Article 37
|
(Audit trail of electronic trading)
- An organization shall keep the audit trail (e.g. login accounts, system functions, time, system names, inquiry instructions or results) or identification system of uses of personal information to facilitate tracking of uses of personal information when unauthorized disclosure occurs. The relevant trail information, evidence and records shall be kept for at least five years, unless otherwise provided under the law or by contract.
- An organization shall record and notify the account owner of account logins and occurrence of trading and keep the relevant records.
|