Each registered certification authority shall file with the secretary of state a certification practice statement as required by K.A.R. 7-41-3. The statement shall declare the practices that the registered certification authority uses in issuing, suspending, revoking, and renewing certificates. The statement shall also include the following information: (a) If certificates are issued by security levels, the necessary criteria for each certificate security level, including the methods of certificate applicant identification applicable to each security level;

1. (b) disclosure of any warnings, liability limitations, warranty disclaimers, and indemnity and hold harmless provisions, if any, upon which the registered certification authority intends to rely;
2. (c) disclosure of any and all disclaimers and limitations on obligations, losses, or damages, if any, to be asserted by the registered certification authority;
3. (d) a written description of all representations from the certificate applicant required by the registered certification authority relating to the certificate applicant's responsibility to protect the private key; and
4. (e) disclosure of any mandatory dispute resolution process, if any, including any choice of forum and choice of law provisions.

(Authorized by K.S.A. 16-1618; implementing K.S.A. 16-1617; effective July 6, 2001; amended March 6, 2009.)