Chinese Taipei: Preparatory Office of the Personal Data Protection Commission opened consultation on Draft Amendments to Certain Provisions of the Enforcement Rules of the Personal Data Protection Act

On 22 January 2026, the Preparatory Office of the Personal Data Protection Commission opened a public consultation on the Draft Amendments to Certain Provisions of the Enforcement Rules of the Personal Data Protection Act, until 23 March 2026. The Draft proposes deleting provisions on appropriate security maintenance measures, appropriate methods of notifying data subjects, internal personal data security maintenance rules for public bodies, and designated personnel requirements from the Enforcement Rules, since the amended Personal Data Protection Act empowers the competent authority to prescribe regulations on such matters. Further amendments include revising the definition of data rendering an individual unidentifiable by reference to technical methods available at the time and the absence of direct identifiability. The amendments would also introduce new definitions of intelligence agencies and public public interest organisations for the purposes of applying relevant provisions of the Personal Data Protection Act.