Skip to content

Evidence request lists

Taiwan PDPA

Evidence request list. 8 controls, 8 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 12 September 2026. Published by The Art of Service.

Accountability

TAIWAN-4
DPIA, Privacy by Design

Per Taiwan PDPA + NDPA guidance: DPIA + privacy by design.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-4
Where this commonly fails
  • NDPA + 11 security categories partial

Breach

TAIWAN-8
Breach + Enforcement

Per Taiwan PDPA: breach notification + criminal + civil penalties.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-8
Where this commonly fails
  • NDPA + 11 security categories partial

Consent

TAIWAN-2
Consent, Notice, Sensitive Data

Per Taiwan PDPA: consent + notice + sensitive (medical + genetic + sex life + criminal).

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-2
Where this commonly fails
  • NDPA + 11 security categories partial

Governance

TAIWAN-7
DPO + Governance

Per Taiwan PDPA + Notification: DPO + records + training.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-7
Where this commonly fails
  • NDPA + 11 security categories partial

Rights

TAIWAN-3
Data Subject Rights

Per Taiwan PDPA: rights including access + correction + cessation + deletion + opt-out direct marketing.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-3
Where this commonly fails
  • NDPA + 11 security categories partial

Scope

TAIWAN-1
Scope, Lawful Basis (Taiwan)

Per Taiwan PDPA: scope + lawful basis. Align with NDPA (National Data Protection Authority) launched 2024.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-1
Where this commonly fails
  • NDPA + 11 security categories partial

Security

TAIWAN-5
Security

Per Taiwan PDPA + Implementing Regulations: security including 11 categories + appropriate to risk.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-5
Where this commonly fails
  • NDPA + 11 security categories partial

Transfer

TAIWAN-6
Cross-Border + Processor

Per Taiwan PDPA: cross-border with destination country restrictions + processor management.

Artefacts an auditor will ask for
  • Taiwan PDPA evidence for TAIWAN-6
Where this commonly fails
  • NDPA + 11 security categories partial
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the Taiwan PDPA framework page.