Enforcement Rules of the Personal Data Protection Act Article 32
The collected or processed personal data provided by a data subject before the effective date of the amended PDPA can continue to be processed and used within the scope of the specific purpose of collection. The use for another purpose shall comply with the provisions under the amended PDPA.
中文原文 個人資料保護法施行細則第32條
本法修正施行前已蒐集或處理由當事人提供之個人資料，於修正施行後，得繼續為處理及特定目的內之利用；其為特定目的外之利用者，應依本法修正施行後之規定為之。