日本個人編號法對我國之借鏡──以個人資料保護監督機制之建立為主

The Turning Point of Personal Data Protection Law in Japan

我國於2010 年4 月將原「電腦處理個人資料保護法」大幅修正為「個人資料保護法，並於2012 年10 月1 日開始施行。惟對個資法施行之監督，並未設置獨立監督機關。而日本於2005 年4 月施行之「個人情報保護法」與我國相同，亦未設獨立監督機關；為改善此一缺失，於2013 年5 月26 日，完成「行政程序中為識別特定個人之編號利用法」之立法，建置法制讓行政機關等於處理特定行政領域事務時，得利用個人編號，透過專設之電腦網路平台，與各機關作連結，進行所保有特定個資之比對、組合，以掌握完整正確資料處理該當行政事務。同法並特別設計「特定個人情報保護委員會」以監督行政機關等對「個人編號法」之運用，並確立本人有得利用電腦操作系統確認自己個資被存取利用記錄之權利，此外更引進隱私影響評價制度，均為個資法所未有之新規範，實為個資法制上一大進展。本文先分析建立獨立機關監督個資法施行之必要性，其次介紹日本個資法現行之監督機制，再就個人編號法立法之經緯、有關個資保護之特別規定、新設獨立監督機關之組織、職權等、影響評價制度等作說明，最後檢討我國現行個資法相關問題，並提出建議。

Taiwan amended the protection of computer processed personal data protection law into the new personal data protection law in April 2010, and was executed on October 1st 2012. Supervisements for the laws enforcement was set up, but there wasn't an independent supervisory organization. The protection and privacy transborder flows of personal data law which was executed in Japan in April 2005 was similar to Taiwan's law, which didn't have an independent supervisory organ. In order to improve the weak points, Japan legislated the Act on the use of the number to identify a specific individual in administrative procedures (My number Law) on May 26th 2013. The law enabled the administrative organs to use personal labels on specialized computer platforms in order to connect with other organs when processing specific administrative matters. Including data comparison and combination to handle complete data when processing. The law also created the independence of data privacy authorities in order to control the use of the number to identify a specific individual. Establishing that the persons data's have been saved and recorded. The private infection evaluated system was also recommended. These are all new specifications to the personal data laws in Japan, which represents a major progress to the country. Part one of this article analysis the importance of establishing an independent organization to supervise the personal data laws. Part two introduces the active oversight mechanisms in Japan. Also explaining the legislating process of the My number Law, special provisions on personal data protection, the new obligation of privacy impact assessment and terms on the establishing of an independent organization, the last the review of Taiwan's personal data laws with proposes.