Taiwan
Tier 3 Comprehensive law Asia-PacificPrincipal framework: PDPA (2023 amendments) (2010). Regulator: PDPC (being established). The 2023 amendment created an independent Personal Data Protection Commission after a Constitutional Court deadline; its establishment has been phased through preparatory offices.
At a glance
- Principal law
- PDPA (2023 amendments)
- Regulator
- PDPC (being established)
- Breach notification
- Notify affected subjects; sectoral rules set authority reporting
- Maximum penalty
- 2023 amendments raised fines to NT$15m for serious security failures
- DPO required
- 2023 amendments require security personnel in designated sectors
- Digital consent age
- No statutory age — civil capacity
- Extraterritorial reach
- Limited
Structure
- Structural pattern
- Not assessed
- Sub-jurisdictions
- None — no sub-national axis
- ISO code
- TW
A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.
Transfers and adequacy
- EU member
- No
- EEA member
- No
Instruments
No instrument profiled yet.
Sources
No source recorded yet. This record cannot rise above Tier 3 until it has one — see depth tiers.
Never independently verified — seeded from the prototype.