LAW
The former Computer Processed Personal Data Protection Law
("CPPL") was renamed as the Personal
Data Protection Law ("PDPL") and amended
on 26 May 2010. The PDPL became effective on 1 October 2012, except
that the provisions relating to sensitive personal data and the
notification obligation for personal data indirectly collected
before the effectiveness of the PDPL remain ineffective. The
government has proposed further amendment to these provisions,
which is pending legislative review. The information hereunder is
based upon the effective PDPL only.
DEFINITION OF PERSONAL DATA
According to PDPL, personal data means the name, date of birth,
I.D. Card number, passport number, characteristics, fingerprints,
marital status, family, education, occupation, medical record,
medical treatment, genetic information, sexual life, health checks,
criminal records, contact information, financial conditions, social
activities and other information which may directly or
