Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 13

For collected and retained personal data files, non-government agencies shall adopt necessary and proper security equipment or protection measures.The security equipment or protection measures of the preceding paragraph shall include the following:1.security and protection facilities for paper documents;2.computers, automatic machine-related equipment, portable equipment or storage media, installed with security and protection systems or encryption mechanisms, for storing electronic files; and3.where personal data is recorded on or in paper, disks, tapes, CDs, microfilms, integrated circuit chips or other storage media, proper destroying or protection measures shall be adopted to prevent leakage of such personal data when the media is to be scrapped, replaced, or used for other purposes; when another party is commissioned to perform the above, the non-government agency shall supervise the commissioned party in accordance with Article 20.