開放銀行與個人資料自主權之探討

A study on the Self-Determination Right to Personal Data of Open Banking

開放銀行的推動與實踐，不僅為世界趨勢所在，亦為我國政府金融施政目標，然我國在推動模式上選擇自願自律模式，由銀行自願參與並遴選第三方服務提供者（Third-party Service Providers, TSP）合作搭配，從長遠發展的角度觀察，恐難收具體成效。基此，本文建議未來可借鏡歐盟、英國與澳洲的強制開放模式，並在配套措施部分建立資料可攜的法制環境及後續資料追蹤平台，同時由政府設立或指定專責機構辦理TSP業者的認證、分級管理與稽查機制，真正落實開放銀行制度的推動。
本文首章說明研究動機與目的，第二章為個人資料自主權概述，從回顧個人資料保護的憲法基礎為起點，論述個人資料自主權的發展歷程，以及台灣法制相關規範。第三章為開放銀行發展趨勢，從數位經濟與金融科技面向簡述開放銀行緣起、定義及運作，爬梳世界主要國家開放銀行政策之比較研究，例如法令強制、政策鼓勵及市場驅動。第四章為台灣開放銀行實施現況，從金融服務型態改變開始，說明台灣推動開放銀行之自律自願模式與法制框架，並介紹代表性案例。第五章聚焦開放銀行關鍵之消費者賦權，檢視開放銀行下的資料定位與消費者賦權概念，並介紹歐盟一般資料保護規則（General Data Protection Regulation, GDPR）之資料可攜權及澳洲消費者資料權。末章結論與建議，嘗試對我國開放銀行提出以下建議：1.政策面改採強制開放模式；2.法制面建立消費者賦權機制；3.監理面設立TSP管理機構，期能作為開放銀行政策之參考，並有助於個人資料自主權之落實。

The promotion and practice of open banking is not just an international trend but also the financial policy goal of our nation. However, our country has promoted the voluntary selfdiscipline model whereby banks can voluntarily participate and select third-party service providers (TSP). This model may not achieve concrete results from the long-term development perspective. Therefore, this study suggests that we may reference the mandatory open banking models from the European Union, the United Kingdom, and Australia to construct a legal environment for data portability and a follow-up data tracking platform. The government must establish or designate a special agency to handle the certification, hierarchical management, and inspection mechanism for the TSP operators to comprehensively promote and implement the open banking system.
The first chapter of this paper explains the motivation and purpose of the study, and the second chapter provides an overview of personal data autonomy. It started by exploring the constitutional basis of personal data protection to discuss the origin and development of personal data autonomy as well as the relevant standards provided by Taiwan’s legal system. The third chapter explores the open banking development trend, outlines the origin, definition, and operation of open banking from the digital economy and financial technology perspective, and performs a comparative study on open banking policies such as legal mandates, policy incentives, and market motivations from major countries worldwide. Chapter four investigates the open banking implementation status in Taiwan starting from the financial service pattern changes. This chapter explains Taiwan’s self-discipline, voluntary model, and legal framework for open banking promotion and introduces representative case precedents. Chapter five focuses on the key consumer empowerment issues from open banking, explores the data positioning and empowerment concepts under open banking, and provides a comparative study on the right to data portability in the General Data Protection Regulation(GDPR) and consumers data rights for Australian to propose legislative recommendations for our country. The conclusions and suggestions in the last chapter provide the following recommendations for our open banking system: (1) Adopt a mandatory opening model policy. (2) Establish a consumer empowerment mechanism in the legal system. (3) Set up a supervision administration for TSP. The goal is to provide a reference for open banking policies and personal data autonomy implementation.