Amendments to Taiwan’s Personal Data Protection Act have been promulgated today, making significant changes to the regulatory structure and breach obligations.
Key points
- An independent Personal Data Protection Commission is established.
- Breaches must be notified immediately to data subjects.
- Reportable incidents must be reported to the authority.
- Direct fines apply for failure to comply.
- Security maintenance plans are required for designated sectors.
UK organisations with Taiwanese operations, customers or suppliers should review their breach procedures and prepare for oversight by the new commission.
Source: Personal Data Protection Act (Taiwan Laws & Regulations Database, Ministry of Justice)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
