Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 2

A travel agency that keeps personal information files shall adopt proper security measures to prevent them being stolen, altered, damaged, destroyed or disclosed. A consolidated travel agency and a Class-A travel agency shall also set up a plan for protecting the security of personal information files (hereinafter “Protection Plan”).A consolidated travel agency and a Class-A travel agency shall complete the setting up of the forementioned Protection Plan before it obtains a travel agency operating license. A travel agency that obtained an operating license prior to these Regulations becoming effective shall complete the Protection Plan within six months of the date of these Regulations becoming effective.
中文原文 旅行業個人資料檔案安全維護計畫及處理辦法第2條
旅行業保有個人資料檔案者,應採行適當之安全措施,防止個人資料被竊取、竄改、毀損、滅失或洩漏;其為綜合旅行業及甲種旅行業者,並應訂定個人資料檔案安全維護計畫(以下簡稱維護計畫)。
前項維護計畫之訂定,綜合旅行業及甲種旅行業應於取得旅行業執照前完成;其於本辦法施行前已取得旅行業執照者,應於本辦法施行之日起六個月內完成。

English translation for reference only; the Chinese text prevails. Not legal advice.