Enforcement Rules of the Personal Data Protection Act Article 30

When retaining or duplicating the personal data or the files thereof that may be confiscated or admitted as evidence in accordance with paragraph 2 of Article 22 of the PDPA, a receipt specifying the name, quantity, the owner, the location and time of retaining or duplicating of such data or files shall be issued.After an inspection has been conducted in accordance with paragraphs 1 and 2 of Article 22 of the PDPA, a record thereof shall be made.If the record mentioned in the preceding paragraph is made onsite, such record shall be reviewed and signed by the inspected agency. A copy of the record shall be promptly given to the inspected agency. If the inspected agency refuses to sign the record, the reason thereof shall be specified on such record.If the record is made off site afterwards, such record shall be delivered to the inspected agency, which shall be informed that it may submit relevant statements within a certain period of time.