Chinese Taipei: Personal Data Protection Committee opened consultation on draft Amendments to Personal Data Protection Act

On 20 December 2024, the Personal Data Protection Committee (PDPC) opened a consultation, set to close on 18 February 2025, on draft amendments to the Personal Data Protection Act. The proposed changes aim to establish an independent supervision mechanism for personal data protection, as mandated by Constitutional Court Judgment No. 13 of 2011. Provisions include requiring public and designated private entities to appoint data protection officers, setting obligations for incident management and reporting, and clarifying oversight responsibilities for high-risk industries. The amendments outline a six-year transitional period for unifying supervisory authority under the PDPC and introduce administrative procedures for appeals and compliance guidelines.