11、 APEC 隱私保護綱領（APEC PRIVACY FRAMEWORK）（中英文對照），
法務部編印，1996 年 12 月。
2010 年 3 月 26 日。
9、 陳起行，資訊隱私權法理深討—以美國法為中心，政大法學評論第 64 期，2000 年 12 月。
10、 陳超雄，歐洲「資訊保護與隱私權法」立法研究，東海大學法學研究，
1989 年 11 月。
11、 陳榮傳，由法律觀點論資料跨國流通，經社法制論叢，第 5 期，1990 年 1 月。
12、 楊秀惠，會員辦理國際傳輸作業外銀首長座談會紀要，金融聯合徵信雙 月刊，第 15 期，2010 年 10 月。
（三）論文
1、王俊傑，銀行作業與服務委外的管理與監理，國立政治大學行政管理碩士 學程碩士論文，2007 年。
2、洪榮彬，資訊時代之資料處理與資料保護—以德國聯邦個人資料保護法為 中心，輔仁大學法律學研究所碩士論文，1993 年 6 月。
3、陳姸沂，美國財務資訊隱私權保護規定之研究，國立政治大學法學院在職 專班碩士論文，2008 年 5 月。
4、黃莉雲，資料跨國流通法律問題之研究—相關理論與規範，國立臺灣大學 法律學研究所碩士論文，1994 年。
5、賴敏慈，信用資訊與隱私權保護--由信用資訊之揭露與隱私權之衝突檢討 個人信用資料保護法制，中原大學財經法律研究所碩士論文，2005 年。
6、戴言同，歐盟資訊與通訊科技政策與規範之研究—檢視我國雲端政策之問 題，國立雲林科技大學科技法律研究所碩士論文，2011 年 6 月。
二、 英文資料
（一）專書
1、Carey, Peter, Data protection in the UK, London: Blackstone Press Limited
（2000）.
2、Carey, Peter, Data Protection—A Practical Guide to UK and EU Law, Oxford University Press（3rd ed. 2009）.
3、Richard Morgan and Ruth Boardman, Data Protection Strategy—Implementing Data Protection Compliance, London Sweet&
Maxwell（2003）.
（二）期刊及研究報告
1、Cynthia Blum, Sharing Bank Deposit Information With Other Countries：
Should Tax Compliance or Privacy Claims Prevail？, Florida Tax Review Vol.
6 no. 6（2004）.
2、Fayyad Alqudah, Banks’ duty of confidentiality in the wake of computerized banking, Journal of International Banking Law（1995）.
3、Gehan Gunasekara, The “Final” Privacy Frontier？Regulating Trans-Border Data Flows, International Journal of Law and Information Technology, Vol. 17, No. 2（2007）.
4、J.C. Sharman, Privacy as Roguery：Personal Financial Information in an Age of Transparency, Public Administration Vol. 87, NO. 4（2009）.
5、Lee A. Bygrave, Data Protection Pursuant to the Right to Privacy in Human Rights Treaties, International Journal of Law and Information Technology, Vol.
6 No, 3（1998）.
6、Lingjie Kong, Data Protection and Transborder Data Flow in the European and Global Context, The European Journal of International Law Vol. 21 no. 2
（2010）.
7、M. Stallworthy, Data Protection：Regulation in a Deregulatory State, 11 Statute L. Rev. 130（1990）.
8、Roger K. Baker, Offshore IT Outsourcing and the 8th Data Protection Principle—legal and regulatory requirements—with reference to financial service, International Journal of Law and Information Technology, Vol. 14 No.
1（2005）.
9、Roy M. Goode, The banker’s duty of confidentiality, Journal of Business Law
（1989）.
10、 Shalini Agarwal, Sakate Khaitan, Satyendra Shrivastava and Matthew Banks, Destination India：offshore outsourcing and its implications, Computer and Telecommunications Law Review, 11(8)（2005）.
11、 Steve R. Salbu, The European Union Data Privacy Directive and International Relations, William Davidson Working Paper No. 418（2001）.
