Personal Data Protection Act Article 9

Government or non-government agencies shall, before processing or using the personal data collected in accordance with Article 15 or 19 which was not provided by the data subject, inform the data subject of their source of data and other information specified in subparagraphs 1 through 5, paragraph 1 of the preceding article.The obligation to inform as prescribed in the preceding paragraph may be exempt under any of the following circumstances:1.under any of the circumstances provided in paragraph 2 of the preceding article;2.where the personal data has been manifestly made public by the data subject or publicized legally;3.where it is unable to inform the data subject or his/her legal representative;4.where it is necessary for statistics gathering or academic research in pursuit of public interests, provided that such data, as processed by the data provider or as disclosed by the data collector, may not lead to the identification of a specific data subject; or5.where the personal data is collected by mass communication enterprises for the purpose of news reporting for the benefit of public interests.The obligation to inform as prescribed in paragraph 1 may be performed at the time of the first use of the personal data towards the data subject.
中文原文 個人資料保護法第9條
公務機關或非公務機關依第十五條或第十九條規定蒐集非由當事人提供之個人資料,應於處理或利用前,向當事人告知個人資料來源及前條第一項第一款至第五款所列事項。
有下列情形之一者,得免為前項之告知:
一、有前條第二項所列各款情形之一。
二、當事人自行公開或其他已合法公開之個人資料。
三、不能向當事人或其法定代理人為告知。
四、基於公共利益為統計或學術研究之目的而有必要,且該資料須經提供者處理後或蒐集者依其揭露方式,無從識別特定當事人者為限。
五、大眾傳播業者基於新聞報導之公益目的而蒐集個人資料。
第一項之告知,得於首次對當事人為利用時併同為之。

English translation for reference only; the Chinese text prevails. Not legal advice.