Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 20

In the case that a non-government agency commissions another party to collect, process or use all or part of the personal data, the commissioning agency shall properly supervise as prescribed in Article 8 of the Enforcement Rules of the Act.To conduct the supervision prescribed in the preceding paragraph, the non-government agency shall set clear contractual requirements concerning the matters and methods of supervision.
中文原文 內政部指定合作及人民團體類非公務機關個人資料檔案安全維護管理辦法第20條
非公務機關委託他人蒐集、處理或利用個人資料之全部或一部時,應依本法施行細則第八條規定為適當監督。
非公務機關為執行前項監督,應與受託者明確約定相關監督事項及方式。

English translation for reference only; the Chinese text prevails. Not legal advice.