E Commerce Law

1. Without prejudice to the provisions of other laws, a service provider shall not retain a consumer's personal data or electronic communications, except for the period required by the nature of the electronic transaction, unless a different period is agreed upon. Necessary measures shall be taken to protect and maintain the confidentiality of such data during the retention period. The service provider shall be responsible for protecting the consumer's electronic communications or personal data in his possession or in the possession of the entities or agents thereof he deals with. The Regulations shall specify personal data deemed confidential. 2. A service provider shall not use a consumer's personal data or electronic communications for unauthorized or impermissible purposes, nor disclose the same to other entities, whether at no cost or for a consideration, unless the consumer consents to such disclosure or is required by law.