To regulate the collection, processing, and utilization of personal data to prevent infringements on individual rights and to promote the responsible use of personal data, this law is hereby enacted.

• Review of Personal Data Protection Policies and Systems.
• Review of Personal Data Education and Training Program, Risk Assessment and Improvement Plan, and Audit Plan.
• Review, Examination, and Assessment of the Legality and Suitability of Personal Data Management Systems.
• Establishment of Personal Data Protection Security Measures and Response, Handling, and Coordination of Significant Personal Data Security Incidents.
• Review of Other Personal Data Protection and Management Planning and Audit Execution Matters.