Jump to the main content block
Laws and Regulations Database of the Central Bank of the Republic of China-Article Content

Title:Regulations Governing the Clearinghouse’s Plan of Security Measures for Personal Information files Open new window for Chinese

Announced Date:Promulgated on November 30, 2012

Date: December 23, 2021

[Law Basis] [Print]

Chapter I  General Provisions

Article 1 
These Regulations are prescribed pursuant to Paragraphs 2 and 3, Article 27 of the Personal Information Protection Act.(hereinafter "the Act")

Article 2
The clearinghouse shall set up a security measures plan (hereinafter "the Plan") for personal information files under its possession to carry out security maintenance and management of personal information files in order to prevent them from being stolen, tampered, damaged, destroyed or leaked. The Plan shall cover related organizations and procedures stipulated in Articles 4 to 27 herein.

Article 3
The terms used in the Regulations shall be defined as follows: 1."Personal information management representative" shall mean the president of the   clearinghouse or an officer directly authorized by the president, who takes charge   of supervising the design, formulation, execution, and revision of the Plan and   its relevant decision making. 2."Personal information internal assessor representative" shall mean an officer   authorized by the president of the clearinghouse to take charge of supervising   internal assessors evaluating the performance of the Plan. 3."Relevant staff" shall mean employees of the clearinghouse who have to access   personal information in the process of business execution, including the fixed-term   and non-fixed-term contract employees and dispatched workers of the clearinghouse.

Article 4
The clearinghouse shall organize a task force for security maintenance of personal information files and allocate appropriate resources so as to be responsible for the design, formulation, execution, and revision of relevant procedures under the Plan. The staffing of the task force for security maintenance of personal information files includes the personal information management representative and the internal assessor. When the personal information management representative is served by an officer other than the president, this representative shall submit a written report about the task execution of the task force mentioned above to the president regularly.
:::