Article 61

Departments performing duties of personal information protection shall perform the following duties of personal information protection:

(I) carrying out publicity and education on personal information protection, and guiding and supervising personal information processors to protect personal information;

(II) accepting and processing complaints and reports relating to personal information protection;

(III) organizing the evaluation of the protection of personal information such as applications and publish the evaluation results;

(IV) investigating and processing illegal personal information processing activities; and

(V) other duties stipulated by laws and administrative regulations.

Article 63

Departments performing duties of personal information protection may take the following measures when performing the duties of personal information protection:

(I) inquiry of the parties concerned, and investigation of the circumstances relating to personal information processing activities;

(II) consulting and copying contracts, records, account books, and other relevant materials relating to personal information processing activities of the parties concerned;

(III) carrying out on-site inspection and investigation activities relating to processing personal information suspected of violating laws; and

(IV) checking the equipment and Articles relating to personal information processing activities and may sealing up or seizing the equipment and Articles that are proved to be illegal personal information processing activities upon reporting in writing to the principal of the department and getting approval.

When departments performing duties of personal information protection perform duties in accordance with the law, the parties concerned shall provide assistance and cooperation, and shall not refuse or obstruct such performance.