English

23 Million Personal Data Leaked: TAHR Sues Ministry of Interior Over "Investigation Confidentiality"

2300萬戶政個資外洩至今「偵查不公開」!台權會提告內政部

On March 15, the Taiwan Association for Human Rights (TAHR) will file an administrative lawsuit against the Ministry of the Interior (MOI) in the Taipei High Administrative Court. The lawsuit aims to compel the MOI to disclose crucial information regarding a significant personal data leak. TAHR seeks a court order mandating the MOI to provide transparency about the current status of data interfacing in the household registration system, citing illegal actions by the agency. This legal action follows a major data breach disclosed at the end of 2022, where over 23 million pieces of Taiwanese citizens' personal data were sold online. Despite the severity of the breach, the MOI has not clarified which public and private entities had access to the compromised household registration system data. The leaked data, managed by the MOI, includes sensitive details such as ID numbers, names, family information, household registration, indigenous status, military service records, and migration dates. The scope of the leak covers nearly the entire population of Taiwan, highlighting critical vulnerabilities in the management and protection of personal information by the MOI. Therefore, TAHR's lawsuit underscores the need for accountability and transparency in handling citizens' personal data, urging the MOI to address these breaches and ensure the integrity of the household registration system.

 

In March 2023, the Taiwan Association for Human Rights (TAHR) requested the Ministry of the Interior (MOI) to disclose details about how household registration data is managed. This request, made under the The Freedom of Government Information Law, aimed to uncover which agencies hold household registration data, the specific data they manage, lists of public and private sectors that have accessed this data, and the audit measures in place. However, the MOI responded by releasing only a budget thawing report submitted to the Legislative Yuan, which failed to provide any of the requested information or address concerns about the sharing and usage of personal household data. The MOI broadly cited “investigation confidentiality” and “obstruction of criminal investigations” to justify their refusal. TAHR argues that the information requested is general and should be publicly accessible. They highlight that household registration data is legally shared with other entities even without any data breaches. Moreover, the MOI is not the body responsible for investigating the data leak and should not misuse “investigation confidentiality” to withhold general information. TAHR is calling for greater transparency to ensure that personal data management is accountable and secure.

 

Chou Kuan-Ju, the Deputy Secretary-General of the Taiwan Association for Human Rights, highlighted that the right to privacy is fundamental in a democratic society. It safeguards citizens' autonomy, enabling them to shape their identity, express their opinions, engage in public affairs, and contribute to a thriving democratic system without fear. With nearly every citizen affected by the leak of 23 million pieces of personal data, individuals have the right to know how their household registration data has been shared and utilized. The Ministry of the Interior must honor citizens' right to information as stipulated by the The Freedom of Government Information Law and urgently address the need for transparency in the sharing and use of household registration data following this data leak.

Mandarin version :https://www.tahr.org.tw/news/3502