Article 22 (3) of the Electronic Communications and Transactions Act states that a cryptography provider is not required to disclose confidential information or trade secrets in respect of its cryptography services or products. However, there is no comprehensive trade secret regulation covering other services or products.