1. 關於數位權利

啟動數位權利立法工程，確立可依法主張之公民權利、政府義務與公權力之界線。

數位法治工程應即刻啟動，請參民間版《數位權利法案》草案，確立公民之權利與政府義務、公權力之界線與限制人民權利之正當法律程序及救濟機制。

說明：
政府應以明確立法的方式，確立台灣作為數位自由社會應有的人民之權利、政府相應之義務、公權力之界線與限制人民權利之正當法律程序及救濟機制。前述立法工程除了基本法等指引性、架構性之法規外，亦盡快研擬通過具體可操作之法規，使人民可以依法向行政機關提出要求，並在遭遇權利侵害時循司法途徑進行救濟。
應確立之數位權利類型包含但不限於：資料自主權所衍伸之知情權（包含能充分知悉並掌控個人數位資料與數位足跡的利用方式）、保密權與匿名權、請求非數位化 / 非個人化 / 非自動化決策之權利，與可行且便民之替代方案權等。
關於此類立法方向與條文，敬請參酌民間版《數位權利法案》草案。

備註：
請參考司改會數位權利法案 v1.1

2. 關於個資保護

訴請政府完善落實個資保護制度，並遵循明確且健全的隱私保護法律。

說明：
訴請政府完善個資保護制度，確保該制度之落實能遵循明確且健全的隱私保護規則。期許政府詳如：

1. 政府承諾之 2025 年 8 月以前將成立個資保護委員會，並啟動個資法第二階段的修法，陳請政府在法規研議過程中，納入公民社會參與。
2. 獨立個資保護機關具有實質二級機關之職能與資源，足以同時監督公私部門之資料蒐用。政府亦應積極對公務機關進行實質監督與課責。

備註：
請參考民間團體個資法修法聲明個資法修法聲明

• [台權會TAHR]
• [司改會 JRF]

3. 關於個資外洩

建立並落實公務機關個資外洩之究責與應變補救之具體機制。

說明：
政府應積極落實公務機關個資外洩之究責與應變機制，機制中應含有防止損害擴大、補救措施及防止類似事件再次發生等標準程序與期限。尤其就2022年全國2,300多萬筆戶政資料外洩事件應即刻防止損害擴大、進行具體補救計畫、完成外洩事件之獨立調查、並正式向全民說明原委及補救計畫。

4. 關於個人健康資料

尊重個人健康資料之同意與控制權。

說明：
政府至少應針對衛福資料、健保資料、醫院病歷與檢驗等健康資料之利用，訂定明確保障個資保護的規範，落實自主之知情同意、事後控制（停止利用與刪除）、撤回同意等權利，以符合台北宣言等醫學研究倫理、111年憲判13號憲法判決之保障之病患尊嚴與資訊自主權。

5. 關於限制網路接取

政府應防止行政權誤／濫用於限制網路接取。

說明：
公部門有義務保障網路的中立與開放，在介入網路內容時（如要求下架或封鎖網站），須以法律有明確授權、符合比例原則為前提，且需建立具獨立性的監督與救濟機制。政府執法過程也應透明公開且有完整紀錄，例如定期公布要求限制網路內容或接取之統計。

備註：
請參考司改會數位權利法案 v1.1第7條

6. 關於數位平台

政府與企業推動數位平台依國際人權標準治理，設置問責機制防止人權侵害與負面影響。

說明：
政府與企業需積極塑造有利於相對脆弱或不利處境群體身心健康、網路隱私與安全的網路環境，包含但不限於防治網路霸凌、兒少性剝削、數位性暴力、誘使兒少自傷或成癮內容以及仇恨言論等。
針對數位平台與各面向之數位服務，推動並通過各項治理符合國際人權標準之立法，對數位業者課予責任及義務，特別是符合一定規模之網路平台業者，應設置可受獨立第三方問責與權利侵害救濟的人權治理機制，以防治各類侵害人權問題與負面影響，打造免於網路暴力與仇恨言論的安全網路環境，建置超大型網際網路平臺提供者，並保障言論自由。
此外，要求業者採取積極措施治理相關資訊，並針對演算法可能放大負面內容的情況，建立預防機制與透明化審查制度。

