Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 22

Prior to the promulgation of the Regulations, non-government agencies that hold personal data up to or more than an amount of 5,000 without establishing the Plans and Disposal Regulations shall establish it as required by the Regulations, and file the Plans and Disposal Regulations with the competent authority for future reference within six months from the date of the promulgation of the Regulations.
中文原文 內政部指定合作及人民團體類非公務機關個人資料檔案安全維護管理辦法第22條
本辦法發布施行前,非公務機關保有個人資料筆數達五千筆,未訂定本計畫及處理方法者,應依本辦法規定訂定,並於本辦法發布施行日起六個月內,將本計畫及處理方法報請主管機關備查。

English translation for reference only; the Chinese text prevails. Not legal advice.