Regulations Governing the Security Assurance Plan and Processing Method for Personal Data of the Engineering Consulting Industry Article 5
The consulting firm shall, in accordance with the scope of personal information as defined in the previous article and the related procedures, analyze the risks that may occur, and set appropriate control measures based on the results of risk analysis.
中文原文 工程技術顧問業個人資料檔案安全維護計畫及處理辦法第5條
顧問公司應依據前條所界定之個人資料範圍及其相關業務流程，分析可能產生之風險，並依據風險分析之結果，訂定適當之管控措施。