The consulting firm shall adopt the following mechanisms in the event of personal information being stolen, altered, damaged, destroyed or disclosed in custody:1. Taking appropriate response measures to control and minimize the damages to the information owner and reporting the incident to the Public Construction Commission, Executive Yuan in attached form within 72 hours.2. Making full investigation on the incident, and notifying the information owner through appropriate means. The content of the notification shall include the fact of the incident which occurred on personal data, the responsive measures taken by the consulting firm, and the advisory service line provided.3. Reviewing the deficiency and formulating preventive mechanism, to prevent similar incident.The Public Construction Commission, Executive Yuan can conduct the inspections in accordance with Article 22 of the Act when the consulting firm has any circumstances prescribed in the preceding paragraph, and take any further action depending on the inspection result.Attached Form.odt