Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 16

A travel agency shall adopt the following mechanisms for response to theft, alteration, damage, destruction, disclosure or other such accident happening to personal information in its keeping:1.Adopt proper emergency measures to control and reduce harm from the accident to the person concerned, and notify the Tourism Bureau of the Ministry of Transportation and Communications.2.Investigate the circumstances of the accident and notify the person concerned by appropriate means in accordance with the provisions of Article 12 of the Act, and also inform such person of responsive measures already taken.3.Examine deficiencies and formulate preventive mechanisms to avoid the reoccurrence of such kind of accident.
中文原文 旅行業個人資料檔案安全維護計畫及處理辦法第16條
旅行業為因應所保有之個人資料發生被竊取、竄改、損毀、滅失或洩漏等事故,應採取下列機制:
一、採取適當之應變措施,以控制並降低事故對當事人之損害,並通報交通部觀光局。
二、查明事故之狀況並依本法第十二條規定以適當方式通知當事人,並告知已採取之因應措施。
三、檢討缺失並研擬預防機制,避免類似事故再次發生。

English translation for reference only; the Chinese text prevails. Not legal advice.