12、 Val Collins, Privacy in the United Kingdom：a Right conferred by Europe？, International Journal of Law and Information Technology, Vol. 1 No. 3
（1993）.
13、 The Department of the Treasury, Security of Personal Financial Information, Report on the Study Conduct Pursuant to Section 508 of the Gramm-Leach-Bliley Act of 1999（2004）.
（三）判決
Durant v. Financial Services Authority (Disclosure) [2003] EWCA Civ 1746, Court of Appeal (Civil Division), 2003-12-08 (Approx. 41 pages).
（四）網路資料（有作者部分依姓氏字母順序排列，其他依文件開頭字母順序排 列）
1、APEC Data Privacy Pathfinder Protects Implementation Work Plan, 17th Electronic Commerce Steering Group Meeting, Lima, Peru（2008）, available at
http://www.apec.org/Home/Groups/Committee-on-Trade-and-Investment/Ele ctronic-Commerce-Steering-Group（last visited January, 2012）.
2、Binding Corporate Rules, available at
http://www.ico.gov.uk/youth/sitecore/content/Home/for_organisations/data_p rotection/overseas/binding_corporate_rules.aspx（last visited November, 2011）.
3、 Commission Decision of 27 December 2004 amending Decision
2001/497/EC as regards the introduction of an alternative set of standard contractual clauses for the transfer of personal data to third countries（2004 controller to controller）, available at
http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2004:
385:0074:0084:EN:PDF（last visited November, 2011）.
4、 Commission Decision of 15 June 2001 on standard contractual clauses for the transfer of personal data to third countries, under Directive 95/46/EC
（2001 controller to controller）,available at
http://eur-lex.europa.eu/LexUriServ/site/en/oj/2001/l_181/l_18120010704en 00190031.pdf （last visited November, 2011）.
5、 Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/45/EC of the European Parliament and of the Council
（2010 controller to processor）, available at
http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:000 5:0018:EN:PDF（last visited November, 2011）.
6、Douwe Korff, Comparative Studies on different approaches to new privacy challenges, in particular in the light of technological developments—country studies A.6—United Kingdom （2010）, available at
http://ec.europa.eu/justice/policies/privacy/studies/index_en.htm（last visited November, 2011）.
7、Douwe Korff, Comparative Studies on different approaches to new privacy challenges, in particular in the light of technological developments—country studies A.4—Germany （2010）, available at
http://ec.europa.eu/justice/policies/privacy/studies/index_en.htm（last visited November, 2011）.
8、Data Protection Act 1998—The eighth data protection principle and international data transfers, Information Commissioner’s Office, Version 4
（2010）, available at http://www.fsa.gov.uk（last visited November, 2011）.
9、Data Protection Act 1998 Legal Guidance, Version 1, available at http://www.ico.gov.uk（last visited November, 2011）.
10、 Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the
processing of personal data and on the free movement of such data, available at
http://ec.europa.eu/justice/policies/privacy/docs/95-46-ce/dir1995-46_part 1_en.pdf（last visited November, 2011）.
11、 Data Protection Act 1998, available at
http://www.legislation.gov.uk/ukpga/1998/29/contents（last visited November, 2011）.
12、 Financial Services and Market Act 2000, available at
http://www.legislation.gov.uk/ukpga/2000/8/contents（last visited November, 2011）.
13、 FSA Handbook—Senior Management Arrangements, Chapter 3 Systems and Controls, available at http://www.fsa.gov.uk/pages/handbook （last visited November, 2011）.
14、 FSA Handbook—Senior Management Arrangements, Chapter 8 Outsourcing, available at http://www.fsa.gov.uk/pages/handbook （ last visited November, 2011）.
15、 The “Durant” Case and its impact on the interpretation of the Data
Protection Act 1998（web version 4）, Information Commissioner’s Office, 27 February 2006, available at http://www.ico.gov.uk（last visited
November, 2011）.