Regulations on Tourist Hotel Enterprise Plans for Maintaining the Security of Personal Information Files Article 3
A tourist hotel enterprise may assign a specially appointed person or persons, or set up a specially responsible organization, to securely maintain and manage personal information files, allocate appropriate resources, and periodically report to the person in charge of the tourist hotel enterprise.The responsibilities of the specially appointed person or persons or specially responsible organization as referred to in the preceding paragraph shall be as follows:1. Planning, prescribing, amending and executing matters concerning plans for maintaining the security of personal information files, and methods of handling personal information after termination of business.2. Stipulating policies for the protection and management of personal information, as the basis and specific purposes for the collection, processing and use of personal information, and other matters concerning protection, and announcing these to ensure that they are clearly understood by all members of staff.3. Periodically conducting basic knowledge guidance or specialist education and training for staff members, to ensure that they clearly understand the provisions of laws and regulations relating to personal information protection, the scope of staff members’ responsibilities relating to personal information protection, and the various methods or management measures for protecting personal information.
中文原文 觀光旅館業個人資料檔案安全維護計畫辦法第3條
觀光旅館業就個人資料檔案安全維護管理得指定專人或建立專責組織，配置相當資源，並定期向觀光旅館營業負責人報告。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行個人資料檔案安全維護計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。
前項專人或專責組織之任務如下：
一、規劃、訂定、修正與執行個人資料檔案安全維護計畫及業務終止後個人資料處理方法等相關事項。
二、訂定個人資料保護管理政策，將其所蒐集、處理及利用個人資料之依據、特定目的及其他相關保護事項，公告使其所屬人員均明確瞭解。
三、定期對所屬人員施以基礎認知宣導或專業教育訓練，使其明瞭個人資料保護相關法令之規定、所屬人員之責任範圍及各種個人資料保護事項之方法或管理措施。