Regulations Governing the Security and Maintenance of Personal Data Files for the Vessel Carrier Article 9

The Operators shall review whether such actions as collection and processing of personal information satisfy the specific purpose and statutory criteria as described in Article 19 of The Act and whether the use of personal information falls into the scope of necessity within the scope of the specified purpose as described in Paragraph 1, Article 20 of The Act. When using the personal information outside the scope of the specified purpose, the Operators shall review whether such actions satisfy the criteria of using the information outside the scope of the specified purpose.
中文原文 船舶運送業個人資料檔案安全維護計畫及處理辦法第9條
業者應檢視蒐集、處理個人資料是否符合本法第十九條規定,具有特定目的及法定要件,並檢視利用個人資料是否符合本法第二十條第一項特定目的必要範圍內利用之規定;於特定目的外利用個人資料時,應檢視是否具備法定特定目的外利用要件。

English translation for reference only; the Chinese text prevails. Not legal advice.