Personal Data Protection Act
Taiwan's law governing how government and non-government entities collect, process and use personal data. Under the provisions now in force, when a violation of the Act leads to personal data being stolen, leaked or altered, the organisation must investigate and notify the people affected. A promulgated amendment adds duties such as reporting breaches to the authorities, but its effective date has not yet been set.
Further reading: law.moj.gov.tw
From the Security Academy
Responding to a Personal Data Breach: Scoping, Reporting Deadlines and Notifying Individuals
How to scope and contain a personal data breach, which version of Taiwan's PDPA applies, sector reporting deadlines, GDPR, and what to tell affected people.
17 min read ·
Advisories that mention this term
91APP Commerce Cloud Order Database Breached: Unpatched Appsmith Exploited as Entry Point; Member Order Data Across Brands Leaked and Abused for Scams
E-commerce technology provider 91APP confirmed that one of its Commerce Cloud order databases was illegally accessed on October 3 via an unpatched third-party tool, Appsmith, after which the attacker retrieved database credentials from an internal GitLab instance .
Korea's PIPC finds Coupang key-management failures exposed 37.55 million people, imposes record ₩624.68B fine
South Korea's Personal Information Protection Commission found that failures in managing authentication signing keys and access controls at Coupang led to the leak of about 37.