Regulatory Alerts2021-12-23
Added · Updated
Regulations Governing the Clearinghouse’s Plan of Security Measures for Personal Information Files
The clearinghouse must establish a security measures plan for personal information files, approved by the Board of Directors and made public, covering organizational structures, risk analysis, and specific security controls. The clearinghouse is required to report personal information incidents to the Central Bank of the Republic of China (Taiwan) by phone immediately, via email within 72 hours, and in writing within 7 business days. The regulations mandate specific personnel, operational, physical, and technical management measures, including access controls, encryption, backup testing, and regular system updates. Additionally, the clearinghouse must conduct staff training, maintain detailed records of plan implementation, and ensure compliance with international transmission restrictions.
More like this from CBC
We email you every new CBC publication the day it's published.