Regulations Governing Personal Data File Security Maintenance Plan and Processing Method for the Civil Aviation Enterprise Article 2

The Regulation is applicable to the following civil aviation enterprise:1.A national and foreign civil air transport enterprise operating scheduled air transport service.2.A general aviation enterprise operating international business charter service.The national and foreign civil air transport enterprises and the general aviation enterprises mentioned in the preceding paragraph (hereinafter referred to as “the enterprise”) shall draw up plans for maintaining the security of personal data files (hereafter referred to as “the Plans”), for the purpose of ensuring the secure maintenance and management of personal data files, to prevent the theft, alteration, damage, destruction or disclosure of personal data.The content of the Plans shall include the relevant organization and procedures prescribed in Articles 3 to 22, and the Plans shall be periodically reviewed and brought into conformity with related laws and regulations as newly prescribed or amended.