Enforcement Rules of the Personal Data Protection Act Article 10

"Statutory duties", as referred to under subparagraphs 2 and 5 of the proviso to paragraph 1 of Article 6, subparagraphs 2 and 3, paragraph 2 of Article 8, subparagraph 2 of the proviso to paragraph 1 of Article 10, subparagraph 1, paragraph 1 of Article 15, and Article 16 of the PDPA, shall mean the official authority of government agencies prescribed in the following legal instruments:1. laws, or those regulations authorized by laws;2. self-governance ordinances;3. those self-governance regulations authorized by laws or self-governance ordinances; or4. those regulations authorized by laws or central government regulations to govern the commissioning matters.
中文原文 個人資料保護法施行細則第10條
本法第六條第一項但書第二款及第五款、第八條第二項第二款及第三款、第十條但書第二款、第十五條第一款、第十六條所稱法定職務,指於下列法規中所定公務機關之職務:
一、法律、法律授權之命令。
二、自治條例。
三、法律或自治條例授權之自治規則。
四、法律或中央法規授權之委辦規則。

English translation for reference only; the Chinese text prevails. Not legal advice.