Recognizing the Personal Data Protection Act

Which personal data are protected by the Personal Data Protection Act?
The Personal Data Protection Act protects personal data that can directly or indirectly identify a natural person, such as their name, date of birth, national ID number, passport number, characteristics, fingerprints, marital status, family, education, occupation, medical records, medical treatment, genetics, sexual life, health check, criminal record, contact information, financial situation, social activities, and other data.

Can you collect or use personal data at will?
When collecting personal data, do you need to inform the parties in advance? What needs to be explained?
The collection and use of personal data must have a specific purpose, such as the collection in a prize-giving activity can only be used for the prize-giving activity, and when collecting, you need to inform the parties, including the name of the collector, the purpose, the type of data, the method of use, the rights of the parties, etc.

What personal data use behaviors does the Personal Data Protection Act regulate? Will there be criminal liability for violating the Personal Data Protection Act?
The Personal Data Protection Act regulates the collection, processing, and use of personal data, which must comply with the regulations to protect privacy rights.
Violating the Personal Data Protection Act may be punished with criminal liability, and those who intend to profit from the crime or harm the interests of others may be sentenced to imprisonment for up to five years and a fine of up to NT$ 1 million.