JPRFM-2026-044-M — Approves the Policies for the Provision of Services by the Information Certification Entity of the Central Bank of Ecuador (ECIBCE)

THE FINANCIAL AND MONETARY POLICY AND REGULATION BOARD CONSIDERING:
That, the Constitution of the Republic of Ecuador, in article 226, prescribes that public servants or employees and persons acting by virtue of state authority shall exercise only the competencies and faculties attributed to them in the Constitution and the Law; That, article 227 Ibidem states that Public Administration constitutes a service to the community that is governed by the principles of efficacy, efficiency, quality, hierarchy, coordination, planning, among others; That, the first paragraph of article 303 of the Constitution of the Republic determines that the formulation of monetary, credit, exchange, and financial policies is an exclusive faculty of the Executive Function and shall be implemented through the Central Bank of Ecuador; That, on October 13, 2025, the Organic Law Reforming the Organic Monetary and Financial Code was published in the Sixth Supplement of Official Register No. 142; That, article 13 of the Organic Monetary and Financial Code creates the Financial and Monetary Policy and Regulation Board, part of the Executive Function, as an organ with functional, technical, institutional autonomy, and in its decisions, responsible for the formulation of monetary, credit, financial, securities, insurance, and prepaid comprehensive health care services policy and regulation. The Financial and Monetary Policy and Regulation Board shall be the highest governing body of the Central Bank of Ecuador; That, article 17 of the referred Code, in its pertinent part, determines that:
“(...) For the fulfillment of these functions, the Board shall issue norms in matters within its competence, without altering legal provisions. The Financial and Monetary Policy and Regulation Board may issue regulations by segments, economic activities, and other criteria. It may also reform or repeal regulations of the defunct Monetary Policy and Regulation Board, Financial Policy and Regulation Board, or the Monetary and Financial Policy and Regulation Board. All norms and policies issued by the Financial and Monetary Policy and Regulation Board in the exercise of its functions, duties, and faculties must be supported by duly substantiated technical and legal reports (...)”; That, article 19 of the same Code, regarding the specific functions of the Financial and Monetary Policy and Regulation Board in the monetary sphere, among others, states: “(...) 2. Establish the policies of the Central Bank of Ecuador and supervise their implementation; (...) 4. Formulate the policy of the operations of the Central Bank of Ecuador (...)”; That, article 24 ibidem provides that the acts of the Financial and Monetary Policy and Regulation Board enjoy the presumption of legality and shall be expressed through resolutions that shall have mandatory force, which shall govern from their publication in the Official Register, or from the date of their expedition when so determined by the Board, in accordance with the matter; That, article 25.3 ut supra establishes among the functions of the Technical Secretariat the preparation of technical and legal reports that support regulatory proposals, providing technical and administrative support to the Financial and Monetary Policy and Regulation Board and others that may be assigned by said Board; That, numeral 19 of article 36 of the Organic Monetary and Financial Code establishes as one of the functions of the Central Bank of Ecuador: “To act as an electronic certification entity”; That, General Provision Twenty-Ninth ibidem states: “In current legislation where mention is made, indistinctly, of the Monetary and Financial Policy and Regulation Board, the Monetary Policy and Regulation Board; or, the Financial Policy and Regulation Board, replace and understand it as the Financial and Monetary Policy and Regulation Board”; That, article 3 of the Organic Law for the Optimization and Efficiency of Administrative Procedures foresees as principles to be observed in administrative procedures, among others, the following: “11. Simplicity. - Procedures shall be clear, simple, agile, rational, pertinent, useful, and easy to understand for citizens (…); 14. Continuous improvement. - Entities regulated by this Law must implement continuous improvement processes for administrative procedures under their charge (…)”; That, article 32 of the Electronic Commerce, Signatures and Data Messages Law provides that information certification entities shall guarantee the protection of personal data obtained in the exercise of their
