Regulations Governing the Security and Maintenance of Personal Data Files for the Vessel Carrier Article 16

The Operators shall take the following actions for information security management:1.Set up regulations for using portable equipment or storage media when using computers or automated machinery for collection, processing and use of personal information.2.When encryption is needed for the content of the personal information in custody, appropriate encryption mechanism shall be activated during the process of collection, processing and use of personal information.3.When backup is needed for the personal information during operation, the backup copy shall be protected as the original copy in accordance with The Act.4.When the media used to store personal information, such as paper copies, diskettes, tape, CD-ROM, microfiche or integrated circuit chips, are to be disposed or transferred for other use, the Operator shall take appropriate precautions to avoid leaking of personal information. If the tasks are commissioned to a third party, Article 11, mutatis mutandis, of These Regulations shall apply.