🇹🇼
Taiwan
Personal Data Protection Act (PDPA)
Asia🟢 Comprehensive
Compliance Score
71%
10 Addressed
4 Partial
0 None
Authority
National Development Council (NDC)
Overview
Taiwan's PDPA, effective since 2012 and amended multiple times, provides a comprehensive framework for personal data protection. The law covers both public and private sectors and includes provisions for cross-border data transfers.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Taiwan?+
Taiwan is governed by the Personal Data Protection Act (PDPA). The law is enforced by the National Development Council (NDC). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Taiwan require a Data Protection Officer (DPO)?+
Partially. The Personal Data Protection Act (PDPA) may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Taiwan?+
Partially. While Personal Data Protection Act (PDPA) may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Taiwan?+
Under the Personal Data Protection Act (PDPA), organizations must notify the National Development Council (NDC) and affected individuals without undue delay in the event of a personal data breach.