These Regulations are prescribed pursuant to Paragraphs 2 and 3, Article 27 of the Personal Information Protection Act.(hereinafter “the Act”)

The clearinghouse shall set up a security measures plan (hereinafter “ the Plan ” )for personal information files under its possession to carry out security maintenance and management of personal information files in order to prevent them from being stolen, tampered, damaged, destroyed or leaked.
The Plan shall cover related organizations and procedures stipulated in Articles 4 to 27 herein.

The terms used in the Regulations shall be defined as follows:
1."Personal information management representative" shall mean the president of the clearinghouse or an officer directly authorized by the president, who takes charge of supervising the design, formulation, execution, and revision of the Plan and its relevant decision making.
2."Personal information internal assessor representative" shall mean an officer authorized by the president of the clearinghouse to take charge of supervising internal assessors evaluating the performance of the Plan.
3."Relevant staff" shall mean employees of the clearinghouse who have to access personal information in the process of business execution, including the fixed-term and non-fixed-term contract employees and dispatched workers of the clearinghouse.

The clearinghouse shall organize a task force for security maintenance of personal information files and allocate appropriate resources so as to be responsible for the design, formulation, execution, and revision of relevant procedures under the Plan.
The staffing of the task force for security maintenance of personal information files includes the personal information management representative and the internal assessor.
When the personal information management representative is served by an officer other than the president, this representative shall submit a written report about the task execution of the task force mentioned above to the president regularly.