Regulations Governing Personal Data File Security Maintenance Plan and Processing Method for the Civil Aviation Enterprise Article 5

The enterprise shall, in accordance with the scope of personal data as defined in the previous article and the related procedures, analyze the possible occurrence of risk, and set appropriate control measures based on the results of risk analysis.
中文原文 民用航空運輸業個人資料檔案安全維護計畫及處理辦法第5條
業者應依據前條所界定之個人資料範圍及其相關業務流程,分析可能產生之風險,並依據風險分析之結果,訂定適當之管控措施。

English translation for reference only; the Chinese text prevails. Not legal advice.