activities, in accordance with the provisions of article 9 of the same Law; That, article 33 ibidem establishes that information certification services may be provided and managed, totally or partially, by third parties, who must demonstrate their link with the information certification entity; and, attributes to the competent regulatory body the determination of the terms under which said services may be provided by means of third parties; That, Section 8 “On the Information Certification Entity Service and Issuance of Digital or Electronic Certificates”, Chapter I “On the Operations of the Central Bank of Ecuador", Title II “Policies for Operations of the Central Bank of Ecuador” of the “Codification of Monetary Policy and Central Bank of Ecuador Operations Resolutions issued by the Monetary Policy and Regulation Board”, contained in Resolution No. JPRM-2025-006-M, of July 16, 2025, regulates the faculty of issuance and management of digital certificates and related services, under the charge of the Central Bank of Ecuador, in its capacity as an Information Certification Entity; That, article 1 of Resolution No. ARCOTEL-2018-0902, of October 25, 2018, issued by the Agency for Regulation and Control of Telecommunications (ARCOTEL), accredited the Central Bank of Ecuador as an Information Certification Entity and Related Services; and, consequently, authorized the provision of said services, in accordance with the conditions established in the referred administrative act; That, article 3 of the same Resolution establishes, among the responsibilities of the accredited Information Certification Entity, the obligation to have a Certification Practices Statement that determines the conditions, policies, and procedures applicable to the request, issuance, use, suspension, and revocation of electronic signature certificates, as well as to the provision of related services; including the policies for the management of electronic signature certificates and related services. Likewise, it stipulates that it must have a Security Policy Statement that establishes the conditions and procedures related to the security of its infrastructure and to the provision of information certification services and related services; That, article 5 of the “Technical standard for the provision of information services and related services of accredited certification entities and linked third parties” contained in Resolution No. ARCOTEL-2024-0176, of August 16, 2024, issued by the Agency for Regulation and Control of Telecommunications (ARCOTEL), updates the responsibilities applicable to all accredited information certification entities and related services, determining the minimum content of the Certification Practices Statement (CPS) and the Security Policy Statement; That, the First Transitory Provision of the Organic Law Reforming the Organic Monetary and Financial Code determines that the members of the Financial and Monetary Policy and Regulation Board, sworn in on
September 16, 2025, by the National Assembly, shall continue to exercise their functions for the periods for which they were designated and shall maintain their labor continuity and acquired rights; That, by Official Letter No. T.233-SGJ-25-098 of September 5, 2025, signed by the Constitutional President of the Republic, addressed to the President of the National Assembly, sent the list of candidates for the designation of the Members of the Financial and Monetary Policy and Regulation Board; as well as the temporality of their permanence within the initial period; That, the Plenary of the National Assembly, on September 16, 2025, designated and swore in the members of the Financial and Monetary Policy and Regulation Board; That, the Financial and Monetary Policy and Regulation Board, through ordinary session No. 020-2026, in person, on October 2, 2026, reviewed the proposal submitted by Memorandum No. BCE-BCE-2026-0429-M, of September 30, 2026, by the General Manager of the Central Bank of Ecuador to the President of the Financial and Monetary Policy and Regulation Board; as well as Technical Report No. BCE-GMPSN-033-2026 / BCE-SSFN-778-2026, of September 29, 2026; and, Legal Report No. BCE-GJ-097-2026, of September 29, 2026; and, In exercise of its functions and in accordance with article 24 of the Organic Monetary and Financial Code, the Financial and Monetary Policy and Regulation Board, RESOLVES:
Article 1.- Incorporate, following Subsection 1 “Scope and Information Certification Entity”, Section 8 “On the Information Certification Entity Service and Issuance of Digital or Electronic Certificates”, Chapter I “On the Operations of the Central Bank of Ecuador”, Title II “Policies for Operations of the Central Bank of Ecuador” of the “Codification of Monetary Policy and Central Bank of Ecuador Operations Resolutions issued by the Monetary Policy and Regulation Board”, contained in Resolution No. JPRM-2025-006-M, of July 16, 2025, the following:
“SUBSECTION 2: POLICIES FOR THE PROVISION OF SERVICES BY THE INFORMATION CERTIFICATION ENTITY OF THE CENTRAL BANK OF ECUADOR (ECIBCE)
Article 85. - Definitions: For the purposes of applying the ECIBCE Policies, the following definitions shall be considered:

1. Issuance: Act by which a digital electronic signature certificate is generated in favor of its holder, once the applicable requirements have been met.
2. Extinction: Definitive termination of the validity or effects of a digital electronic signature certificate, carried out by the holder or ordered by a competent authority, in accordance with the causes established in the Electronic Commerce, Signatures and Data Messages Law and its Regulations.
3. Reactivation: Reestablishment of the validity of a previously suspended digital electronic signature certificate, once the cause of the suspension has been overcome and the applicable requirements have been met.
4. Renewal: Procedure by which a new digital electronic signature certificate is issued to replace another whose validity is about to expire, subject to compliance with applicable requirements.
