The Act Governing Electronic Payment Institutions Article 32

A specialized electronic payment institution shall ensure the privacy and security of the transaction data and maintain the accuracy of data transmission, exchange, or processing.A specialized electronic payment institution shall establish an information system that meets certain requirements. The standards for information system and security management procedure guidelines of its businesses shall be prepared by the trade association specified in Paragraph 1 of Article 44 or the Bankers Association of the Republic of China ("Bankers Association"), and reported to the competent authority for approval; the same applies to their amendments.