On 9 August 2025, the Personal Information Protection Commission (PIPC) closes the public consultation on the draft partial amendment to the Standards for Measures to Ensure the Safety of Personal Information. The draft amendment aimed to respond to the technological advancement of artificial intelligence and cloud computing, and to reinforce the data-centric protection framework by improving the uniform application of network separation requirements. Revisions included the amendment of terminology in Article 2, the inclusion of print and disposal safety procedures in internal management plans under Article 4, and additional controls on access rights under Article 5. The proposal also introduced risk-based exemptions to mandatory internet network separation under Article 6-2, and updated procedures for logging and inspecting access records under Article 8. The revised measures were proposed to extend technical and administrative security requirements to include handlers such as open market vendors.
Original source