Rules Governing the Administration of Electronic Payment Business Article 29
An electronic payment institution shall provide the service of integration and conveyance of receipt/payment information for contracted institutions or conveyance of information between users or between the user and the contracted institution in accordance with the following provisions:1. Sign contracts with users, contracted institutions, or other institutions, and agree on the rights, obligations, and responsibilities of both parties.2. For the provided terminal equipment or application programs, take appropriate protection and control measures in order to prevent the receipt/payment information from being leaked, tampered, or transmit wrongfully.3. The obtained and stored receipt/payment information shall be limited to the ones which are necessary for providing service.4. The information known by operating business, unless otherwise provided in laws and regulations, or otherwise expressly agreed by contract or in writing, shall not be used for any purpose other than operating business.
中文原文 電子支付機構業務管理規則第29條
電子支付機構提供特約機構收付訊息整合傳遞或使用者間及使用者與特約機構間訊息傳遞服務，應符合下列規定：
一、與使用者、特約機構或其他機構簽訂契約，約定雙方之權利、義務及責任。
二、對於所提供之服務，採取適當防護及控管措施，避免訊息遭洩漏、竄改或傳遞不法訊息。
三、所取得及儲存之收付訊息，以提供服務所必要者為限。
四、對於執行業務所知悉之相關資訊，除法令另有規定、經簽訂契約或書面明示同意者外，不得為執行業務目的外之利用。
一、與使用者、特約機構或其他機構簽訂契約，約定雙方之權利、義務及責任。
二、對於所提供之服務，採取適當防護及控管措施，避免訊息遭洩漏、竄改或傳遞不法訊息。
三、所取得及儲存之收付訊息，以提供服務所必要者為限。
四、對於執行業務所知悉之相關資訊，除法令另有規定、經簽訂契約或書面明示同意者外，不得為執行業務目的外之利用。