The response measures mentioned in the preceding article shall include response mechanisms for stolen, tampered, damaged, lost, or leaked personal data. The content of the measures shall contain specific regulations pertaining to the following matters:1.Methods for reducing and controlling damages to the Parties caused by the incident.2.Notifying the Parties, in a timely manner and via appropriate methods such as e-mail, text message, telephone, or other means convenient for the Parties, regarding occurrence of the incident, management status thereof, the dedicated phone number for subsequent follow-up, and other channels for enquiries.3.Corrective and preventive mechanisms to avoid recurrence of similar incidents.4.Requirement that, in the event of a major incident, notification be sent within 72 hours of discovering the incident to the municipal or county (city) competent authority where the company is headquartered via email, using the format of the attached form, with a copy of the notification sent to the Ministry. The reporting shall be updated in a timely manner in accordance with the development of the incident. In addition, the overall investigation and handling process, outcome, and review shall be submitted to the municipal or county (city) competent authority where the company is headquartered, with a copy sent to the Ministry.A “major incident” as mentioned in the preceding Subparagraph 4 refers to a situation in which the stolen, tampered, damaged, lost, or leaked personal data will endanger normal operations of the online retail industry or the rights and interests of a large number of parties.Attachment Personal Data Infringement Incident Notification and Record Form.pdf