7. 關於UNGPs和人權盡職調查法

政府推動數位科技企業遵守UNGPs與人權盡職調查法，降低人權侵害風險。

將數位監控公司或相關設備、軟體公司、資料買賣或仲介商、電信公司與大型網路平台公司等數位科技企業直接造成或間接促成的潛在人權侵害風險納入考量。

包含但不限於推動強制性《企業人權暨環境盡職調查法》，要求其符合《聯合國企業與人權指導原則》（UNGPs）要求企業整合內部職能與程序，採取適當行動，並藉助內部或獨立的外部人權專業，遵守國際人權標準。

8. 關於人工智慧

完成人工智慧或電腦輔助決策立法，相關研發、使用符合人權標準。

說明：
完成人工智慧或其他電腦輔助決策之相關立法，確保相關研發、產品及使用都能符合國際人權標準，落實透明度與可解釋性，設立具足夠強制力的問責與獨立監管機制，禁止高度侵害人權風險、無法符合標準之技術，確立個人和團體之相關權利主張、救濟管道及對應機關。各公務機關對其研發或使用之人工智慧相關技術或其他電腦輔助決策系統，應事前公告各項技術使用之法源依據、模型訓練過程、訓練資料類型及來源、應用範圍、影響決定之程度、人權影響評估之過程與結論。前述人權影響評估應納入公民社會之參與。

9. 關於開源

將開源、公民科技推動納入法律和政策制定，作為公共服務與數位發展的核心策略。

說明：
推動開放科技（開放原始碼、開放資料、開放政府）、公民科技發展，來促進公共服務與數位發展的透明、可監督性、強韌。自由開源軟體（FLOSS）尤其能促進數位發展的永續性、在地創新與公民培力，政府應制定政策和納入法律，將開源納入公共服務與數位發展的核心策略。

1. About Digital Rights

Establish practical legal mechanisms regarding digital rights and freedoms.

It is high time to establish practical legal mechanisms regarding digital rights and freedoms to  ensure democracy and rule of law continues to strive in the digital age. We urge your attention on the “Digital Bill of Rights” drafted by civil society, which focuses on the individual and the people’s rights, government obligations and constraint of power, as well as establishing the due process and remedy mechanism for when the individual and the people’s rights are to be restricted by the government.

Description:
It is high time to establish practical legal mechanisms regarding digital rights and freedoms to  ensure democracy and rule of law continues to strive in the digital age. We urge your attention on the “Digital Bill of Rights” drafted by civil society, which focuses on the individual and the people’s rights, government obligations and constraint of power, as well as establishing the due process and remedy mechanism for when the individual and the people’s rights are to be restricted by the government.
The government should establish digital rights including, but not limited to, the public and the individual’s right to be informed, as an extension of the right to digital autonomy (including the ability to be fully aware and control the utilization of personal and behavioral data and footprints), the right to secrecy, the right to anonymity, the right to request non-digital/non-personal/non-automatic decision-making, and the right to meaningful alternatives,etc.
We urge your attention on the “Digital Bill of Rights,” by which a bottom-up approach is taken up by volunteering lawyers, tech experts, and human rights activists.

Footnote:
Please seeDigital Bill of Rights v1.1 (drafted by JRF network)

2. About Personal Data Protection

Call upon the government to improve regulation on personal data protection, and follow clear and sound privacy protection principles.

Description:
We respectfully call upon the government to improve the regulation for personal data protection, ensuring the implementation of such regulation can align with clear and sound laws in privacy protection.
Specifically, we hope the government will:

1. Fulfill its promise and finish establishing the Personal Data Protection Commission before August 2025, as well as initiating further amendments to the Personal Data Protection Act for assuring data protection authoritys power and duties. We request the government to involve civil society engagement in the regulation deliberation process.
2. Ensure the independent agency protecting personal data has substantive power and resources equivalent to those of a second-tier agency and sufficient to monitor data collection and utilization in public and private sectors. The government should also actively and substantially supervise public departments and ensure accountability.

Footnote:
Please see CSO's Statement regarding the government's recent Proposed Amendment to the Personal Data Protection Act:

• Taiwan Association for Human Rights
• Judicial Reform Foundation

3. About Personal Data Breaches

Establish and implement substantive mechanisms for accountability and remedy in the event of personal data breaches in public offices.

Description:
The government should actively implement accountability and remedy mechanisms for personal data breaches in public sectors. The mechanism should include measures for damage control and remedial action, as well as standard operating procedures and a stringent timeline to prevent similar events from happening again. Specifically, for the incident in 2022 where over 23 million people’s household registration data were leaked, the government should immediately prevent further damage, implement substantive remedial plans, complete an independent investigation into the leak, and officially report the full details of the incident and the corresponding remedial plan to the public.

