Lawmakers yesterday called for the creation of an independent agency to protect personal data in the wake of a series of large-scale data leaks.
National Development Council Deputy Minister Kao Shien-quey (高仙桂) vowed to submit a report on preparations related to the issue within a month.
The council has already drawn up a framework based on international examples, but it requires careful debate as it involves labor and budget considerations, she said.
Photo: Hsieh Chun-lin, Taipei Times
The call comes after the operator of vehicle-sharing service iRent last week announced that the data of about 140,000 customers had been jeopardized over three months.
It also follows reports in the past few months of a China Airlines data leak, as well as leaks of National Health Insurance, intelligence and household registration data.
Democratic Progressive Party legislators yesterday held another in a series of news conferences at the Legislative Yuan urging immediate action on the issue.
The greatest problem is the dispersal of responsibility under the Personal Data Protection Act (個人資料保護法), Legislator Lai Pin-yu (賴品妤) said.
With different agencies responsible for supervising different aspects of data security, they have ended up “passing the buck,” Lai said.
The government should create an independent unit responsible for protecting data security, rather than treating each case independently, she said.
Laws governing data security clearly need revision, she said, adding that the council should consult other countries’ laws and investigate the necessity of data collection by companies for research.
Legislator Liu Shih-fang (劉世芳) said data leaks were a “hotbed” for fraud.
From 2021 to last year, reports of fraud stemming from online bookstores rose four-fold from 940 to 3,773, Liu said, citing Criminal Investigation Bureau data.
Investment and installment payment fraud also rose 17.84 percent in the first 10 months of last year, she said.
As private companies are not included in the Cyber Security Management Act (資通安全管理法), most are handled using the personal data act, which designates authorities that are unable to effectively supervise cybersecurity or respond after a breach, Liu said.
The Constitutional Court last year ordered the government to improve data security within three years, saying it “might be unconstitutional” to lack an independent oversight mechanism, Legislator Hung Shen-han (洪申翰) said.
However, there have been no amendments or timelines proposed since the order was issued in August, he said.
No one has assumed responsibility, nor has anyone been notified by a government agency when their data has been leaked, he added.
Issuing fines after the fact is not enough, Legislator Chuang Ching-cheng (莊競程) said over a video call.
The personal data act instructs businesses to inform affected people directly in the event of a leak to minimize its effect, but most users have no way of knowing if their data has been compromised, he said.
NATIONAL SECURITY: Authorities are working to confirm the identities of the military personnel involved and investigating possible illegal conduct and regulatory violations Authorities are probing possible national security implications after Kinmen police and immigration officers on Sunday found a Chinese woman allegedly posing as a tourist while engaging in prostitution involving more than 10 military personnel. The woman, surnamed Chen (陳), has since been deported, authorities said, adding that investigators are still working to confirm the identities of those implicated, as the records only listed code names and aliases. The case stemmed from a report received by the Kinmen District Prosecutors’ Office on Friday last week from the Jinhu Precinct of the Kinmen County Police Bureau. On Sunday, police, along with the National Immigration
GLOBALGIVING: ‘ Caving to external pressure is not acceptable for an organization that has cultivated justice reform and human rights for 30 years,’ one NGO said A slew of non-government organizations (NGOs) have withdrawn from the GlobalGiving fundraising platform after it announced it would use “Chinese Taipei” instead of “Taiwan” from next month. The Taiwan Good Rice Association wrote on Facebook on Friday that it was informed on April 28 via a teleconference call of the change, which was made because the platform wanted to operate in China. Taiwan Good Rice is to terminate all cooperative relationships with GlobalGiving in response to the platform’s “unilateral and non-negotiable” decision to remove references to Taiwan, the NGO said. “Taiwan is in the official name of Taiwan Good Rice Association and the
HEAVY WEATHER: Typhoon Jangmi is due to crash straight into the Ryukyus as airlines look to shift flights to larger aircraft or cancel flights to Okinawa entirely Taiwan’s international air carriers announced flight adjustments over the weekend as Typhoon Jangmi is forecast to hit the Ryukyu Islands today and tomorrow. The Central Weather Administration (CWA) upgraded Jangmi from a tropical storm to a typhoon at 8am yesterday, with the eye located 580km south of Naha city. It was moving north at 19kph. Today, China Airlines’ CI-120, CI-121, CI-122 and CI-123 flights between Taoyuan and Naha, Okinawa, have been canceled as well as CI-132 and CI-133 between Kaohsiung and Naha. EVA Air’s BR-112, BR-113, BR-186 and BR-185 flights between Taoyuan and Naha are also canceled. Low-cost carrier Tigerair Taiwan canceled IT-230,
Chinese Nationalist Party (KMT) Chairwoman Cheng Li-wun (鄭麗文) yesterday briefed her party’s Central Standing Committee regarding her scheduled visit to the US between Monday next week and June 16, saying that her purpose would be to persuade the US that the Republic of China (ROC) Constitution was a “one China” constitution that would foster stable and peaceful cross-strait relations. The ROC Constitution is the most important defense for all Taiwanese citizens, as it upholds our democracy and has contributed to our robust economy, which aligns with international and US interests, she said. “We would not be troublemakers and drag the US under,”