Contents
- 1. Definition and main features of Substitute Preservation
- 2. Effects of Substitute Preservation
- 3. The Substitute Preservation process
- 4. Substitute preservation of electronic documents
- 5. Substitute preservation of analogue documents
- 6. The person responsible for preservation
- 7. Technical rules
- Footnotes
1. Definition and main features of Substitute Preservation
Substitute preservation is a legal/IT procedure regulated by Italian law, capable of guaranteeing over time the legal validity of an electronic document1.
With this system it is possible — in terms of legal and probative effects — to equate the electronic document to the paper document, provided that the technical and regulatory rules relating to the matter are respected.
The system is based on:
- Electronic Document2
- Qualified electronic signature (in its species of digital signature)3
- Time Stamp4
From what is summarily described, it is precisely the respect of technical rules in the formation of the electronic document that guarantees the immutability and invulnerability of the document over time. In this sense, both the Decree of the Italian Prime Minister 13 January 2004 entitled “Technical rules for the formation, transmission, preservation, duplication, reproduction and validation, including temporal, of electronic documents” (G.U. 27 April 2004, no. 98), and the RESOLUTION 19 February 2004 of CNIPA (today DigitPA) “Technical rules for the reproduction and preservation of documents on optical media suitable to ensure conformity of documents with the originals” — Art. 6, paragraphs 1 and 2, of the consolidated text of legislative and regulatory provisions on administrative documentation, referred to in Italian Presidential Decree 28 December 2000, no. 445 (Resolution no. 11/2004) — are fundamental.
2. Effects of Substitute Preservation
Where substitute preservation has been carried out according to the rules described below and operated with tools that comply with the technical rules, private persons and PAs may replace all the documents whose preservation is required by law or regulation with their reproductions on magnetic media.
This is the summary of art. 6 of Italian Presidential Decree 445/2000, whose content has been replaced, integrated and expanded by articles 22 and 23 of the CAD. Art. 22 (“Original electronic documents and copies. Formation and preservation”):
The acts formed with IT tools, the data and the electronic documents of public administrations constitute primary and original information from which it is possible to make, on different types of media, reproductions and copies for the uses permitted by law5.
3. The Substitute Preservation process
Substitute preservation goes through certain pre-determined phases, well highlighted in articles 3 and 4 of CNIPA resolution 11/2004. In particular, the following phases can be highlighted:
- registration
- application of the digital signature
- application of a time stamp
- authentication by a public official if the document is a unique original
If these are the general phases, the procedure has peculiarities depending on the type of document being “preserved”. The definitions of Electronic Document and Analogue Document come into play. Within the analogue document genus we find the unique original document and the non-unique original.
4. Substitute preservation of electronic documents
Preservation begins with storage on a suitable magnetic medium.
By storage is meant the process of transposition onto one of the aforementioned media, through a processing process, of analogue or electronic documents — also signed under art. 10, paragraphs 2 and 3, of Italian Presidential Decree 28 December 2000, no. 445, as modified by art. 6 of Italian Legislative Decree 23 January 2002, no. 106.
Once storage has been carried out, the second step is the application — on the set of documents, or on their electronic evidence containing one or more imprints7 — of the time stamp and digital signature by the person responsible for preservation8. Once these steps have been performed, provided the technical rules have been respected, the preservation can be said to be completed and productive of the effects referred to in the previous paragraph.
5. Substitute preservation of analogue documents
For analogue documents — more easily definable as paper documents — substitute preservation also begins with storage on optical media. The image is transposed onto media, presumably via scanner.
Once storage has been carried out, the procedure to follow is the same as that provided for electronic documents.
Where the stored analogue documents are unique originals, greater care is required. It will therefore be necessary that, after the person responsible for preservation, a public official takes care to apply their digital signature and time stamp so as to attest the conformity of what was stored to the paper originals.
If the operations are correctly carried out, the destruction of paper documents is possible as indicated by art. 23 of the CAD; in any case, those documents that have particular historical and cultural value are saved, for which destruction is not allowed.