4. About Personal Medical Data

Call upon the government to respect the rights to consent and personal medical data control.

Description:
The government should lay down rules for explicit medical data protection, which should, at the minimum, include data related to health conditions, health insurance, medical records, and medical examination records. The government should respect the people’s right to informed consent, right to control data after provision, and right to withdraw consent, top ensure compliance with the medical ethics protected by the WMA Declaration of Taipei and others, as well as the patients’ right to dignity and informational autonomy, as guaranteed by the Constitutional Court Judgment No. 13 of 2022.

5. About Restricting Internet Access

The government should prevent the misuse and abuse of executive power in restricting internet access.

Description:
When interfering with online content (such as requiring taking down the content or banning the website), the government must premise itself under the principle of legal reservation and ensure the process is transparent and thoroughly documented. We also call upon the government to periodically publish statistics on internet content and access limitation demands.
Public authorities have a duty to ensure the neutrality and openness of the internet. When intervening in internet content (such as requesting the removal or blocking of websites), it must be based on clear legal authorization and in accordance with the principle of proportionality. Additionally, an independent oversight and remedy mechanism should be established. The government's enforcement process should also be transparent and fully documented, with regular publication of statistics on requests to restrict internet content or access.

Footnote:
Please see Article 7 of theDigital Bill of Rights v1.1 (drafted by JRF network)

6. About Digital Platforms

The government and enterprises should promote governing digital platforms under international human rights standards and establish accountability mechanisms to prevent human rights violations and negative impacts.

Description:
The government should promote and adopt legislation for digital platforms and other digital services that align with international human rights standards. The legislation should require responsibilities and obligations for digital service providers. Especially for internet platform providers above a certain scale, the government should establish human rights governing mechanisms that can handle third-party accountability and remedy for rights violations, to prevent various human rights violations and negative impacts. These measures should foster a safe network environment free from online violence and hate speech in collaboration with major digital platform providers and protecting freedom of speech.
Both Government and enterprises should actively promote a network environment favorable for mental health, internet privacy, and network safety for relatively marginalized communities. This includes, but is not limited to, preventing cyberbullying, child and youth sexual exploitation, gender-based online violence, hate speech, and content that encourages self-harm or addiction from children and youth.
Additionally, the government should require enterprises to adopt active measures in governing relevant content. Enterprises should establish prevention mechanisms and transparent censorship regulations for situations where algorithms may amplify negative material.

7. About UNGPs and human rights diligence law

The government should promote digital enterprises to follow UNGPs and human rights diligence laws, lowering risks for human rights violations.

Description:
The government should take into consideration the potential risks of human rights violations by digital technology enterprises such as digital monitoring and surveillance companies, relevant hardware, software, information sellers or agents, as well as telecom providers and large digital platform companies.
This includes, but is not limited to, promoting mandatory law on corporate human rights and environmental due diligence, requiring enterprises to operate in accordance with United Nations Guiding Principles on Business and Human Rights (UNGPs), requiring enterprises to coordinate internal capacities and procedures to take appropriate measures, and ensuring compliance with international human rights standards with the assistance of internal or external human rights experts.

8. About AI

Complete legislation on Artificial Intelligence or Computer-Aided Decision-Making to ensure that all related development and applications comply with human rights standards.

Description:
The government should complete legislation on Artificial Intelligence or Computer-Aided Decision-Making technology to ensure that all related development, products, and applications adhere to international human rights standards. This includes implementing transparency and interpretability, establishing accountability and independent oversight mechanisms with sufficient enforcement power , prohibiting technologies with high risk of human rights violations that cannot meet these standards, and establishing channels for individuals and groups to assert their rights and seek remedies, as well as identifying the responsible institutions for these purposes. Before developing or deploying Artificial Intelligence or Computer-Aided Decision-Making technologies, public authorities must disclose the legal basis for their use, the model training processes, the types and sources of training data, the scope of application, the degree of impact such systems will have on decisions, and the process and outcomes of human rights impact assessments. These human rights impact assessments must include the participation of civil society.

9. About Open Source

Include Open-Source and Civic Technology into the legislation process as the core strategy for public service and digital development.

Description:
Promote the development of open-source (open source code, open data, and open government), information commons and civic technology to advance the transparency, monitorability, and tenacity of public service and digital development. Particularly, free and open-source software (FLOSS) can advance sustainability, local innovation, and civic empowerment in digital development. The government should formulate policies and laws that include open source as the core strategy for public service and digital development.