Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 5

A non-government agency shall allocate management personnel and reasonable resources, be in charge of planning, setting, amending, and implementing the Plans and Disposal Regulations or other related matters, as well as periodically reporting to the representative.A non-government agency shall establish a personal data protection and management policy to publicly announce the specific purpose and legal basis for collecting, processing, and using personal data, or other relevant protection measures at the location of the association (cooperative) address or other proper locations, and in possession of a website, to disclose it on the website homepage, thereby making it known to both the staff and the data subject.
中文原文 內政部指定合作及人民團體類非公務機關個人資料檔案安全維護管理辦法第5條
非公務機關應配置適當管理人員及相當資源,負責規劃、訂定、修正及執行本計畫及處理方法等相關事項,並定期向代表人提出報告。
非公務機關應訂定個人資料保護管理政策,將蒐集、處理及利用個人資料之特定目的、法律依據及其他相關保護事項,公告於會(社)址所在地或其他適當場所;如有網站者,並揭露於網站首頁,使其所屬人員及個人資料當事人均能知悉。

English translation for reference only; the Chinese text prevails. Not legal advice.