Regulations Governing Authorization and Administration of Service Enterprises Engaged in Interbank Credit Information Processing and Exchange Article 26

The financial institutions and financial related business appointed by the Competent Authority should submit pertinent information about loans, credit cards and financial derivatives business to the service enterprise engaged in interbank credit information processing and exchange. Such information also includes any case of suspected legal infringement or abnormal depositors, frauds, any staff in the bank violating laws or employment requirement and any other data required by the laws. However, information regarding crediting for bills should not be included.The collection, processing or use of the information stated before is in compliance with Article 8 Section 2 Clause 2 in Personal Information Protection Law. Therefore, it is not necessary to notify the Party subject to Article 9 Section 1 of Personal Information Protection Law.The service enterprise engaged in interbank credit information processing and exchange should complete the scope and filing for information about loans, credit cards, financial derivatives business and other data required by the Competent Authority. Such information should be submitted to Competent Authority as well.The information required to be declared subject to Section 1 by financial institutions and financial related business appointed by Competent Authority should be truthful and accurate.Unless otherwise stipulated in other laws or announcement by the regulators, the bank does not need to notify consecutively or repetitively the clients when their information inquired or submitted via the service enterprise engaged in interbank credit information processing and exchange to fulfill the requirement of financial institutions and regulators is stated in the contract signed between the bank and the clients. This approach holds true when the contract includes the definitive clauses to specify the source of information and other requirements defined by the laws, and after the signing of the contract, the bank collects, inquires, handles, utilizes, transmits or submits the same information included in the contract.