Regulations Governing the Security Assurance Plan and Processing Method for Personal Data of the Engineering Consulting Industry Article 3
The consulting firm may appoint designated personnel or establish a dedicated organization to enforce personal data security management with the allocation of appropriate resources.The responsibility of the designated personnel or dedicated organization as referred to in the preceding paragraph shall be as follows:1. Planning, prescribing, amending and executing the Assurance Plan, and methods of processing personal information after termination of business.2. Setting up personal information protection management policy and disclosing the related requirements, specific purposes and other related protection practices involving collection, processing and using personal information to the staff members.3. Periodically conducting basic knowledge introduction or professional education and training for staff members, to ensure that they clearly understand the related provisions of laws and regulations, the scope of staff members’ responsibilities, and the various methods or management measures for protecting personal information.
中文原文 工程技術顧問業個人資料檔案安全維護計畫及處理辦法第3條
顧問公司就個人資料檔案安全維護管理得指定專人或建立專責組織，並配置相當資源。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行維護計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行維護計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。