Regulations for Collection and Management of Information on Sexual Offenders Article 15

Judicial police authorities and commissioned agencies must designate specific personnel to manage the information security maintenance of offender data. The transmission of electronic files of offender data should be conducted in a manner that complies with information security standards.The use, inquiry, or transmission of offender data by judicial police authorities and commissioned agencies must involve specific personnel who set up exclusive accounts, passwords, and account permissions to ensure information security.The security control regulations for these exclusive accounts and passwords are as follows:1. Commissioned agencies shall distinguish system administrators and system users' permissions according to the level of the judicial police authority. The addition, deletion, and modification of offender data must be reviewed by the data manager of the central police administration.2. System users must properly preserve their account and password, must not provide it for others to use, and the use of the same account and password by two or more people is prohibited.3. When system users undergo job adjustments, transfers, suspensions, or leave their positions, the system administrator must immediately handle the related changes.4. System users must change their passwords regularly at least every three months; the password must be at least eight characters long and of a certain complexity; if there is a risk of leakage, the password must be changed immediately.