Regulations for the Security and Maintenance of Personal Information Files in Cooperative & Civil Associations-related Non-government Agencies Article 7
A non-government agency shall assess the potential risk that may occur to personal data in accordance with the scope of personal data set forth in the preceding article and the process by which the personal data is collected, processed, and used. A proper control mechanism shall be established according to the result of the risk assessment.
中文原文 內政部指定合作及人民團體類非公務機關個人資料檔案安全維護管理辦法第7條
非公務機關應依前條界定之個人資料範圍及其蒐集、處理、利用個人資料之流程，評估可能產生之個人資料風險，並根據風險評估之結果，訂定適當之管控機制。