Regulations Governing Personal Information File Security Maintenance Plan and Processing Method for the Human Resources Recruitment Industry Article 19

The human resources recruitment industry shall adopt the following measures with regard to information security administration in the collection, processing or use of personal information:1. Establish procedure guidelines.2. In using computerized equipment, establish regulations regarding the use of mobile devices or storage media.3. If personal information is maintained and must be encrypted or shielding, adopt proper encryption or shielding mechanism.4. In transmitting personal information, if encryption is required under different transmission methods, adopt a proper encryption mechanism and ensure the correctness of the recipient of information.5. Evaluate the necessity of backup based on the importance of information maintained and create backups and encryption thereon in the same manner as the originals. Maintain the media in which backup information is stored in a proper manner and regularly perform reverse testing to confirm effectiveness.6. When the media in which personal information is stored is to be disposed of or used for another purpose, duly destroy or delete the information stored in the media in a physical or other manner.7. Properly maintain the passcodes used in the administration mechanism and encryption mechanism.