Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Tourist Amusement Enterprises Article 4

A tourist amusement enterprise shall clearly identify the specific purpose of the collection of personal information, and in accordance with the necessity of the specific purpose, define the type or scope of the personal information collection, processing and use, and periodically check the status of the personal information in its keeping.Where the forementioned check reveals any of the following situations, the tourist amusement enterprise shall, on its own initiative or at the request of the person concerned, delete or discontinue the collection, processing or use of the relevant personal information:1.Personal information that is not within the necessary scope of the specific purpose;2.The specific purpose no longer exists or the time limit has expired, and the proviso in Article 11 Paragraph 3 of the Act does not apply.