Taiwan's legislature enacted the Cyber Security Management
Act (the "Act") in early May 2018. The Act was published
by the Presidential Office in June and will take force on a date to
be announced by the Executive Yuan.
This introduction to the Act begins with a discussion of the
background, policies and definitions in the general principles
chapter of the Act. That discussion is followed by a brief look at
the Act's chapter on public agencies and a more detailed look
at the chapter on the private sector focusing on critical
infrastructure operators.
The objectives of the Act are to implement a national
information security policy and to build a secure information
environment to protect national security and the public's
welfare. Act §1. According to the Executive Yuan, there were
360 security incidents at Taiwanese public agencies in 2017. While
most were less serious Level 1 and Level 2 incidents, 12 were Level
3 incidents.
