Personal Data Protection Act (PDPA) - Taiwan

The Personal Data Protection Act (PDPA) is Taiwan’s primary data protection legislation governing the collection, processing, storage, use, and disclosure of personal data by public and private entities. The Act establishes requirements for lawful processing, consent, transparency, data security, and individual rights. It regulates sensitive personal data, cross-border data transfers, and obligations of organisations handling personal information, forming Taiwan’s comprehensive privacy protection framework.