| 英文摘要 |
The necessity for human resource management is the most commonly invoked legal basis when employers handle employees' personal information in the labor context. Under Article 13, Paragraph 1, Item 2 of the Personal Information Protection Law,“human resource management”is limited to activities related to labor relations and does not extend to human resource management conducted by state organs for civil servants or by public institutions for personnel governed by civil service regulations. In the following circumstances, employers may not rely on the necessity for human resource management as the legal basis for processing personal information: where labor rules and regulations or collective contracts have not been formulated through statutory procedures; where such rules or contracts do not provide for or agree upon personal information processing; or where the relevant provisions and agreements are unlawful. When assessing whether a personal information processing activity falls within the scope of human resource management necessity, the principles of necessity and purpose limitation must be observed. This requires considering whether the processing purpose is to protect the employer's legitimate interests and is directly related to that purpose, whether the processing activity is necessary to protect such interests, and whether the processing method represents the least intrusive means of affecting the employee's personal rights and interests. The necessity for human resource management is related to, but distinct from, other legal bases such as necessity for the performance of a contract or necessity for the fulfillment of statutory duties. |