C 2618 2010 No.
Electronic Transactions
1
12. The administration of electronic signature shall be in accordance
2
with rules, guidelines and standards as may be prescribed by NITDA.
3
13. Electronic Signature Certification services shall be provided by a
4
certification authority in accordance with the provisions of the accreditation
5
granted under the electronic signature administration.
6
14. An electronic signature created or used outside Nigeria shall have
7
the same legal effect in Nigeria as an electronic signature created or used in
8
Nigeria if it satisfies the Nigeria Certification Standards.
9
15. A certification authority shall maintain for a minimum period as may
10
be prescribed in the certification administration guidelines:
11
(a) the documentation concerning the organizational, technical and
12
security means used for compliance with the requirements arising from
13
law and from the relevant regulations;
14
(b) originals of applications for issuance of certificates together with the
15
respective documents proving identity of the applicant;
16
(c) the documents corresponding to any revoked certificate.
17
16. An accredited certification authority shall be liable for any breach
18
of its obligations and shall pay fines as may be specified in the certification
19
administration guidelines.
20
17.—(1) The provisions of this Part shall apply to the processing of
21
personal data wholly or partly by automated means, and to the processing
22
otherwise than by automated means of personal data which form part of a
23
filing system or are intended to form part of a filing system.
24
25
(a) in the course of an activity concerning public safety, defence, national
26
27
28
(2) The provisions shall not apply to the processing of personal data:
security
(b) concerns the activities of law enforcement, intelligence or prosecuting
agencies in areas of criminal law;
29
(c) by a natural person in the course of personal or domestic activity.
30
18.—(1) Personal data shall only be processed if at least one of the
31
following conditions are met:
(a) the data owner has given his consent to the processing;