6. The person responsible for preservation
It is the person who guarantees preservation and oversees the procedure; competences and characteristics are specifically identified in art. 5 of resolution 11/2004.
Their tasks can be summarised as follows:
- implement and maintain a suitable hardware and software system, taking care of the necessary updates and technological adjustments
- define the preservation system, that is, the IT and organisational procedures capable of managing — in full compliance with the tax and technical regulations in force — the substitute preservation process
- constantly verify the correct technical functioning of the preservation processes
- define system requirements and internal procedures (with particular attention to security and traceability profiles) through the drafting of an appropriate operating manual
- verify over time the availability and accessibility of preservation programmes and storage media, as well as the legibility of preserved documents
- define and implement the organisational and IT procedures suitable to exhibit, in response to requests from tax Authorities, the preserved documentation
7. Technical rules
The entire discipline is today contained in the DPCM of 30 March 2009.
It deals with defining the technical discipline relating to:
- Qualified electronic signature
- Time validation
- Certifying parties
Particular attention must be paid to the type of electronic document.
Indeed, where the document has macro instructions inside it, given the possible vulnerability, the document does not produce the effects provided by the code; therefore for this type of documents one cannot speak of substitute preservation.
Footnotes
-
Cf. Wikipedia, entry “Conservazione sostitutiva”. ↩
-
The Italian Digital Administration Code (D.Lgs 7 March 2005, no. 82) defines the electronic document as “the IT representation of legally relevant acts, facts or data”. ↩
-
It is defined as the electronic signature based on a procedure that allows to uniquely identify the holder, through means of which the signatory must hold exclusive control, and whose ownership is certified by a qualified certificate. The use of the secure signature device, capable of effectively protecting the secrecy of the private key, is also required. Furthermore, the signature itself must be able to detect any alteration of the document occurring after the application of the signature. Any technology that allows such unique identification falls within the concept of “qualified electronic signature”. Of the genus Qualified electronic signature, the “Digital Signature” is part — by which is meant the signature based on asymmetric-key cryptography technology. Of particular relevance for the effects of the qualified electronic signature is art. 2702 c.c. which equates the electronic document signed with qualified electronic signature to the paper document with handwritten private signature. ↩
-
A time stamp is a sequence of characters representing a date and/or time to ascertain the actual occurrence of a certain event. From a regulatory viewpoint it is understood as “the result of the IT procedure by which a date and time enforceable against third parties are attributed to one or more electronic documents” (art. 1, paragraph 1, letter bb, of the Italian Digital Administration Code, D.Lgs. no. 82/2005). Thus an electronic document signed digitally and time-stamped continues to produce its effects over time if it is created and archived following certain procedures defined “technical rules”. ↩
-
Art. 22 CAD: “In operations concerning production, input, preservation, reproduction and transmission of data, documents and administrative acts with IT and telematic systems — including the issuance of acts with the same systems — both the data relating to the administrations involved and the subject who carried out the operation must be indicated and made easily identifiable. Copies on IT media of documents originally formed on another type of media replace, for all legal effects, the originals from which they are taken if their conformity to the original is ensured by the official delegated to do so within the legal framework of the administration to which they belong, through the use of digital signature and in compliance with the technical rules established under article 71”. Art. 23 CAD: “In article 2712 of the Italian Civil Code, after the words: «photographic reproductions» the following is inserted: «, electronic». 2. Duplicates, copies, extracts of the electronic document — even if reproduced on different types of media — are valid for all legal effects if compliant with the technical rules in force. 2-bis. Copies on paper media of an electronic document, even signed with qualified electronic signature or digital signature, replace for all legal effects the original from which they are taken if their conformity to the original in all its components is attested by an authorised public official”. ↩
-
Considering that the indicated article has been repealed, the reference rule is articles 20 and following of the CAD (Italian Digital Administration Code). ↩
-
The resolution defines as electronic evidence “a sequence of binary symbols (bits) that can be processed by an IT procedure”; and as imprint “the sequence of binary symbols (bits) of predefined length generated by applying an appropriate hash function to the first”. ↩
-
See section 6. ↩