Regulations Governing Authorization and Administration of Service Enterprises Engaged in Interbank Credit Information Processing and Exchange Article 27

A service enterprise engaged in interbank credit information processing and exchange shall gather, process, and use information in a manner consistent with the relevant legal requirements, and shall ensure its privacy and security.A service enterprise engaged in interbank credit information processing and exchange shall be liable to ensure that credit information is archived, processed, transmitted, exchanged, and accessed using correct procedures. Where information is in error, destroyed, lost, or incorrectly processed, transmitted, exchanged, or accessed, the enterprise shall be liable to investigate the problem, carry out corrective and remedial measures, and exercise the care of a good administrator.A record of the accessing and processing referred to in the preceding paragraph shall be kept on file for not less than five years.
中文原文 銀行間徵信資料處理交換服務事業許可及管理辦法第27條
銀行間徵信資料處理交換服務事業對於資料之蒐集、處理及利用,應符合相關法令之規定,並應確保其保密與安全。
銀行間徵信資料處理交換服務事業對於信用資料應負責正確之建置、處理、傳輸、交換及查詢作業程序;其有錯誤、毀損、滅失或不正確處理、傳輸、交換、查詢情事者,應負責查明、改正及補救,並盡善良管理人之注意義務。
前項查詢或處理應予存證,其存證期間至少五年。

English translation for reference only; the Chinese text prevails. Not legal advice.