Personal Data Protection Act Article 22
Where the competent authority deems that a non-government agency is likely to violate the PDPA, or deems it necessary to verify its compliance the PDPA, it may conduct inspections in the following ways:1.notify the non-government agency or its relevant personnel to state their opinions;2.notify the non-government agency or its relevant personnel to provide necessary documents, data, or items, or take other cooperative measures; and3.conduct inspections independently or jointly with the central government authorities in charge of the industries concerned, special municipal governments, county (city) governments, or other relevant authorities by dispatching personnel with official identification documents, and may require relevant personnel to provide necessary explanations, take cooperative measures, or furnish relevant supporting documents.Regarding the inspection on reviewing the compliance with the PDPA as stated under the preceding paragraph, the regulations on the planning, evaluation method, the factors to be considered, the matters requiring cooperation among the central government authorities in charge of the industries concerned, special municipalities governments, county (city) governments, or relevant authorities, and other related matters shall be prescribed by the competent authority.When conducting the inspections specified under Paragraph 1, the competent authority may seize or copy personal data or personal data files that may be confiscated or used as evidence. For items that are subject to seizure or required to be copied, the competent authority may require the owner, holder, or custodian thereof to present or deliver them. Where there is no legitimate grounds for refusal to present or deliver such items, or resisting the seizure or copying, the competent authority may enforce compliance by means causing the least harm to the rights and interests of the non-government agency.Non-government agencies and their relevant personnel shall not evade, obstruct, or refuse any notification, entry, inspection, or measures carried out pursuant to Paragraph 1 or the preceding paragraph without legitimate grounds.When conducting the inspections under Subparagraph 3, Paragraph 1, the competent authority may be accompanied by information technology, telecommunications, legal, and/or other professional personnel.Personnel participating in the inspection shall bear a duty of confidentiality regarding any information learned or received during the inspection and shall take care to preserve the reputation of the inspected party.When conducting the inspections under Paragraph 1, the competent authority may, when necessary, request the central government authorities in charge of the industries concerned, the special municipal governments, the county (city) governments, or other relevant authorities (institutions) to cooperate in taking effective measures or providing assistance.
中文原文 個人資料保護法第22條
主管機關認非公務機關有違反本法規定之虞,或為檢視其落實本法情形而認有必要時,得依下列方式進行檢查:
一、通知非公務機關或其相關人員陳述意見。
二、通知非公務機關或其相關人員提供必要之文書、資料、物品或為其他配合措施。
三、自行或會同中央目的事業主管機關、直轄市、縣(市)政府或其他有關機關派員攜帶執行職務證明文件進入檢查,並得令相關人員為必要之說明、配合措施或提供相關證明資料。
前項檢視落實本法情形檢查作業之規劃、評估方式、考量因素、中央目的事業主管機關、直轄市、縣(市)政府或有關機關之協力事項及其他相關事項之辦法,由主管機關定之。
主管機關為第一項檢查時,對於得沒入或可為證據之個人資料或其檔案,得扣留或複製之。
對於應扣留或複製之物,得要求其所有人、持有人或保管人提出或交付;無正當理由拒絕提出、交付或抗拒扣留或複製者,得採取對該非公務機關權益損害最少之方法強制為之。
對於依第一項或前項所為之通知、進入、檢查或處分,非公務機關及其相關人員無正當理由不得規避、妨礙或拒絕。
主管機關為第一項第三款檢查時,得率同資訊、電信、法律或其他專業人員共同為之。
參與檢查之人員,對於因執行檢查所知悉或持有之資料,負保密義務,並應注意被檢查者之名譽。
第一項檢查之執行,主管機關於必要時得請求中央目的事業主管機關、直轄市、縣(市)政府或其他相關機關(構)配合採取有效措施或提供協助。
一、通知非公務機關或其相關人員陳述意見。
二、通知非公務機關或其相關人員提供必要之文書、資料、物品或為其他配合措施。
三、自行或會同中央目的事業主管機關、直轄市、縣(市)政府或其他有關機關派員攜帶執行職務證明文件進入檢查,並得令相關人員為必要之說明、配合措施或提供相關證明資料。
前項檢視落實本法情形檢查作業之規劃、評估方式、考量因素、中央目的事業主管機關、直轄市、縣(市)政府或有關機關之協力事項及其他相關事項之辦法,由主管機關定之。
主管機關為第一項檢查時,對於得沒入或可為證據之個人資料或其檔案,得扣留或複製之。
對於應扣留或複製之物,得要求其所有人、持有人或保管人提出或交付;無正當理由拒絕提出、交付或抗拒扣留或複製者,得採取對該非公務機關權益損害最少之方法強制為之。
對於依第一項或前項所為之通知、進入、檢查或處分,非公務機關及其相關人員無正當理由不得規避、妨礙或拒絕。
主管機關為第一項第三款檢查時,得率同資訊、電信、法律或其他專業人員共同為之。
參與檢查之人員,對於因執行檢查所知悉或持有之資料,負保密義務,並應注意被檢查者之名譽。
第一項檢查之執行,主管機關於必要時得請求中央目的事業主管機關、直轄市、縣(市)政府或其他相關機關(構)配合採取有效措施或提供協助。