Regulations Governing the Security Assurance Plan and Processing Method for Personal Data of the Engineering Consulting Industry Article 4
The consulting firm shall clearly identify the specific purpose of the collection of personal information, and in accordance with the necessity of the specific purpose, define the type or scope of the personal information collection, processing and use, and periodically check the status of the personal information in its keeping.Where the aforementioned check reveals any of the following situations, the consulting firm shall, on its own initiative or at the request of the information owner, delete or discontinue the collection, processing or use of the relevant personal information:1. Personal information that is not within the necessary scope of the specific purpose;2. The specific purpose no longer exists or the time period has expired, and conditions described in Paragraph 3, Article 11of the Act does not exist.
中文原文 工程技術顧問業個人資料檔案安全維護計畫及處理辦法第4條
顧問公司應確認蒐集個人資料之特定目的，依特定目的之必要性，界定所蒐集、處理及利用個人資料之類別或範圍，並定期清查所保有之個人資料現況。
前項清查發現有下列情形者，顧問公司應主動或依當事人之請求，刪除、停止蒐集、處理或利用該個人資料：
一、非屬特定目的必要範圍內之個人資料。
二、特定目的消失或期限屆滿而無本法第十一條第三項但書之情形。
前項清查發現有下列情形者，顧問公司應主動或依當事人之請求，刪除、停止蒐集、處理或利用該個人資料：
一、非屬特定目的必要範圍內之個人資料。
二、特定目的消失或期限屆滿而無本法第十一條第三項但書之情形。