In response to incidents such as theft, alteration, damage, loss, or leakage of personal information in custody, the Operators shall adopt the following mechanisms:1. Take appropriate response measures to control and minimize the damages to the information owner.2. Make a full investigation of the incident, and notify the information owner through appropriate means in accordance with Article 12 of The Act. The notice shall include facts regarding the data breach, the measures taken in response, and contact information for consultation services.3. Review the issues and set up preventive mechanism to prevent similar incidents.The Operators shall notify the Maritime and Port Bureau, MOTC, within 72 hours after discovering the incident mentioned in the preceding paragraph. If the notification is not made within the time limit, the reason for the delay shall be attached (the notification format is shown in the attached table).After the incident in the preceding paragraph is reported, the competent authority may take appropriate supervision and management measures in accordance with the functions and powers conferred by Articles 22 to 26 of the Act.Personal Information Infringement Incident Notification and Record Form.odt