C 2622 2010 No. Electronic Transactions 1 23.—(1) A data holder must implement appropriate technical and 2 organizational measures. and exercise reasonable care to protect personal 3 data against accidental or unlawful destruction or accidental loss and against 4 unauthorized alteration, processing, disclosure or access, in particular where 5 the processing involves the transmission of data over a network, and against 6 all other unlawful forms of processing. 7 8 implementation, such measures shall ensure a level of security appropriate 9 to the risks represented by the processing and the nature of the data to be (2) Having regard to the state of the art and the costs of their 10 protected. 11 24. The data holder must, where processing is carried out on his 12 behalf, choose a processor who provides sufficient guarantees in respect 13 of the technical security measures and organizational measures governing 14 the processing to be carried out and must ensure compliance with those 15 measures. 16 25. NITDA may in consultation with any appropriate regulatory body, 17 develop rules and guidelines for Data Protection in Nigeria. 18 Part V — Electronic Contracts 19 26.—(1) In the context of contract formation, unless otherwise agreed 20 by the parties, an offer and acceptance may be expressed by means of a 21 document as defined in this Act. 22 23 shall not be denied validity or enforceability on the ground that a document 24 was used for that purpose. 25 26 Provided that the interaction results in the agents engaging in operations that 27 confirm or indicate the existence of a contract. 28 29 agent and a natural person. 30 (b) A contract is formed if the person has reason to know that he is 31 dealing with an electronic agent and the person takes actions or makes a (2) Where a document is used in the formation of a contract, that contract (3) A contract may be formed by the interaction of electronic agents: (4) (a) A contract may be formed by the interaction of an electronic