Enter to main center
:::

National Immigration Agency

:::

Privacy and Website Security Policy

  • Date:
  • Source:Information Security Section
  • Hit:140
  • Updated date:2025-07-14
  Welcome to the official website of the National Immigration Agency (hereinafter referred to as "the Agency"). The Agency highly values and respects your privacy rights and data security. We adhere to relevant laws and regulations (such as the Personal Data Protection Act and Cyber Security Management Act) to lawfully collect, process, and utilize data obtained as necessary for statutory duties. We strictly follow the Agency's internal privacy protection management and Website security procedures, and are committed to protecting the data privacy and security of all users.
I. Privacy Protection Policy
 • To provide you with the best interactive services on this website, we may request relevant personal data from you. The scope is as follows: 
  □ Personal Data You Actively Provide: When you use online application services, the Agency will request necessary personal data from you, such as your name, National ID number/ UI Number For Foreign Nationals, telephone number, email address, and home address.
  □ When you browse our site, our server will automatically record the related path, including IP address, time, browser type, and the page you request as reference for our website service. They are internal use only, and not open to the public.
 • We will not disclose your personal information to any third party or for other purposes beyond the original intent except for your permission or special provision of other regulations.
 • Use of Cookies: To provide you with the best service, this website will place and access the Agency's Cookies on your computer. If you do not wish to accept Cookies, you can set your browser's functions to reject Cookie writing. However, this may prevent certain website functions from performing normally.
 • Self-Protection Measures: Please safeguard your password and any personal information carefully. Do not disclose any personal data, especially your password, to anyone. After completing online applications, checking emails, or maintaining administrative functions, always remember to log out of your account. If you are sharing a computer with others or using a public computer, be sure to close your browser window after use to prevent others from accessing your personal data, mail, or entering the respective agency's administrative area.
 • Retention and Management of Personal Data: For a compilation of the personal data items retained and managed by various departments within the Agency (e.g., names of collected personal data files, retaining units, basis of retention, and specific purposes), please refer to the personal data retention and management link on this website.
II. Website Security Policy
  To ensure the information security and continuous operational maintenance of the various services provided by this website, the Agency adheres to the "Cyber Security Management Act" and its relevant enforcement rules, implementing the following protection measures:
 • Network Intrusion Detection: We employ a Network Intrusion Detection System to monitor network access behavior, identifying and confirming unauthorized attempts to maliciously tamper with, alter webpage information, or intentionally cause damage.
 • Firewall Deployment: Firewalls are installed to prevent illegal intrusion, damage, or theft of data, ensuring the website is not illegally used and safeguarding the rights and interests of our users.
 • Anti-Virus Software: Anti-virus software is installed and regularly scanned to provide users with a safer web browsing environment and prevent virus infections.
 • Regular Penetration Testing and Recovery Drills: We periodically simulate malicious hacker attacks and conduct drills for system recovery procedures in the event of a security incident, ensuring an appropriate level of security defense.
 • Daily Backup Operations: All data is backed up daily to a redundant host.
 • Automated Security Patch Management: We automatically receive security maintenance notifications from relevant operating system and application vendors, and promptly install appropriate patches based on professional recommendations.
III. Personal Data Protection and Website Security Practices
 • Regarding your personal data, the Agency will adopt appropriate security measures and make every reasonable effort, utilizing relevant technologies and measures, to implement security maintenance in accordance with applicable laws and regulations.
 • The privacy protection and website security comply with the specifications of ISO/CNS 27001 and ISO/CNS 27701, and are regularly audited by an independent third party for effectiveness.
IV. Amendments to the Privacy and Website Security Policy
 Due to the rapid development of technology, the incompleteness of relevant regulations, and unforeseen environmental changes in the future, the Agency will revise the security policy statements provided on this website as necessary, to effectively safeguard your online security and personal data security.
V. Privacy and Website Security Policy Consultation
 If you have any questions regarding this website's Privacy and Website Security Policy, you are welcome to contact us at any time.
 
Home