Regulations Governing Authorization and Administration of Service Enterprises Engaged in Interbank Credit Information Processing and Exchange Article 16

The bylaws referred to in paragraph 1, subparagraph 9 of the preceding article shall include the following particulars:1. The enterprise's organizational structure and the responsibilities of each department;2. The allocation, management, and training of personnel;3. The enterprise's internal control system (including operations management, information secrecy and security control measures, and accounting system);4. The enterprise's internal auditing system;5. A membership protocol;6. A schedule of fees and the method for calculating them (for reference purposes);7. Procedures to be followed when the interests of an interested party are prejudiced as a result of gathering, processing, or using personal information in a manner other than that prescribed by law, and criteria governing provisions for a general liability reserve; and8. An operations handbook (to include: a description of how to gather, archive, process, transmit, exchange, and access information; procedures to be followed in the event that information is in error, destroyed, lost, or incorrectly processed, transmitted, exchanged, or accessed; an instruction manual for member organizations; secrecy rules and security control mechanisms to govern the handling of information by member organizations; a list of services; the format in which accessed information will be provided; and disaster recovery measures).