Regulations Governing Personal Data File Security Maintenance Plan and Processing Method for the Civil Aviation Enterprise Article 3
The enterprise may appoint designated personnel or establish a dedicated organization to enforce personal data security with the allocation of appropriate resources.The responsibility of the designated personnel or dedicated organization as referred to in the preceding paragraph shall be as follows:1.Planning, prescribing, amending and executing matters concerning plans for maintaining the security of personal data files, and methods of handling personal data after termination of business.2. Stipulating policies for the protection and management of personal data, as the basis and specific purposes for the collection, processing and use of personal data, and other matters concerning protection, and announcing these to ensure that they are clearly understood by all members of staff.3. Periodically conducting basic knowledge guidance or specialist education and training for staff members, to ensure that they clearly understand the provisions of laws and regulations relating to personal data protection, the scope of staff members’ responsibilities relating to personal data protection, and the various methods or management measures for protecting personal data.
中文原文 民用航空運輸業個人資料檔案安全維護計畫及處理辦法第3條
業者就個人資料檔案安全維護管理得指定專人或建立專責組織，並配置相當資源。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行本計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行本計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。