Personal Data Protection Act Article 11
內容
Enforcement Rules Article 14
In accordance with the Electronic Signatures Act, a data subject's "consent in writing", as referred to under subparagraph 6 of the proviso to paragraph 1 of Article 6, paragraph 2 and 3 of the proviso to Article 11 of the PDPA, may be given in an electronic form.
Enforcement Rules Article 19
When a data subject requests a government or non-government agency to correct or supplement his/her personal data in accordance with paragraph 1 of Article 11 of the PDPA, the data subject shall provide the agency with an adequate explanation therefor.
Enforcement Rules Article 20
“When the specific purpose of data collection no longer exists" referred to under paragraph 3 of Article 11 of the PDPA shall mean any of the following circumstances:
1. the government agency has been dissolved or reorganized without another agency to take over its tasks;
2. the non-government agency has ceased its business or been dissolved without another agency to take over its business, or the non-government agency has changed the scope of its business, thereby causing the purpose for which the personal data were collected to be no longer applicable;
3. the specific purpose has been reached, and there is therefore no longer necessary to continue the processing and use of personal data; or
4. other circumstances where the specific purpose evidently can no longer be reached or no longer exists.
1. the government agency has been dissolved or reorganized without another agency to take over its tasks;
2. the non-government agency has ceased its business or been dissolved without another agency to take over its business, or the non-government agency has changed the scope of its business, thereby causing the purpose for which the personal data were collected to be no longer applicable;
3. the specific purpose has been reached, and there is therefore no longer necessary to continue the processing and use of personal data; or
4. other circumstances where the specific purpose evidently can no longer be reached or no longer exists.
Enforcement Rules Article 21
“Necessary for the performance of an official or business duty", as referred to in the proviso to paragraph 3 of Article 11 of the PDPA, shall mean any of the following circumstances:
1. where a retention period is prescribed by laws or regulations, or agreed upon under a contract;
2. where there are sufficient reasons to believe that the deletion of the personal data will infringe upon the data subject's interests that warrant protection; or
3. where there are other legitimate reasons for not erasing the personal data.
1. where a retention period is prescribed by laws or regulations, or agreed upon under a contract;
2. where there are sufficient reasons to believe that the deletion of the personal data will infringe upon the data subject's interests that warrant protection; or
3. where there are other legitimate reasons for not erasing the personal data.