Regulations on Tourist Hotel Enterprise Plans for Maintaining the Security of Personal Information Files Article 4

Tourist hotel enterprises shall identify specific purposes for the collection of personal information; define the classification and scope of the collection, processing and use of personal information, according to the necessities of the specific purposes; and periodically check the situation of personal information in their custody.Where a check as referred to in the preceding paragraph reveals personal information that is not within the necessary scope of the specific purposes, or that no longer needs to be retained due to the elimination of, or the expiration of a time limit for, a specific purpose, then the said information shall be deleted or destroyed or its collection, processing and use discontinued, as appropriate, in accordance with the provisions of Article 11 Paragraph 3 of the Act.Tourist hotel enterprises shall determine the current status of laws and regulations pertaining to the protection of personal information that are required to be followed and applied in respect of personal information in their custody.