Regulations Governing Personal Data File Security Maintenance Plans and Processing Methods After Termination of Business for Online Retail Industry and Online Retailing Service Platform Article 13

The operations security management measures mentioned in Article 11 shall include the following:1.Formulating and implementing norms for the use of the personal data in storage media.2.Before disposing of personal data storage media or using it for other purposes, all personal data stored in the media shall be destroyed or deleted in an appropriate manner. When commissioning another party to perform the above-mentioned actions, the provisions of Article 9, Subparagraph 12 shall apply mutatis mutandis, and shall be subject to appropriate supervision.3.In the collection, processing, or use of personal data, if there is a necessity for encryption or masking, it shall be conducted using appropriate encryption or masking mechanisms.4.Appropriate security protection mechanisms shall be in place when transmitting personal data.5.Depending on the importance of the stored personal data, appropriate backup mechanisms shall be adopted; such backups shall be protected as with the original data.