2023 年 12 月 27 日

Introduction of the Regulations Regarding the Security Maintenance and Administration of Personal Data Files in Digital Economy Industry (Taiwan)

Alert December 2023
Oli Wong and Astrid Chou
2023 年 10 月 30 日

Regulations for Standardizing and Promoting Cross-Border Data Flow (Draft for Public Comment) (Mainland China)

Alert October 2023
Joyce Wen and Teresa Huang
2023 年 7 月 27 日

Pre-announcement of the Draft Regulations for the Security and the Maintenance of Personal Data Files in Retail Sale in Non-specialized Stores

Alert July 2023
Elizabeth Pai and Hannah Kuo
2023 年 7 月 27 日

A Brief Discussion on the “Guidelines for the Filing of Standard Contracts for Outbound Transfer of Personal Information” (Mainland China)

Alert July 2023
Di Wu and Teresa Huang
2023 年 6 月 27 日

The Amendments to the Taiwan Personal Data Protection Act Were Adopted to Set Up a Dedicated Agency and Intensify the Punishment for Personal Data Leakage

Alert June 2023
Elizabeth Pai and Hannah Kuo
2023 年 4 月 25 日

Restrictions on Transmission of Personal Data to the Mainland China by Human Resources Recruitment Industry as Announced by the Taiwan Ministry of Labor

Alert April 2023
Elizabeth Pai and Hannah Kuo
2023 年 4 月 21 日

Measures on the Standard Contract for Outbound Transfer of Personal Information (Mainland China)

Alert April 2023
Joyce Wen and Teresa Huang
2022 年 11 月 10 日

On Coping Ransomware from the Perspective of Legal Compliance in Taiwan

Alert November 2022
Frank Sun and Sally Yang
2022 年 10 月 31 日

The Secondary Use of the National Health Insurance Database Found Partially Unconstitutional in Taiwan Constitutional Court Decision

Insight October 2022
Hannah Kuo, Jaime Cheng, and Aaron Chen
2022 年 9 月 26 日

The Ministry of Health and Welfare of Taiwan Amended the Regulations Governing the Creation and Management of Electronic Medical Records by Medical Institutions

Alert September 2022
Teresa Huang and Hannah Kuo
2022 年 9 月 8 日

A Brief Review of China’s Measures for the Security Assessment of Outbound Data Transfer

Insight September 2022
Joyce Wen and Teresa Huang
2022 年 8 月 3 日

The Technical Specifications for Certification of Cross-Border Personal Information Processing Activities Released by the National Information Security Standardization Technical Committee

Alert August 2022
Joyce Wen and Teresa Huang
2022 年 2 月 23 日

Major Personal Data Incidents of Online Retail Businesses and Platforms in Taiwan Shall Be Reported to the Competent Authority in 72 Hours

Alert February 2022
Teresa Huang and Hannah Kuo
2022 年 1 月 28 日

The Ministry of the Interior Prescribed Regulations Governing the Security Maintenance of Personal Data by Nine Designated Categories (such as Construction) of Non-government Agencies. The Obligation to Report Major Incidents Within 72 Hours and Enhanced Information Security Measures Are Specifically Prescribed

Alert January 2022
Sally Yang
2022 年 1 月 17 日

Feature Article on China’s Personal Information Protection Law (6) – Processing Requirements for Sensitive Personal Information under the Personal Information Protection Law and Recommendations

Special Column - January 2022
2022 年 1 月 12 日

Feature Article on China’s Personal Information Protection Law (5) – Compliance Issues Concerning Enterprises’ Processing of Employee Personal Information under the Personal Information Protection Law (Mainland China)

Joyce Wen and Teresa Huang The PIPL as promulgated puts forward new requirements for the processing of employee personal information in the course of employment, and enterprises will also face compliance risks in the protection of personal information. This article seeks to sort out the highlights of the PIPL concerning an enterprise's processing of its employee personal information.
2021 年 11 月 25 日

Feature Article on China’s Personal Information Protection Law (4) – Personal Information Protection Law’s Impact on APP and Internet Operators (Mainland China)

Elva Chuang and Teresa Huang After the Personal Information Protection Law goes into effect, current common practices for collecting information adopted by applications and internet operators may require rectification as the applications and internet operators may be at the risk of violating the laws. This article will explain the legal compliance issues that applications and internet operators should pay special attention to for relevant business operators' reference.
2021 年 11 月 17 日

Feature Articles on China’s Personal Information Protection Law (3) – Special Regulations and Requirements on Cross-Border Data Transmission (Mainland China)

Joyce Wen, Elva Chuang and Teresa Huang When domestic businesses transfer personal information abroad, legal issues on cross-border information transfer are involved. This article will briefly explain how to legally perform cross-border information transfers, how the oversea receiver should process such information, and how businesses should deal with any cross-border information transfer issues.
2021 年 11 月 1 日

Feature Articles on China’s Personal Information Protection Law (2) – The Impact of “Personal Information Protection Law” on Foreign Information-processors (Mainland China)

