The mechanisms of preventing, reporting, and responding established by western pharmaceutical wholesalers or retailers in Article 4, Subparagraph 4 shall include the following matters:I. Take appropriate measures to control the damage to the parties concerned due to the incident , and report to the municipal or county/city competent authorities and the central competent authority within 72 hours from the discovery of the incident.II. Investigate the cause of the incident and damages, and notify the information owners or statutory agents.III. Review the deficiency and establish the prevention and improvement measures to prevent the incident from occurring again.When personal information is stolen, disclosed, altered, or otherwise infringed occur, western pharmaceutical wholesalers or retailers shall rapidly handle the incident according to the mechanisms of preventing, reporting, and responding in the preceding paragraph to protect the rights and interests of the personal information owners.In the event of any incident specified in the preceding paragraph, the competent authority may conduct any other routine inspections on western pharmaceutical wholesalers or retailers in accordance with the provisions in Article 22, Paragraph 1 of the Act, ordering relevant personnel to provide necessary explanations, cooperate on adopting relevant measures, or provide supporting documents, and perform any follow-up actions depending on the inspection results.The format of the reporting form stipulated in Paragraph 1, Subparagraph 1 is shown in the Attached Schedule.Attached Schedule Record Form for Incident Infringing Personal Information.pdfAttached Schedule Record Form for Incident Infringing Personal Information.doc