This paper attempts to outline the current landscape of personal data protection in Taiwan. After an analysis of the 1995 Act of Computer Processing of Personal Data and Its Protection, we conclude that the Act is full of loopholes, hence not helpful in protecting people's privacy. We are particularly critical of various governmental offices and state enterprises about their liberty in collecting citizens' personal data and their mishandling of the collected personal databases. Many incidents involving leakage of personal data from governmental civil databases are used to support the proposal of a remedial amendment to the 1995 Act, so that personal privacy can be better protected. We also advocate the idea of establishing an independent Personal Data Protection Commission in Taiwan.