Regulations Governing Personal Data File Security Maintenance Plans and Processing Methods After Termination of Business for Online Retail Industry and Online Retailing Service Platform Article 3
To comply with the provisions of this Act, these Regulations, and other relevant laws and regulations, and in accordance with the business scale and characteristics, online retail industry shall reasonably allocate operating resources to establish a personal data management unit or an appropriate organization. Appropriate resources shall be allocated for the following responsibilities:1.Formulation and revision of a personal data protection and management policy (hereinafter referred to as the PDPMP).2.Formulation, revision and implementation of a security and maintenance plan for the protection of personal data files and guidelines on disposing personal data following a business termination (hereinafter referred to as the SMP).Formulation and revision of PDPMP and SMP shall be approved by the online retail industry’s representative or other authorized persons in charge.
中文原文 網際網路零售業及網際網路零售服務平台業個人資料檔案安全維護計畫及業務終止後個人資料處理作業辦法第3條
網際網路零售業為符合本法、本辦法及其他相關法令之規定，應依其業務規模及特性，衡酌經營資源之合理分配，設個人資料管理單位或適當組織，並配置適當資源，負責下列事項：
一、個人資料保護管理政策（以下簡稱個資保護政策）之訂定及修正。
二、個人資料檔案安全維護計畫及業務終止後個人資料處理方法（以下簡稱安全維護計畫）之訂定、修正及執行。
個資保護政策及安全維護計畫之訂定或修正，應由網際網路零售業之代表人或其授權之其他負責人核定之。
一、個人資料保護管理政策（以下簡稱個資保護政策）之訂定及修正。
二、個人資料檔案安全維護計畫及業務終止後個人資料處理方法（以下簡稱安全維護計畫）之訂定、修正及執行。
個資保護政策及安全維護計畫之訂定或修正，應由網際網路零售業之代表人或其授權之其他負責人核定之。