Regulations Governing Personal Data File Security Maintenance Plan and Processing Method for the Civil Aviation Enterprise Article 17

The enterprise may adopt the following data security management measures:1. When using computer or automatic machine related equipment to collect, process and use personal data, appropriately set rules for use of portable devices or storage media.2. If the content of personal data under custody has a need for encryption, adopt appropriate encryption mechanisms when collecting, processing or storing the data.3. When a work process entails a need for backing up personal data, it shall be accorded the same protection as original documents in accordance with the provisions of the Act.4. Where personal data is recorded on or in paper, magnetic disk, magnetic tape, compact disk, microfiche, IC chip, or other medium, appropriate preventive measures must be adopted to prevent the disclosure of such personal data when the medium is scrapped or transferred to other purpose.
中文原文 民用航空運輸業個人資料檔案安全維護計畫及處理辦法第17條
業者得採取下列資料安全管理措施:
一、運用電腦或自動化機器相關設備蒐集、處理或利用個人資料時,宜訂定使用可攜式設備或儲存媒體之規範。
二、針對所保有之個人資料內容,如有加密之需要,於蒐集、處理或利用時,宜採取適當之加密機制。
三、作業過程有備份個人資料之需要時,應比照原件,依本法規定予以保護之。
四、個人資料存在於紙本、磁碟、磁帶、光碟片、微縮片、積體電路晶片等媒介物,嗣該媒介物於報廢或轉作其他用途時,宜採適當防範措施,以免由該媒介物洩漏個人資料。

English translation for reference only; the Chinese text prevails. Not legal advice.