safety and organizational conditions for the use of access points and if it happens within 3 months from the date on which the Ministry pointed to this fact, for correction, or b) if requested by the ISP. (8) The Ministry shall maintain a list of ISPs who use the access interface, and publish it in a manner allowing remote access. Sustainability Documentation ADMS Current Users View Building Block Not Available/Not Found https://www.datoveschranky.info/ http://www.vlada.cz/en/media-centrum/aktualne/novelties-incommunication-with-the-authorities-data-boxes-60252/ https://joinup.ec.europa.eu/community/epractice/case/databoxes-%e2%80%93-easy-economic-and-environmentallyfriendly-delivery-official-d http://www.mvcr.cz/mvcren/article/data-box-another-step-inelectronification-of-public-administration.aspx Not Available/Not Found One of the main current users are Base registers, that is, Individual registers, which together form a system called Base Registers. They are the main users of the Data Box Information System (ISDS). Moreover, based on Act No. 300/2008 Coll., from now on it is, for all public institutions, (e.g. government offices, local governments, institutions established by local or state government etc.) obligatory to use data boxes (or so-called eboxes) instead of traditional paper form. EIRA Technical View - Application Application Service Reusability

Landscape Framework Service Tool Domain Specific Domain Agnostic CZ01 cross-sector cross-border Criteria High adaptation effort Positive answer Not Available/Not Found Plug and Play Negative answer Not Applicable IPR and licenses Legal Suitability of documentation Maturity Extensibility Scalability Designed for re-use Planned re-use or extension to other domains Maintenance and support Use of standards Actual Reuse Language and location suitability Granularity Impacts Testability