# Council Decision (EU) 2018/1926 of 19 November 2018 on the position to be taken, on behalf of the European Union, in the Group of Experts on the European Agreement concerning the work of crews of vehicles engaged in international road transport of the United Nations Economic Commission for Europe, Division 4

Extent: E+W+S+N.I.

Contracting parties shall:
(a) protect their private key against unauthorised use;
(b) refrain from transferring or revealing their private key to third parties, even as representatives;
(c) ensure confidentiality, integrity, and availability of the private keys generated, stored and used for TACHOnet;
(d) refrain from continued use of the private key following expiry of the validity period or revocation of the certificate, other than to view encrypted data (e.g., decrypting emails). Expired keys shall be either destroyed or retained in a manner preventing its use;
(e) provide the Registration Authority with the identification of those authorised representatives who are authorised to request revocation of certificates issued to the organisation (revocation requests shall include a revocation request password and details about the events that lead to revocation);
(f) prevent misuse of the private key by requesting the revocation of the associated public key certificate in case of compromise of the private key or of the private key activation data;
(g) be responsible and hold the obligation of requesting revocation of certificate under circumstances identified in the certification policies (CP) and certification practices statement (CPS) of the Certification Authority;
(h) notify the Registration Authority without delay of loss, theft, or potential compromise of any AETR keys used in the context of TACHOnet.

---
Source: https://www.legislation.gov.uk/eudn/2018/1926/annex/ATTACHMENT/division/9/division/4 (the official version)
Page: https://openlegislation.uk/eu-decision-2018-1926/annex-ATTACHMENT/division-9/division-4
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.