A specialized electronic payment institution shall ensure the confidentiality of its financial examination reports. Unless otherwise provided by law or consented by the competent authority, its responsible persons or employees are not allowed to read, disclose, deliver, or make public all or part of the financial examination report to persons unrelated to the performance of duties.
A specialized electronic payment institution shall draft internal management rules and operating procedures relating to the financial examination report in compliance with the requirements of the competent authority, and submit them to the board of directors for approval.

A specialized electronic payment institution shall set out in its internal control system penalties for violations of these Rules or its internal control rules by managers and relevant personnel.

The internal auditors and chief compliance officer of a specialized electronic payment institution shall immediately prepare a report for submission, with a notice to the independent directors and supervisors or audit committee, and report to the competent authority when their recommendations for improvements regarding significant deficiencies or noncompliance identified in internal controls are not accepted by management, which will cause the specialized electronic payment institution to incur material losses.

After an examination conducted by the competent authority completed or an examination report received, the internal audit unit of a specialized electronic payment institution shall, based on the principle of materiality, promptly notify the directors and supervisors, and report in the next board meeting. The content of the report shall include examination communication meeting, major deficiencies found in the examination, improvement actions required by the competent authority, or possible disciplinary measures to be taken.

Internal auditors of specialized electronic payment institutions who do not meet the provisions in Subparagraph 1, Paragraph 2 of Article 13 herein shall make adjustment to become compliant within nine months after the promulgation of these Rules.
The internal auditor of a specialized electronic payment institution who acts as a team leader but does not meet the provisions in Subparagraph 3, Paragraph 2 of Article 13 herein shall make adjustment to become compliant within three months after the promulgation of these Rules.

The Regulations shall enter into force on July 1, 2021.
The amendment of these Implementation Rules shall enter into force on the date of promulgation.