Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 14

A travel agency shall adopt the following information security management measures:1.When computer or automated machine related equipment is used to collect, process or use personal information, rules should be set for the use of portable devices or storage media.2.If there is a need for heightened confidentiality in respect of the content of personal information held in keeping, an appropriate mechanism for encryption should be adopted when collecting, processing or using such information.3.When a business process requires the backing up of personal information, the backup should be accorded the same protection as the original information in accordance with the provisions of the Act.4.When paper, magnetic disc, magnetic tape, compact disc, microfilm, integrated circuit, or any other medium used for keeping personal information is scrapped or transferred to other use, proper precautionary measures must be taken to prevent the disclosure of personal information; when another party is commissioned to perform this, Article 9 of these Regulations applies mutatis mutandis.