Regulations Governing Institutions Engaging In Credit Card Business Article 28

A credit card business institution that outsources its credit card business shall comply with the Regulations Governing Internal Operating Systems and Procedures for the Outsourcing of Financial Institution Operation.A card issuer that collaborates with another business in the issue of a co-brand card or affinity card shall observe the following provisions:1. The card issuer shall establish a mechanism for keeping customer information confidential, and establish internal operating systems and procedures with regard to the scope of collaboration, protection of customer's interests, risk management and internal controls.2. The card issuer shall demand that its partner comply with the provisions in Paragraphs 1 and 2 of Article 19 in conducting marketing activities.
中文原文 信用卡業務機構管理辦法第28條
信用卡業務機構辦理信用卡業務之作業委託他人處理,應依據金融機構作業委託他人處理內部作業制度及程序辦法等相關規定辦理。
發卡機構與業者合作發行聯名卡或認同卡,應依下列規定辦理:
一、應確實建立客戶資訊保密機制,並對合作事項範圍、客戶權益保障、風險管理及內部控制,訂定內部作業制度及程序。
二、要求合作業者辦理行銷事宜時,應符合第十九條第一項及第二項規定。

English translation for reference only; the Chinese text prevails. Not legal advice.