In times of national emergency, when digitalisation is at the forefront and we work from home because the nature of our work allows us to do so, the problem of remote digital signing of business documents has arisen. We are facing a problem because, of course, not all employees had previously obtained a qualified digital certificate, which is a prerequisite for being able to remotely digitally sign business documents (previously, most of them signed documents electronically with a facsimile or in their own handwriting). The challenge is even greater for new employees joining the organisation in this time of emergency. The problem is that before obtaining a qualified digital certificate, they have to sign the request for the MJU in their own handwriting (most of them do not even have a personal qualified digital certificate), including on a separate form by the person responsible. This is the whole process, starting with printing the document, where some people do not have a printer at home and have to send the original handwritten signed form to the employer's headquarters by ordinary post. The same process had to be carried out by the responsible persons, who now have a qualified digital certificate and can digitally sign these documents.
I understand that the MJU has such a procedure, but is there any personal identification or is it considered to be done by the employer, because in our case a courier delivers the handwritten signed documents to the MJU for the employee(s) by proxy and on the basis of that the MJU issues a personal qualified certificate to the individual employee (one part by physical mail to the company's headquarters, the other part by e-mail to the employee), which he/she has not even seen?
Purely as a reflection that the IMU would have implemented support in the way of implementing remote video identification before issuing the qualified digital certificate. This type of identification is compliant with the legislation, e.g. Telekom Slovenije has agents trained for this purpose, who perform personal video identification for the client, i.e. they perform a procedure that is compliant with the legislation (GDPR is also taken into account), while the screen shots as well as the audio recordings are sent to the client.