Regulations on Tourist Hotel Enterprise Plans for Maintaining the Security of Personal Information Files Article 5

A tourist hotel enterprise may, in accordance with the defined scope of personal information and defined procedures for the collection, processing and use of personal information, analyze the possible occurrence of risk, and based on the results of risk analysis, set appropriate control measures.
中文原文 觀光旅館業個人資料檔案安全維護計畫辦法第5條
觀光旅館業得依已界定之個人資料範圍及個人資料蒐集、處理、利用之流程,分析可能產生之風險,並根據風險分析之結果,訂定適當之管控措施。

English translation for reference only; the Chinese text prevails. Not legal advice.