Chapter III. Regulatory Compliance Procedures
Article 10
The clearinghouse shall establish relevant procedures for the following actions to ensure that the collection of personal information complies with the regulatory requirements for personal information protection:
1.Identifying the specific purposes of personal information collection.
2.Ensuring those specific situations or other requirements for personal information collection required by laws.
Article 11
The clearinghouse shall establish relevant procedures for the following actions to fulfill its obligation of notifying the Parties of personal information collected in complying with Article 8 and Article 9 of the Act:
1.Identifying situations which are exempted from the notification.
2.Except the exempted situations, notifying the Parties in a proper way according to the situations in collecting personal information
Article 12
The clearinghouse shall establish relevant procedures for the following actions to ensure that the use of personal information complies with regulatory requirements for personal information protection:
1.Ensuring that the use of personal information complies with specific purposes.
2.Identifying whether the personal information may be used beyond the specific purposes and how to carry it out.
Article 13
The clearinghouse shall take action according to following procedures in adding or changing its specific purposes:
1.Taking action in accordance with Article 11 herein.
2.Obtaining the written consent of the Parties, unless it is otherwise provided by laws.
Article 14
The clearinghouse shall establish relevant procedures for the following actions in coping with specific categories of personal information under Article 6 of the Act:
1.Identifying whether the personal information collected, processed and used by it contains specific categories of personal information.
2.Ensuring that the collection, processing and use of specific categories of personal information comply with regulatory requirements.
Article 15
Prior to carrying out international transmission of personal information, the clearinghouse shall check whether such transmission is restricted by the Bank and comply with the relevant rules.
Article 16
The clearinghouse shall establish relevant procedures for the following actions to enable the Parties to exercise its rights under Article 3 of the Act:
1.How to enable the Parties to exercise their rights.
2.Verifying the identity of the Parties.
3.Confirming whether there are situations under Article 10 or Article 11 of the Act by which the request for exercise of rights by the Parties may be rejected.
4.Rejecting the request of the Parties in a timely manner.
Article 17
The clearinghouse shall establish relevant procedures for the following actions to ensure the accuracy of personal information under its possession:
1.Ensuring that the accuracy of information is not affected during the course of processing.
2.Making timely correction while verifying that information contains any error.
3.Checking the accuracy of information regularly.
For personal information that are not corrected or supplemented due to the fault of the clearinghouse, the clearinghouse, after correcting or supplementing personal information, shall establish a procedure for notifying parties to whom such information was once provided.
Article 18
The clearinghouse shall check regularly whether the specific purpose for retaining certain personal information no longer exists or overdues. When the specific purpose disappears or the duration of retention has expired, the clearinghouse shall follow the provisions under Paragraph 3, Article 11 of the Act.