RECOMMENDS THAT MEMBER COUNTRIES:

[23] -- establish new, or amend existing, policies, methods, measures, practices and procedures to reflect and take into account the Principles concerning cryptography policy set forth in the Guidelines contained in the Annex to this Recommendation (hereinafter “the Guidelines”), which is an integral part hereof; in so doing, also take into account the Recommendation of the Council concerning Guidelines Governing the Protection of Privacy and Transborder Flows of Personal Data of 23 September 1980 [C(80)58/FINAL] and the Recommendation of the Council concerning Guidelines for the Security of Information Systems of 26 November 1992 [C(92) 1 88/FINAL];

[24] -- consult, co-ordinate and co-operate [and take initiatives] at the national and international level in the implementation of the Guidelines;

[25] [-- agree as expeditiously as possible on specific initiatives for the application of the Guidelines.]

[26] -- act on the need for practical and operational solutions in the area of international cryptography policy by using the Guidelines as a basis for agreements on specific issues related to international cryptography policy;

[27] -- disseminate the Guidelines throughout the public and private sectors to promote awareness of the issues and policies related to cryptography;

[28] [-- remove, or avoid creating in the name of cryptography policy, unjustified obstacles to international trade and the development of information and communications networks, ]

[29] [-- state clearly and make publicly available, any national controls imposed by governments relating to the use of cryptography;]

[30] -- review the Guidelines at least every five years, with a view to improving international co-operation on issues relating to cryptography policy.