BS 10012導入經驗之研究─以淡江大學為例

A study of BS 10012 implementation experience, a case study of Tamkang University.

杜恩君(En-Chun Tu)

指導教授 ： 黃明達

淡江大學/商管學院/資訊管理學系碩士班/碩士(2015年)

https://doi.org/10.6846/TKU.2015.00859

摘要

淡江大學2012年10月全校導入BS 10012個人資料管理制度(PIMS)，並於2013年12月順利通過驗證。本研究以淡江為個案研究之對象，發放問卷並整理出導入制度事前、事中及事後之經驗，及導入前後之比較，並與專家訪談，整理出淡江順利取得BS 10012驗證通過之關鍵及提出建議。
研究發現，導入的過程中，教育訓練是貢獻最大的資源；導入後，個人資料管理制度運作良好且組織仍持續改善制度；導入前後之比較，職員較導入前較會追蹤個資如何使用、各單位蒐集的個資種類較導入前少。順利取得驗證的關鍵有：上級長官的支持、個人資料管理委員會的規劃與推動、推動單位的熱誠。

關鍵字

個人資料保護法 ； 個人資料 ； BS10012

並列摘要

BS 10012, a Personal Information Management System (PIMS), was introduced into Tamkang University in 2012 and was certified in 2013. Taking TKU as the case study candidate, we send questionnaire to associated faculty and collect the experience before, during and after the system was introduced while comparing the influence before and after the introduction. Furthermore, we interview experts in the field and finally we conclude the key to the success of the introduction and provide suggestion.
It is found that educational training contributes most of the resources during the process and PIMS operates well while being improved by the organization. After the introduction, faculty becomes more adept at using and tracking personal information and the types of personal information collected by units becomes fewer. There are several keys to the success, including the support from the superior officers, the planning and promoting of the Committee of Personal Information and the enthusiasm of the promotion unit.

並列關鍵字

BS 10012 ； Personal information protection act ； Personal information

參考文獻

[23] Liu, C. Y., Critical Factors of Educational Institutions Adoption for BS 10012: Persional Information Management System, International Journal of Network Security, vol. 16, No.3, pp. 161-167, 2014.

[12] 鄒宛璉，〈以BS 10012為基礎評估大專校院導入個人資訊管理制度之研究〉，碩士論文，淡江大學資訊管理學系， 2011。

[11] 楊姍姍，〈影響教育機構導入BS 10012認證之關鍵因素〉，碩士論文，中興大學資訊管理學系，2013。

[7] 張書鳴，〈以BS10012為基礎評估組織導入個人資料管理制度之研究〉，碩士論文，淡江大學資訊管理學系，2011。

[16] BSI (British Standards Insitution), BS 10012: Data Protection - Specification for a Personal Information Management System, 2009.