Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 12
For managing protection of the security of personal information files, a travel agency shall designate a person or set up an organization to be specially responsible for this purpose, and shall designate appropriate sources of information.The tasks of the forementioned specially responsible person or organization shall be as follows:1.Planning, setting, revising and implementing the Protection Plan and matters concerning the method of dealing with personal information after cessation of business, and periodically reporting to the person in charge of the travel agency.2.Setting policy for managing the protection of personal information, and ensuring that all members of staff are informed about and clearly understand the basis for, specific purpose of, and other protection-related matters concerning the collection, processing and use of personal information.3.Periodically conducting basic awareness guidance or specialized instruction and training for all members of staff, to ensure that they clearly understand the provisions of law and regulation and the scope of each staff member’s responsibility regarding the protection of personal information, and the methods or management measures for all kinds of matters concerning the protection of private information.
中文原文 旅行業個人資料檔案安全維護計畫及處理辦法第12條
旅行業就個人資料檔案安全維護管理，應指定專人或建立專責組織，並配置相當資源。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行維護計畫及業務終止後個人資料處理方法等相關事項，並定期向旅行業負責人報告。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行維護計畫及業務終止後個人資料處理方法等相關事項，並定期向旅行業負責人報告。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。