The Electronic Transactions Law 17. The subscriber shall: (a) when using valid signature by decryption of the electronic signature, take care so that such decryption may not be used by others unlawfully; (b) in using the certificate issued for electronic signature during the period granted, take care to be completely accurate and correct with respect to facts relevant to him or facts that are to be inserted; (c) if the secrecy of decryption of the electronic signature has been compromised or is in a situation where compromise may possibly occur, inform the persons who are related to his electronic signature as arranged by the certification authority or by any suitable arrangement without delay. 18. The subscriber shall be responsible for the consequences of the loss and damage to be caused by his failure to comply with the provisions of section 17. Chapter VIII Electronic Record, Electronic Data Message and Electronic Signature 19. (a) Matters prescribed to be reduced to writing or to be signed under any existing law may be made by electronic record, electronic data message or electronic signature. (b) The electronic record, electronic data message or electronic signature made under sub-section (a) shall be lawful as if they were made under the relevant law. 20. The originator and the addressee shall, in accordance with the stipulated means, perform the sending, receiving or storing of electronic record, electronic data message or electronic signature. However, if there is a specific agreement between them, it may be performed in accordance with the means of such agreement. Chapter IX Contracts made by Electronic Technology 21. In making contracts unless otherwise agreed by the parties, offer acceptance of offer and other requirements may be made by electronic technology. 22. The electronic record and electronic data message shall be deemed to be that of the originator if it was sent by the originator himself or by a person who had the authority to act on behalf of the originator or by an information system programmed by or on behalf of the originator to operate automatically. 23. An addressee is entitled to regard an information electronic record or electronic data message as being that of the originator if it conforms to any of the following points and to act on that assumption: (a) sending in accordance with the procedure previously agreed between the originator and the addressee; Page 6 of 11