Lawmakers yesterday called for the creation of an independent agency to protect personal data in the wake of a series of large-scale data leaks.
National Development Council Deputy Minister Kao Shien-quey (高仙桂) vowed to submit a report on preparations related to the issue within a month.
The council has already drawn up a framework based on international examples, but it requires careful debate as it involves labor and budget considerations, she said.
Photo: Hsieh Chun-lin, Taipei Times
The call comes after the operator of vehicle-sharing service iRent last week announced that the data of about 140,000 customers had been jeopardized over three months.
It also follows reports in the past few months of a China Airlines data leak, as well as leaks of National Health Insurance, intelligence and household registration data.
Democratic Progressive Party legislators yesterday held another in a series of news conferences at the Legislative Yuan urging immediate action on the issue.
The greatest problem is the dispersal of responsibility under the Personal Data Protection Act (個人資料保護法), Legislator Lai Pin-yu (賴品妤) said.
With different agencies responsible for supervising different aspects of data security, they have ended up “passing the buck,” Lai said.
The government should create an independent unit responsible for protecting data security, rather than treating each case independently, she said.
Laws governing data security clearly need revision, she said, adding that the council should consult other countries’ laws and investigate the necessity of data collection by companies for research.
Legislator Liu Shih-fang (劉世芳) said data leaks were a “hotbed” for fraud.
From 2021 to last year, reports of fraud stemming from online bookstores rose four-fold from 940 to 3,773, Liu said, citing Criminal Investigation Bureau data.
Investment and installment payment fraud also rose 17.84 percent in the first 10 months of last year, she said.
As private companies are not included in the Cyber Security Management Act (資通安全管理法), most are handled using the personal data act, which designates authorities that are unable to effectively supervise cybersecurity or respond after a breach, Liu said.
The Constitutional Court last year ordered the government to improve data security within three years, saying it “might be unconstitutional” to lack an independent oversight mechanism, Legislator Hung Shen-han (洪申翰) said.
However, there have been no amendments or timelines proposed since the order was issued in August, he said.
No one has assumed responsibility, nor has anyone been notified by a government agency when their data has been leaked, he added.
Issuing fines after the fact is not enough, Legislator Chuang Ching-cheng (莊競程) said over a video call.
The personal data act instructs businesses to inform affected people directly in the event of a leak to minimize its effect, but most users have no way of knowing if their data has been compromised, he said.
Hong Kong singer Andy Lau’s (劉德華) concert in Taipei tonight has been cancelled due to Typhoon Kong-rei and is to be held at noon on Saturday instead, the concert organizer SuperDome said in a statement this afternoon. Tonight’s concert at Taipei Arena was to be the first of four consecutive nightly performances by Lau in Taipei, but it was called off at the request of Taipei Metro, the operator of the venue, due to the weather, said the organizer. Taipei Metro said the concert was cancelled out of consideration for the audience’s safety. The decision disappointed a number of Lau’s fans who had
Commuters in Taipei picked their way through debris and navigated disrupted transit schedules this morning on their way to work and school, as the city was still working to clear the streets in the aftermath of Typhoon Kong-rey. By 11pm yesterday, there were estimated 2,000 trees down in the city, as well as 390 reports of infrastructure damage, 318 reports of building damage and 307 reports of fallen signs, the Taipei Public Works Department said. Workers were mobilized late last night to clear the debris as soon as possible, the department said. However, as of this morning, many people were leaving messages
A Canadian dental assistant was recently indicted by prosecutors after she was caught in August trying to smuggle 32kg of marijuana into Taiwan, the Aviation Police Bureau said on Wednesday. The 30-year-old was arrested on Aug. 4 after arriving on a flight to Taiwan Taoyuan International Airport, Chang Tsung-lung (張驄瀧), a squad chief in the Aviation Police Bureau’s Criminal Investigation Division, told reporters. Customs officials noticed irregularities when the woman’s two suitcases passed through X-ray baggage scanners, Chang said. Upon searching them, officers discovered 32.61kg of marijuana, which local media outlets estimated to have a market value of more than NT$50 million (US$1.56
FATALITIES: The storm claimed at least two lives — a female passenger in a truck that was struck by a falling tree and a man who was hit by a utility pole Workers cleared fallen trees and shop owners swept up debris yesterday after one of the biggest typhoons to hit the nation in decades claimed at least two lives. Typhoon Kong-rey was packing winds of 184kph when it slammed into eastern Taiwan on Thursday, uprooting trees, triggering floods and landslides, and knocking out power as it swept across the nation. A 56-year-old female foreign national died from her injuries after the small truck she was in was struck by a falling tree on Provincial Highway 14A early on Thursday. The second death was reported at 8pm in Taipei on Thursday after a 48-year-old man
RSS