Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 17

To ensure the implementation of the Plans and Disposal Regulations, a non-government agency shall measure reasonable allocation of resources to establish maintenance and audit mechanism of personal data security, and designate proper personnel to conduct examination on the execution of the Plans and Disposal Regulations at least semi-annually according to its organization size and characteristics.The examination result referred to in the preceding paragraph shall be reported to the representative, and relevant records shall be kept for a duration of at least five years.In the case of discovering that the Plans and Disposal Regulations is not or is at the risk of not complying with the laws according to the examination result referred to in Paragraph 1, the non-government agency shall improve immediately.