Lawmakers yesterday called for the creation of an independent agency to protect personal data in the wake of a series of large-scale data leaks.
National Development Council Deputy Minister Kao Shien-quey (高仙桂) vowed to submit a report on preparations related to the issue within a month.
The council has already drawn up a framework based on international examples, but it requires careful debate as it involves labor and budget considerations, she said.
Photo: Hsieh Chun-lin, Taipei Times
The call comes after the operator of vehicle-sharing service iRent last week announced that the data of about 140,000 customers had been jeopardized over three months.
It also follows reports in the past few months of a China Airlines data leak, as well as leaks of National Health Insurance, intelligence and household registration data.
Democratic Progressive Party legislators yesterday held another in a series of news conferences at the Legislative Yuan urging immediate action on the issue.
The greatest problem is the dispersal of responsibility under the Personal Data Protection Act (個人資料保護法), Legislator Lai Pin-yu (賴品妤) said.
With different agencies responsible for supervising different aspects of data security, they have ended up “passing the buck,” Lai said.
The government should create an independent unit responsible for protecting data security, rather than treating each case independently, she said.
Laws governing data security clearly need revision, she said, adding that the council should consult other countries’ laws and investigate the necessity of data collection by companies for research.
Legislator Liu Shih-fang (劉世芳) said data leaks were a “hotbed” for fraud.
From 2021 to last year, reports of fraud stemming from online bookstores rose four-fold from 940 to 3,773, Liu said, citing Criminal Investigation Bureau data.
Investment and installment payment fraud also rose 17.84 percent in the first 10 months of last year, she said.
As private companies are not included in the Cyber Security Management Act (資通安全管理法), most are handled using the personal data act, which designates authorities that are unable to effectively supervise cybersecurity or respond after a breach, Liu said.
The Constitutional Court last year ordered the government to improve data security within three years, saying it “might be unconstitutional” to lack an independent oversight mechanism, Legislator Hung Shen-han (洪申翰) said.
However, there have been no amendments or timelines proposed since the order was issued in August, he said.
No one has assumed responsibility, nor has anyone been notified by a government agency when their data has been leaked, he added.
Issuing fines after the fact is not enough, Legislator Chuang Ching-cheng (莊競程) said over a video call.
The personal data act instructs businesses to inform affected people directly in the event of a leak to minimize its effect, but most users have no way of knowing if their data has been compromised, he said.
South Korean K-pop girl group Blackpink are to make Kaohsiung the first stop on their Asia tour when they perform at Kaohsiung National Stadium on Oct. 18 and 19, the event organizer said yesterday. The upcoming performances will also make Blackpink the first girl group ever to perform twice at the stadium. It will be the group’s third visit to Taiwan to stage a concert. The last time Blackpink held a concert in the city was in March 2023. Their first concert in Taiwan was on March 3, 2019, at NTSU Arena (Linkou Arena). The group’s 2022-2023 “Born Pink” tour set a
CPBL players, cheerleaders and officials pose at a news conference in Taipei yesterday announcing the upcoming All-Star Game. This year’s CPBL All-Star Weekend is to be held at the Taipei Dome on July 19 and 20.
The Taiwan High Court yesterday upheld a lower court’s decision that ruled in favor of former president Tsai Ing-wen (蔡英文) regarding the legitimacy of her doctoral degree. The issue surrounding Tsai’s academic credentials was raised by former political talk show host Dennis Peng (彭文正) in a Facebook post in June 2019, when Tsai was seeking re-election. Peng has repeatedly accused Tsai of never completing her doctoral dissertation to get a doctoral degree in law from the London School of Economics and Political Science (LSE) in 1984. He subsequently filed a declaratory action charging that
The Hualien Branch of the High Court today sentenced the main suspect in the 2021 fatal derailment of the Taroko Express to 12 years and six months in jail in the second trial of the suspect for his role in Taiwan’s deadliest train crash. Lee Yi-hsiang (李義祥), the driver of a crane truck that fell onto the tracks and which the the Taiwan Railways Administration's (TRA) train crashed into in an accident that killed 49 people and injured 200, was sentenced to seven years and 10 months in the first trial by the Hualien District Court in 2022. Hoa Van Hao, a