Regulations on Tourist Hotel Enterprise Plans for Maintaining the Security of Personal Information Files Article 7
Tourist hotel enterprises shall set the following management procedures respectively for ordinary personal information and for personal information as specified in Article 6 of the Act:1. Examining and confirming whether the collection, processing and use of personal information includes personal information and the specific purposes thereof prescribed in Article 6 of the Act.2. Examining whether the collection, processing and use of personal information as prescribed in Article 6 of the Act is in compliance with the requirements of applicable laws and regulations.3. Where personal information does not fall within the ambit of Article 6 of the Act, but is considered to need special management, it may still be managed similarly or by the setting of a special management procedure.