Regulatory Alerts2024-06-27
Added · Updated
Regulations Governing the Clearinghouse’s Plan of Security Measures for Personal Information Files
The clearinghouse must establish a security measures plan for personal information files, approved by the Board of Directors, covering risk analysis, access controls, encryption, and incident response procedures. The clearinghouse is required to notify the Central Bank of the Republic of China (Taiwan) by phone within 36 hours of a data breach and submit a written report within seven business days, or immediately if the incident involves high-level government concern or widespread media coverage. Specific obligations include appointing a personal information management representative, conducting regular internal assessments, and maintaining detailed records of system access, training, and incident handling. These regulations were amended on June 27, 2024, and became effective on June 29, 2024.
More like this from CBC
We email you every new CBC publication the day it's published.