The enterprise shall adopt the following matters for responding to the theft, alteration, damage, destruction or disclosure of personal data in its custody:1.Adopt appropriate responsive measures to control consequential harm to the parties concerned.2. Ascertain the current situation of the incident, and use appropriate means to notify the parties concerned. The notified information includes the fact of the incident which occurs on personal data, measures which the enterprise takes and the advisory service line provided.3.Formulate preventive mechanisms, to avoid the recurrence of such kind of incident.The enterprise shall fill in the Personal data infringement incident notification and record form (the format is shown in the attached table) and notify Civil Aviation Administration of MOTC within 72 hours after discovering the incident mentioned in the preceding paragraph. If the notification is not made within the time limit, the reason for the delay shall be attached.After the incident in the preceding paragraph is reported, the competent authority may take appropriate supervision and management measures in accordance with the functions and powers conferred by Articles 22 to 26 of the Act.Attachment：Personal Data Infringement Incident Notification and Record Form.PDF