Personal Data Protection Act Article 51-1

Regarding the supervision and management matters concerning non-governmental agencies stipulated under Paragraphs 1 and 3 to 7 of Article 22, Articles 23 to 26, and Articles 47 to 50, within six (6) years from the date of establishment of the competent authority, the competent authority will propose to the Executive Yuan for announcement of a specified scope of non-governmental agencies that shall remain under the jurisdiction of the central government authorities in charge of the industries concerned, special municipal governments, and county (city) governments.The competent authority shall, after consultation with relevant authorities every two (2) years, propose to the Executive Yuan the adjustment or reduction of the scope of non-government agencies specified in the announcement referred to under the preceding paragraph.The central government authorities in charge of the industries concerned may require non-government agencies within the scope announced in the preceding two paragraphs to formulate personal data file security and maintenance plans or methods for processing personal data after business termination.The central government authorities in charge of the industries concerned will prescribe, pursuant to the regulations prescribed by the competent authority under Paragraph 2, Article 20-1, the regulations on the content, implementation methods or standards, and other relevant requirements for the plans and processing methods referred to under the preceding paragraph, and may prescribe stricter requirements.
中文原文 個人資料保護法第51-1條
第二十二條第一項、第三項至第七項、第二十三條至第二十六條、第四十七條至第五十條所定對非公務機關之監督管理事項,於主管機關成立之日起六年內,由主管機關報請行政院公告一定範圍之非公務機關,仍由中央目的事業主管機關或直轄市、縣(市)政府管轄。
主管機關應每二年會商相關機關後,報請行政院調整減列前項公告所定一定範圍之非公務機關。
中央目的事業主管機關得指定前二項公告範圍之非公務機關訂定個人資料檔案安全維護計畫或業務終止後個人資料處理方法。
前項計畫、處理方法應具備之內容、執行方式或基準及其他相關事項之辦法,由中央目的事業主管機關比照主管機關依第二十條之一第二項訂定之辦法定之;並得為更嚴格之規定。

English translation for reference only; the Chinese text prevails. Not legal advice.