On 11 June 2025, the Personal Information Protection Commission (PIPC) deliberated and approved the 2025 Personal Information Processing Policy Evaluation Plan (draft). The 2025 Plan updates the previous year's guidance. Amendments include the introduction of public participation, with a user evaluation group contributing 40% to the score alongside the expert group's 60%. For 2025, 50 services across seven new technology fields, including connected cars and generative artificial intelligence, have been selected for evaluation. The evaluation will also verify consistency between disclosed policies and actual data processing and include new criteria for consent mechanisms and behavioural data opt-outs. Companies with strong performance will receive incentives, while underperforming companies will be subject to improvement recommendations and re-evaluation in 2026. The full evaluation is scheduled to commence in July 2025.
Original source