Lawmakers yesterday called for the creation of an independent agency to protect personal data in the wake of a series of large-scale data leaks.
National Development Council Deputy Minister Kao Shien-quey (高仙桂) vowed to submit a report on preparations related to the issue within a month.
The council has already drawn up a framework based on international examples, but it requires careful debate as it involves labor and budget considerations, she said.
Photo: Hsieh Chun-lin, Taipei Times
The call comes after the operator of vehicle-sharing service iRent last week announced that the data of about 140,000 customers had been jeopardized over three months.
It also follows reports in the past few months of a China Airlines data leak, as well as leaks of National Health Insurance, intelligence and household registration data.
Democratic Progressive Party legislators yesterday held another in a series of news conferences at the Legislative Yuan urging immediate action on the issue.
The greatest problem is the dispersal of responsibility under the Personal Data Protection Act (個人資料保護法), Legislator Lai Pin-yu (賴品妤) said.
With different agencies responsible for supervising different aspects of data security, they have ended up “passing the buck,” Lai said.
The government should create an independent unit responsible for protecting data security, rather than treating each case independently, she said.
Laws governing data security clearly need revision, she said, adding that the council should consult other countries’ laws and investigate the necessity of data collection by companies for research.
Legislator Liu Shih-fang (劉世芳) said data leaks were a “hotbed” for fraud.
From 2021 to last year, reports of fraud stemming from online bookstores rose four-fold from 940 to 3,773, Liu said, citing Criminal Investigation Bureau data.
Investment and installment payment fraud also rose 17.84 percent in the first 10 months of last year, she said.
As private companies are not included in the Cyber Security Management Act (資通安全管理法), most are handled using the personal data act, which designates authorities that are unable to effectively supervise cybersecurity or respond after a breach, Liu said.
The Constitutional Court last year ordered the government to improve data security within three years, saying it “might be unconstitutional” to lack an independent oversight mechanism, Legislator Hung Shen-han (洪申翰) said.
However, there have been no amendments or timelines proposed since the order was issued in August, he said.
No one has assumed responsibility, nor has anyone been notified by a government agency when their data has been leaked, he added.
Issuing fines after the fact is not enough, Legislator Chuang Ching-cheng (莊競程) said over a video call.
The personal data act instructs businesses to inform affected people directly in the event of a leak to minimize its effect, but most users have no way of knowing if their data has been compromised, he said.
The Taoyuan Flight Attendants’ Union yesterday vowed to protest at the EVA Air Marathon on Sunday next week should EVA Airway Corp’s management continue to ignore the union’s petition to change rules on employees’ leave of absence system, after a flight attendant reportedly died after working on a long-haul flight while ill. The case has generated public discussion over whether taking personal or sick leave should affect a worker’s performance review. Several union members yesterday protested at the Legislative Yuan, holding white flowers and placards, while shouting: “Life is priceless; requesting leave is not a crime.” “The union is scheduled to meet with
‘UNITED FRONT’ RHETORIC: China’s TAO also plans to hold weekly, instead of biweekly, news conferences because it wants to control the cross-strait discourse, an expert said China’s plan to expand its single-entry visa-on-arrival service to Taiwanese would be of limited interest to Taiwanese and is a feeble attempt by Chinese administrators to demonstrate that they are doing something, the Mainland Affairs Council said yesterday. China’s Taiwan Affairs Office (TAO) spokesman Chen Binhua (陳斌華) said the program aims to facilitate travel to China for Taiwanese compatriots, regardless of whether they are arriving via direct flights or are entering mainland China through Hong Kong, Macau or other countries, and they would be able to apply for a single-entry visa-on-arrival at all eligible entry points in China. The policy aims
Taipei, New Taipei City, Keelung and Taoyuan would issue a decision at 8pm on whether to cancel work and school tomorrow due to forecasted heavy rain, Keelung Mayor Hsieh Kuo-liang (謝國樑) said today. Hsieh told reporters that absent some pressing reason, the four northern cities would announce the decision jointly at 8pm. Keelung is expected to receive between 300mm and 490mm of rain in the period from 2pm today through 2pm tomorrow, Central Weather Administration data showed. Keelung City Government regulations stipulate that school and work can be canceled if rain totals in mountainous or low-elevation areas are forecast to exceed 350mm in
EVA Airways president Sun Chia-ming (孫嘉明) and other senior executives yesterday bowed in apology over the death of a flight attendant, saying the company has begun improving its health-reporting, review and work coordination mechanisms. “We promise to handle this matter with the utmost responsibility to ensure safer and healthier working conditions for all EVA Air employees,” Sun said. The flight attendant, a woman surnamed Sun (孫), died on Friday last week of undisclosed causes shortly after returning from a work assignment in Milan, Italy, the airline said. Chinese-language media reported that the woman fell ill working on a Taipei-to-Milan flight on Sept. 22