Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 18
A travel agency shall implement proper measures, adopting mechanisms for recording or keeping automated machine or equipment tracking data or other relevant proof of the use of personal information, to provide whenever necessary a clear account of the implementation status of its Protection Plan; and the allotted time for the retention of related records shall be at least five years.
中文原文 旅行業個人資料檔案安全維護計畫及處理辦法第18條
旅行業應採行適當措施，採取個人資料使用紀錄、留存自動化機器設備之軌跡資料或其他相關證據保存機制，以供必要時說明其所定維護計畫之執行情況；其相關紀錄之保存期限，至少為五年。