Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 11

Where the central competent authority has made an order or disposition to a non-government agency relating to the restrictions on cross-border transfers of personal data in accordance with the requirements of Article 21 of the Act, the non-government agency shall notify its staff to comply and implement.The non-government agency, carrying out a cross-border transfer of personal data, shall verify whether it is restricted by the central competent authority, and notify the data subject of the area that the cross-border transfer of its personal data is carried out, and shall supervise the data recipient on the following:1.the planned scope, category, specific purpose, time period, territory, recipients, and methods of the processing or use of personal data; and2.the related matters of exercising the rights prescribed in the Article 3 of the Act by the data subject.