A personal information handler that provides important internet platform services involving a huge number of users and complicated business types shall perform the following obligations:
- establishing and improving the personal information protection compliance system in accordance with the provisions of the state and establishing an independent organization mainly composed of external members to supervise the protection of personal information;
- following the principles of openness, fairness, and justice, formulating platform rules, and clarifying the norms and obligations that product or service providers within the platform should meet when handling personal information;
- stopping providing services for product or service providers within the platforms that handle personal information in serious violation of laws and administrative regulations; and
- regularly publishing social responsibility reports on personal information protection for public supervision.