Regulations Governing Personal Data File Security Maintenance Plan and Processing Method for the Civil Aviation Enterprise Article 9

The enterprise shall examine whether its collection and processing of personal data has a specific purpose and legal imperative in compliance with the provisions of Article 19 of the Act.Examination of the use of personal data shall determine whether it is in compliance with the provisions of Article 20 Paragraph 1 of the Act, and is within the scope of the specific purpose of use; when personal data is used outside the scope of the specific purpose, examination shall determine whether there is a legally prescribed condition for use outside the specific purpose.
中文原文 民用航空運輸業個人資料檔案安全維護計畫及處理辦法第9條
業者應檢視蒐集、處理個人資料是否符合本法第十九條規定,具有特定目的及法定要件。
檢視利用個人資料是否符合本法第二十條第一項規定,符合特定目的內利用;於特定目的外利用個人資料時,應檢視是否具備法定特定目的外利用要件。

English translation for reference only; the Chinese text prevails. Not legal advice.