Regulations Governing the Production and Issuance of the National Health Insurance Card and Data Storage and Access Article 16
The Insurer shall take the following measures in respect of data that is uploaded by the contracted medical care institutions:1. Put into place strict information security mechanisms and formulate standard operation procedures for the information system that stores and utilizes such data, and carry out the implementation in strict compliance;2. Construct monitoring and management mechanisms that ensure transmission quality, security, and efficiency of connections of the Virtual Private Network; and3. Install a proper mechanism to protect the originally uploaded data and internally processed data from being accessed by unauthorized personnel. Staff shall be properly authorized before accessing the data.
中文原文 全民健康保險保險憑證製發及存取資料管理辦法第16條
保險人對保險醫事服務機構上傳之資料，應採取下列措施：
一、儲存、運用該資料之資訊系統，應建置嚴格之資訊安全機制，明定標準作業程序，並落實執行。
二、健保資訊網之線路，應建立可確保資訊傳送品質、安全及效率之監控管理機制。
三、原始上傳資料及經內部處理後之資料，有適當保護機制，避免未經授權人員接觸資料；內部人員接觸及使用資料時，應經授權。
一、儲存、運用該資料之資訊系統，應建置嚴格之資訊安全機制，明定標準作業程序，並落實執行。
二、健保資訊網之線路，應建立可確保資訊傳送品質、安全及效率之監控管理機制。
三、原始上傳資料及經內部處理後之資料，有適當保護機制，避免未經授權人員接觸資料；內部人員接觸及使用資料時，應經授權。