5. Revocation: Definitive and irreversible loss of validity of a digital electronic signature certificate, originated by the Control Entity, in accordance with the provisions of the Electronic Commerce, Signatures and Data Messages Law and its Regulations.
6. Related services: Complementary services for the use and validation of electronic signature certificates, as well as user management and other related services that are included within the scope of ECIBCE's accreditation and permitted by the current legal system.
7. Suspension: Temporary and reversible interruption of the validity of a digital electronic signature certificate, while the cause that originated it persists, motivated by the Control Entity, ECIBCE, or the holder, in accordance with the provisions of the Electronic Commerce, Signatures and Data Messages Law and its Regulations.
   Article 86.- ECIBCE operational policies: For the issuance, renewal, revocation, extinction, suspension, reactivation, and use of digital electronic signature certificates, as well as for the provision of related services, the Information Certification Entity of the Central Bank of Ecuador shall carry out its activities in accordance with the following policies:
   a. Guarantee that electronic certification services are executed under procedures that preserve authenticity, integrity, traceability, and reliability. b. Protect information under its custody and process personal data, applying measures that guarantee its confidentiality, integrity, availability, and lawful processing throughout the entire service provision cycle.
   c. Ensure operational continuity and availability of electronic certification services through resilience, recovery, and monitoring mechanisms that allow maintaining the secure and timely provision of services.
   d. Provide clear, sufficient, and timely information on the conditions for providing electronic certification services, the rights and obligations of participants, the responsibilities of the parties, and the normative documents that regulate their operation, promoting trust and legal certainty. e. Promote the responsible incorporation of technologies that strengthen the security, efficiency, interoperability, and accessibility of electronic certification services oriented to user needs, based on international standards and good practices. f. Promote the continuous improvement of its processes and services, ensuring compliance with quality standards and good practices that guarantee the efficiency, reliability, and timeliness in the provision of electronic certification services and related services. g. Implement and maintain a comprehensive security framework for the provision of information certification services and related services that guarantees their secure and reliable operation.”
   Article 2.- Incorporate, following General Provision Forty-Third, within the General Provisions related to Section 8 “On the Information Certification Entity Service and Issuance of Digital or Electronic Certificates”, Chapter I “On the Operations of the Central Bank of Ecuador”, Title II “Policies for Operations of the Central Bank of Ecuador” of the “Codification of Monetary Policy and Central Bank of Ecuador Operations Resolutions issued by the Monetary Policy and Regulation Board”, contained in Resolution No. JPRM-2025-006-M, of July 16, 2025, the following:
   “FORTY-FOURTH. - The General Management of the Central Bank of Ecuador shall be responsible for issuing the regulations and procedures related to the provision of services by the Information Certification Entity of the Central Bank of Ecuador (ECIBCE), in accordance with the policies established in Section 8 of Chapter I of Title II of this Codification and the current legal system”.
   SOLE TRANSITORY PROVISION.- Within ninety (90) days, counted from the expedition of this Resolution, the General Management of the Central Bank of Ecuador shall adopt the necessary actions to adapt internal regulations related to the provision of information certification services to the provisions of this Resolution, through the issuance, reform, or repeal of the normative acts and other internal procedural documentation that may be necessary. FINAL PROVISION. - This Resolution shall enter into force from the date of its expedition, notwithstanding its publication in the Official Register. The General Secretariat of the Central Bank of Ecuador is entrusted with its publication on the institutional website, as well as the update and renumbering of the articles and subsections of Section 8 “On the Information Certification Entity Service and Issuance of Digital or Electronic Certificates”, Chapter I “On the Operations of the Central Bank of Ecuador”, Title II “Policies for Operations of the Central Bank of Ecuador” of the “Codification of Monetary Policy and Central Bank of Ecuador Operations Resolutions issued by the Monetary Policy and Regulation Board”, so that they maintain continuity by implementing the reforms made in this resolution. COMMUNICATE AND PUBLISH. - Given in the city of Quito D.M., on October 2, 2026. THE PRESIDENT Mgs. Gustavo Estuardo Camacho Dávila The preceding resolution was provided and signed by Master Gustavo Estuardo Camacho Dávila - President of the Financial and Monetary Policy and Regulation Board, in the city of Quito D.M., on October 2, 2026. - I CERTIFY IT. TECHNICAL SECRETARIAT Abg. Ninoska Geovanna Ceballos Pin