Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Travel Agencies Article 6

A travel agency shall examine whether its collection and processing of personal information complies with the provisions of Article 19 of the Act, having a specific purpose and meeting a need prescribed by law; and shall also examine whether its use of personal information complies with the provisions of Article 20 Paragraph 1 of the Act as necessary use within the scope of the specific purpose of collection. Where the use of personal information is outside the scope of the specific purpose, the travel agency shall examine whether it meets the conditions for use outside the specific purpose as prescribed by law.
中文原文 旅行業個人資料檔案安全維護計畫及處理辦法第6條
旅行業應檢視蒐集、處理個人資料是否符合本法第十九條規定,具有特定目的及法定要件,並檢視利用個人資料是否符合本法第二十條第一項特定目的必要範圍內利用之規定;於特定目的外利用個人資料時,應檢視是否具備法定特定目的外利用要件。

English translation for reference only; the Chinese text prevails. Not legal advice.