Regulations Governing Personal Information File Security Maintenance Plan and Processing Method for the Human Resources Recruitment Industry Article 12
The human resources recruitment industry shall establish the following supervisory procedure if the collection, processing or use of personal information is subcontracted in whole or in part:1.Confirm the scope, type, specific purpose and period for the subcontracted collection, processing and use of personal information.2.Ensure that the subcontractor adopts necessary security measures.3.In case of further subcontracting, verify the identity of the second-level subcontractor.4.If the subcontractor or its employee breaches any personal information protection legislation or the subcontracting agreement, require the subcontractor to inform the principal of the relevant measures and adopt remedy measures.5.If the principal has any other instructions to the subcontractors, such instructions must be considered.6.Upon termination or cancellation of the subcontracting relationship, must request the subcontractor to return the media in which personal information is stored and destroy or delete personal information stored and held by the subcontractor.7.Ensure that the subcontractor performs the requirements under subparagraphs 1 to 6.
中文原文 人力仲介業個人資料檔案安全維護計畫及處理辦法第12條
人力仲介業委託他人蒐集、處理或利用個人資料之全部或一部時，應對受託者建立下列監督作業程序：
一、確認所委託蒐集、處理或利用之個人資料之範圍、類別、特定目的及期間。
二、確認受託者採取必要安全措施。
三、有複委託者，確認複委託之對象。
四、受託者或其受僱人違反個人資料保護法令或委託契約條時，要求受託者向委託人通知相關事項，及採行補救措施。
五、委託人對受託者有保留指示者，其保留指示之事項。
六、委託關係終止或解除時，要求受託者返還個人資料之載體，及銷毀或刪除因委託事項儲存而持有之個人資料。
七、確認受託者執行第一款至第六款要求事項之情況。
一、確認所委託蒐集、處理或利用之個人資料之範圍、類別、特定目的及期間。
二、確認受託者採取必要安全措施。
三、有複委託者，確認複委託之對象。
四、受託者或其受僱人違反個人資料保護法令或委託契約條時，要求受託者向委託人通知相關事項，及採行補救措施。
五、委託人對受託者有保留指示者，其保留指示之事項。
六、委託關係終止或解除時，要求受託者返還個人資料之載體，及銷毀或刪除因委託事項儲存而持有之個人資料。
七、確認受託者執行第一款至第六款要求事項之情況。