Regulations for the Security and the Maintenance of Personal Information Files in Wholesaling and Retailing Western Pharmaceuticals Article 16

The management measures of information security and personnel established by western pharmaceutical wholesalers or retailers in Article 4, Subparagraph 3 shall include the following matters:I. Establish management mechanisms based on business needs, set different access rights for subordinates to control their access to personal information, and periodically verify the appropriateness and necessity of access rights.II. Examine the nature of businesses and designate personnel responsible for personal information collection, processing, use, and other procedures.III. Require subordinates to properly retain storage media containing personal information, and agree on safekeeping and confidentiality obligations.IV. Cancel the ID number of subordinates after the termination of employment. The subordinates are required to hand over the personal information documents and data obtained from work, and they may not take or use them after termination of employment.