C 2618 2010 No. Electronic Transactions 1 12. The administration of electronic signature shall be in accordance 2 with rules, guidelines and standards as may be prescribed by NITDA. 3 13. Electronic Signature Certification services shall be provided by a 4 certification authority in accordance with the provisions of the accreditation 5 granted under the electronic signature administration. 6 14. An electronic signature created or used outside Nigeria shall have 7 the same legal effect in Nigeria as an electronic signature created or used in 8 Nigeria if it satisfies the Nigeria Certification Standards. 9 15. A certification authority shall maintain for a minimum period as may 10 be prescribed in the certification administration guidelines: 11 (a) the documentation concerning the organizational, technical and 12 security means used for compliance with the requirements arising from 13 law and from the relevant regulations; 14 (b) originals of applications for issuance of certificates together with the 15 respective documents proving identity of the applicant; 16 (c) the documents corresponding to any revoked certificate. 17 16. An accredited certification authority shall be liable for any breach 18 of its obligations and shall pay fines as may be specified in the certification 19 administration guidelines. 20 17.—(1) The provisions of this Part shall apply to the processing of 21 personal data wholly or partly by automated means, and to the processing 22 otherwise than by automated means of personal data which form part of a 23 filing system or are intended to form part of a filing system. 24 25 (a) in the course of an activity concerning public safety, defence, national 26 27 28 (2) The provisions shall not apply to the processing of personal data: security (b) concerns the activities of law enforcement, intelligence or prosecuting agencies in areas of criminal law; 29 (c) by a natural person in the course of personal or domestic activity. 30 18.—(1) Personal data shall only be processed if at least one of the 31 following conditions are met: (a) the data owner has given his consent to the processing;