台灣創業生態系之個人資料管理與法遵議題

Personal Data Management and Legal Compliance Issue of Taiwan Entrepreneurial Ecosystem

黃炳曄(Huang Bing-Yeh)

指導教授 ： 鄭至甫

國立政治大學/商學院/科技管理與智慧財產研究所/碩士(2021年)

https://doi.org/10.6814/NCCU202100235

摘要

在巨量資料的時代裡，企業運用資料來進行分析以及驅動人工智慧模型來進行決策，藉以獲得豐厚的商業利潤。其中，個人資料所蘊含的商業價值更讓人無法忽視。因此，企業透過各種不同的手段來蒐集並使用個人資料，卻因此造成隱私權受侵害的事件不斷發生。有鑑於此，歐盟在2016年頒布了GDPR，並於2018年開始實施，藉此規範了企業使用個人資料的方式。台灣為了接軌國際，預計以GDPR作為基礎來對個人資料保護法進行修法。由於GDPR包含了為數眾多地新的個人資料使用概念，因此勢必對台灣之商業環境造成衝擊，尤其是台灣創業生態系將首當其衝。
本研究旨在探討台灣創業生態系之個人資料管理與法遵議題，因此必須先檢視台灣創業生態系現行個人資料管理與法遵之現況，並再以未來台灣個人資料保護法將類比GDPR規格之修法前提下，探討台灣創業生態系之應對與調整。為了達到前述研究目的，本研究透過深度訪談法對台灣創業生態系的不同角色進行訪問，並且依據訪談結果與次級資料提出台灣創業生態系應對之策。
首先，本研究發現，新創公司在包含知情同意以及資料安全性等方面的法遵措施的投入程度皆與新創公司的規模以及其蒐用資料的方式有關，並且遵循一法遵成長脈絡。此外，台灣創業生態系不同角色在個人資料管理與法遵議題上對新創公司的協助相當有限。
接著，本研究透過分析GDPR與現行個人資料保護法的差異，並整理出法規遵循上的先後順序，藉此提供新創公司法遵上的建議。
最後，本研究依據對台灣創業生態系的了解以及法規分析，對創業生態系提出關於去識別化與跨領域教育等方面之建議。如此一來，新創公司才能提早進行法遵，並有效節省法遵成本。另外，雖然仍有像是刪除權與兒童隱私保護等難以遵循之規定，但合規輔助者的出現，可望解決這些難解之題，並成為創新的契機。

關鍵字

新創 ； 創業 ； 生態系 ； 歐盟 ； 個資 ； 法遵 ； 台灣

並列摘要

In the age of big data, enterprises utilize data analytics and artificial intelligence models to make important decisions, thereby obtaining great commercial profits. Especially, the commercial value brought by personal data is significant. Enterprise collects and uses personal data with a variety of methods, this has however resulted in frequent violations of privacy. In view of this, GDPR, the regulation to restrict enterprise’s personal data usage, was adopted in 2016 and became enforceable beginning in 2018. In order to connect with the world, the Taiwan government is expected to amend the personal data protection law based on GDPR. As GDPR contains various new concepts in the use of personal data, it is bound to have an impact on Taiwan business environment, especially on the Taiwan entrepreneurial ecosystem will bear the brunt.
This research aimed to discuss the personal data management and legal compliance issue of Taiwan entrepreneurial ecosystem. Therefore, it is necessary to review the current situation of personal data management and legal compliance in Taiwan entrepreneurial ecosystem, and then discuss Taiwan entrepreneurial ecosystem’s response and adjustment to the future change of Taiwan new personal data protection law when it amended in accordance with GDPR. In order to achieve the aforementioned purposes of research, this research conducted in-depth interviews on different roles in Taiwan entrepreneurial ecosystem, based on the interview results and secondary data, this research proposed countermeasures for Taiwan entrepreneurial ecosystem.
Firstly, this research found that the legal compliance investment (including informed consent and data security) of startup companies are related to the scale of startup companies and the way they process personal data, startup companies also follow a certain law-compliance growth path. In addition, with regard to personal data management and legal compliance issue, the current assistance provided by different roles in Taiwan entrepreneurial ecosystem is still limited.
Next, this research analyzed the differences between GDPR and the current Taiwan personal data protection law, and points out the priority when complying regulation, for startup companies.
Finally, based on the understanding of Taiwan entrepreneurial ecosystem and legal analysis, this research puts forward suggestions on de-identification and interdisciplinary education for the entrepreneurial ecosystem. Thus, startup companies can implement legal compliance earlier and save legal compliance costs effectively. In addition, although there are still difficult-to-compliance regulations such as the right to delete and the protection of children's privacy, the emergence of Compliance Supporter is expected to solve these difficult problems and become an opportunity for innovation.

並列關鍵字

GDPR ； personal data ； startup ； start-up ； entrepreneurial ecosystem ； compliance ； Taiwan

參考文獻

英文文獻

Acs, Z. J., Stam, E., Audretsch, D. B., & O’Connor, A. (2017). The lineages of the entrepreneurial ecosystem approach. Small Business Economics, 49(1), 1-10. doi:10.1007/s11187-017-9864-8

Adner, R. (2016). Ecosystem as Structure: An Actionable Construct for Strategy. Journal of Management, 43(1), 39-58. doi:10.1177/0149206316678451

Grow Advisors. (2017). The Startup Ecosystem White Paper. Retrieved from: https://www.startupcommons.org/download-documents.html

Alm, J. G. (2015). The Privacies of Life: Automatic License Plate Recognition in Unconstitutional under the Mosaic Theory of Fourth Amendment Privacy Law. HAmLINE L. REv., 38, 127.