Joyce Wen, Elva Chuang and Teresa Huang The Personal Information Protection Law (“PIPL”) extends the applicable scope of the law to cover foreign activities conducted by foreign entities. This article will briefly clarify the activities conducted by foreign information-processors that would subject them to the PIPL and the obligations and responsibilities that such foreign information-processors should perform.
2021 年 10 月 4 日

Feature Articles on China’s Personal Information Protection Law (1) – Personal Information Protection Law Summary (Mainland China)

Karl Zhang and Teresa Huang[1] On August 20, 2021, the Standing Committee of the National People’s Congress passed the “Personal Information Protection Law (PIPL),” which will come into effect on November 1, 2021.  Its main contents are as follow: 1. […]
2021 年 5 月 17 日

The interpretation of “intent to pursue the illegal interests of the actor or any third party” within the meaning of Article 41 of the Personal Data Protection Law (Taiwan)

Emily Chueh The Grand Criminal Chamber of the Supreme Court rendered the 109-Tai-Shang-Da-1869 Ruling of December 9, 2020 (hereinafter, the “Ruling”), holding that the “intent to pursue the illegal interests of the actor or any third party” within the meaning […]
2021 年 2 月 1 日

The concurrence issue of the offense of illegally using the personal data, the offense of using forged private documents and the offense of fraud (Taiwan)

Yuki Chiang The Taiwan High Court rendered the 109-Shang-Su-zi-2966 Decision on October 8, 2020 (hereinafter, the “Decision”), holding that if one’s personal data are used without consent to apply for a credit card, and the credit card is used in […]
2021 年 1 月 21 日

Summary of Laws Relating to Personal Information Protection (Mainland China)

Joyce Wen[1] In the era of big data, while data and information bring convenience to our life, the issue of personal information leakage is also becoming more and more prominent.  This is why the protection of personal information has become […]
2019 年 3 月 31 日

In case of a police agency searching missing individuals and needing to request a household registration office to provide the contact telephone numbers of the missing individuals and of their relatives (family members) which they have provided when they handled household registration matters, such request meets the requirements of the Personal Data Protection Law (Taiwan)

2019.1.22 Sophia Tsai The National Development Commission issued the Fa-Fa-1080000958 Circular of January 22, 2019 (hereinafter, the “Circular”), pointing out that in case of a police agency searching missing individuals and needing to request a household registration office to provide […]
2018 年 11 月 30 日

If a photo on an identity card has been converted by an algorithm and cannot be used to directly or indirectly identify such specific individual, such photo is not regarded as personal data and, therefore, is not governed by the Personal Data Protection Law (Taiwan)

2018.8.30 Sean Liu The Ministry of Justice issued the Fa-Lu-10703513050 Circular of August 30, 2018 (Hereinafter, the “Circular”) to explain that if a photo on an identity card has been converted into irreversible feature values by an algorithm and cannot […]
2018 年 11 月 30 日

If specific personal data in the medical image data collected by a public agency can be regarded as non-personal data after being de-identified, the Personal Data Protection Law certainly does not apply to any subsequent provision of such data for use by external parties (Taiwan)

2018.9.4 Jenny Chen The Ministry of Justice issued the Fa-Lu-10703512280 Circular of September 4, 2018 (hereinafter, the “Circular”), holding that if specific personal data in the medical image data collected by a public agency can be regarded as non-personal data […]
2018 年 11 月 30 日

Explanation by the Ministry of Justice concerning whether a government agency may impose a period when a company under investigation for its alleged violation of the Personal Data Protection Law should provide relevant materials (Taiwan)

2018.9.10 Yi-Shan Cheng The Ministry of Justice issued the Fa-Lu-10703511710 Circular of September 10, 2018 (hereinafter, the “Circular”) to communicate that a government agency investigating a company’s alleged violation of the Personal Data Protection Law may request the company to […]
2018 年 11 月 30 日

The FSC orders that a bills finance company with a net worth of over NT$10 billion and an asset of over NT$100 billion shall set up an information security supervisor (Taiwan)

2018.10.1 Fang-Wei Lin The Financial Supervisory Commission (hereinafter, the “FSC”) issued the Jin-Guan-Yin-Piao-10702147250 Circular of October 1, 2018 (hereinafter, the “Circular”) to communicate the “other requirements” imposed by the competent authority on a bills finance company under the proviso of […]
2018 年 9 月 30 日

A company’s publication of promotional information about government policies and directives in bills or on envelopes is a promotion of public interest under Subparagraph 2 in the proviso of Paragraph 1 of Article 20 of the Personal Information Protection Actand is a circumstance where usage beyond specified purposes is allowed (Taiwan)

2018.7.3 Sophia Tsai The Ministry of Justice issued the Fa-Lu-10703507550 Circular of July 3, 2018 (hereinafter, the “Circular”) to communicate that a company’s publication of promotional information about government policies and directives in bills or on envelopes is a promotion […]