Regulations Governing the Security Assurance Plan and Processing Method for Personal Data of the Engineering Consulting Industry Article 15
The consulting firm may adopt the following personnel management measures:1. In accordance with operational needs of each particular task of the collection, processing and use of personal information, appropriately setting varying limits on the authority of each staff member and controlling their access to personal data.2. Reviewing the personnel with responsibility for each relevant work procedures involving the collection, processing and use of personal information.3. Requiring each staff member to assume the duty of confidentiality.4. All staff members shall, upon leaving employment or completing assigned work, return personal information taken into possession for the performance of work duties, and may not privately retain copies of and continue to use such personal information.
中文原文 工程技術顧問業個人資料檔案安全維護計畫及處理辦法第15條
顧問公司得採取下列人員管理措施：
一、依據蒐集、處理及利用個人資料個別作業之需要，適度設定所屬人員不同之權限並控管其接觸個人資料。
二、檢視各相關業務流程涉及蒐集、處理及利用個人資料之負責人員。
三、要求所屬人員負有保密義務。
四、所屬人員離職或完成受指派工作後，應將其執行業務所持有之個人資料辦理交接，亦不得私自持有複製物而繼續使用該個人資料。
一、依據蒐集、處理及利用個人資料個別作業之需要，適度設定所屬人員不同之權限並控管其接觸個人資料。
二、檢視各相關業務流程涉及蒐集、處理及利用個人資料之負責人員。
三、要求所屬人員負有保密義務。
四、所屬人員離職或完成受指派工作後，應將其執行業務所持有之個人資料辦理交接，亦不得私自持有複製物而繼續使用該個人資料。