Enforcement Rules of the Personal Data Protection Act Article 21

“Necessary for the performance of an official or business duty", as referred to in the proviso to paragraph 3 of Article 11 of the PDPA, shall mean any of the following circumstances:1. where a retention period is prescribed by laws or regulations, or agreed upon under a contract;2. where there are sufficient reasons to believe that the deletion of the personal data will infringe upon the data subject's interests that warrant protection; or3. where there are other legitimate reasons for not erasing the personal data.