How an Internet Portal Company Complies with the new "Personal Data Protection Act" in Taiwan

Jessica Pong, Legal Manager, Yamedia, Taiwan

With the rapid growth of internet access, collection, process and utilization of personal data, internet companies have become a controversial issue for individuals, multinational companies and even governments around the world. Unlike EU adopted Directive 95/46/EC of the European Parliament and the OECD guidelines on the Protection of Privacy and Trans-border Flows of Personal Data, Taiwan was still assuming an 'industry self-regulation' approach to the issue of online personal data collection for the past decade. While there was no direct law applicable to protect the personal information sharing consumer's personal data (disclosed) during online activities, the “Computer - Processed Personal Data Protection Act “(hereinafter referred to as the CPPDPA 95’) promulgated in 1995 offered limited protection to various kinds of personal information in Taiwan .

Jessica Pong who has extensive working experience in developing and implementing legal approaches and policies with Intellectual Property, Telecommunication, Internet Advertising and Privacy issues over social networking company now works as a legal manager in a Taiwan Internet portal company. She also leads public policy team "MS Mincho" engagement with regulators and legislators on Copyright, Telecommunication, SPAM and Privacy law issues as a legal policy Adviser for NCC, IPO and Consumer Protection Committee. With proven academic accomplishment, litigation and negotiation skills in contracts, litigation, IP and M&A, she is also a well- experienced in-house legal officer over IP and Technology for OEM and ODM Company for IP infringements and transaction disputes. As for privacy and information security issues, she was a well-trained ISO 27001 Lead Auditor.