To address the incident of personal information kept by a parking operation business being stolen, altered, damaged, destroyed or disclosed, parking facility operators shall establish the following measures:1. Taking appropriate contingency measures to control the damage caused by the incident to the party.2. Investigating the incident and notifying the party of the incident and contingency measures taken in an appropriate way prescribed in Article 12 of this Regulation. The notification shall lay out the facts of the incident, the response measures adopted by the operator, and the consultation service hotline provided.3. Reviewing defects and developing preventive measures to prevent similar incidents from happening again.When the incidents under the preceding paragraph occur, the parking operation businesses shall report to the local authority in charge and notify the central competent authority (the MOTC) within 72 hours after the incidents; if the notification is not made within the time limit, the reason for the delay should be indicated (notification form as attached). After the local authority in charge receives the notifications, with the power granted in Articles 22 to 25 of this Regulation, the mentioned authority is entitled to take appropriate supervisory and management measures.Regulations for the Security Protection Plans for and Processing of Personal Information Files in Parking Facility Operation.odt