Due to lack of regulations, divergent opinions abounded about the establishment of Biobanks and collection of human biological specimen. For example, a researcher in an academic research organization and a hospital-based physician collected biospecimens from native Taiwanese. Although they insisted that the collections were for research only, human rights groups, ethics researchers, and groups for natives´ benefits condemned the collections as an invasion of human rights. Consequently, the Taiwanese government recognized the need for Biobanks regulation.
To investigate the relationship between disease and multiple factors and to proceed with possible prevention, The Legislative Yuan Social Welfare and Healthy Environment Committee has passed "the draft statute of human biobank management" through primary reviewing process on December 30, 2009 and subsequently passed through entire three-reading procedure on January 7, 2010. Therefore, the medical and research institute not only can set up optimal gene database for particular disease curing, but also can collect blood sample for database establishment, legally. However, the use of sample collections will be excluded from the use of judiciary purpose.
In the light of to establish large scale biobank is going to face the fundamental human right issue, from the viewpoint of biobank management, it is essential not only to set up the strict ethics regulation for operational standard, but also to make the legal environment more complete. For instance, the Department of Health, Executive Yuan had committed the earlier planning of Taiwan biobank establishment to the Academic Sinica in 2006, and planned to collect bio-specimen by recruiting volunteers. However, it has been criticized by all circles that it might be considered violating the Constitution article 8 provision 1 front paragraph, and article 22 rules; moreover, it might also infringe the personal liberty or body information privacy. Therefore, the Executive Yuan has passed the draft statute of human biobank management which was drafted and reviewed by Department of Health during the 3152nd meeting, on July 16, 2009, to achieve the goal of protecting our nation’s privacy and promoting the development of medical science by management biomedical research affairs in more effective ways. Currently, the draft statute has been passed through the primary review procedure by the Legislative Yuan.
About the draft statute, there are several important points as following: (1) Sample Definition: Types of collected sample include human somatic cell, tissues, body fluids, or other derivatives; (2) Biobank Establishment: It requires not only to be qualified and permitted, but also to set up the ethical reviewing mechanism to strengthen its management and application; (3)Sample Collection and Participant Protection: In accordance with the draft statute, bio-specimen collecting should respect the living ethics during the time and refer to the "Medical Law" article 64 provision 1; before sample collection, all related points of attention should be kept in written form , the participant should be notified accordingly, and samples can only be collected with the participant’s consent. Furthermore, regarding the restrained read right and setting up participants’ sample process way if there were death or lost of their capacity; (4) Biobank Management: The safety regulation, obligation of active notification, free to retreat, data destruction, confidentiality and obligation, and termination of operation handling are stipulated; and (5) Biobank Application: According to the new draft statute, that the biological data can’t be used for other purposes, for example, the use of inquisition result for the "Civil law", article 1063, provision 2, prosecution for denying the parent-child relationship law suit", or according to the "Criminal law", article 213, provision 6. This rule not only protects the participants’ body information and their privacy right, but also clearly defines application limits, as well as to set up the mechanism for inner control and avoid conflict of interests to prevent unnecessary disputes.
Finally, the Department of Health noted that, as many medical researches has shown that the occurrence of diseases are mostly co-effected by various factors such as multiple genes and their living environment, rather than one single gene, developed countries have actively devoted to human biological sample collection for their national biobank establishment. The construction and usage of a large-scale human bank may bring up the critical issue such as privacy protection and ethical problems; however, to meet the equilibrium biomedical research promotion and citizen privacy issue will highly depend on the cooperation and trust between the public and private sectors.
The field of human biobanks will be governed by the Act of Human Biobanks (“Biobanks Act”) after its promulgation on February 3, 2010 in Taiwan. According to Article 13 of the Biobanks Act, a biobank owner should establish its directive rules based on the regulation of information security of biobanks announced by the competent authority. Thus the Department of Health announced the draft of the Human Biobanks Information Security Regulation (“Regulation”) for the due process requirement.
According to the Biobanks Act, only the government institutes, medical institutes, academic institutes, and research institutes are competent to establish biobanks (Article 4). In terms of the collecting of organisms, the participants should be informed of the relevant matters by reasonable patterns, and the collecting of organisms may be conducted after obtaining the written consent of the participants (Article 6). The relative information including the organisms and its derivatives are not allowed to be used except for biological and medical research. After all the protection of biobanks relative information above, the most important thing is the safety regulations and directive rules of the database administration lest all the restrictions of biobanks owners and the use be in vain.
The draft Regulation aims to strengthen the safety of biobanks database and assure the data, the systems, the equipments, and the web circumstances are safe for the sake of the participants’ rights. The significant aspects of the draft are described as below. At first, the regulation should refer to the ISO27001, ISO27002 and other official rules. Concerning the personnel management, the security assessment is required and the database management personnel and researchers may not serve concurrently. In case some tasks are outsourced, the contractor should be responsible for the information security; the nondisclosure agreement and auditing mechanism are required. The application system should update periodically including the anti-virus and firewall programs. The biobanks database should be separated physically form internet connection, including the prohibition of information transforming by email or any other patterns through internet. The authorizing protocol of access to the biobanks should be established and all log files should be preserved in a period. The system establishment and maintenance should avoid remote control. In case the database system is physically out of the owner’s control, the authorization of the officer in charge is required. If an information security accident occurred, the bionbanks owner should contact the competent authority immediately and inform the participants by adequate tunnel. The biobanks owner should establish annual security auditing program and the project auditing will be conducted subject to the necessity. To sum up, while the biobanks database security regulation is fully established, the biobanks owners will have the sufficient guidance in connection with the biobank information security to comply with in the future.
Introduction to Tax Incentive Regime for SMEs I. Introduction The developments of SMEs (small-and-medium enterprises) plays an important pillar of development of industries and creation of jobs in Taiwan. In 2017, the total number of SMEs in Taiwan was 1,437,616. They offer 8,904,000 jobs, accounting for 78.44% of the workforce[1]. However, SMEs have difficulties in entering international supply chains because of their weakness in finance. Therefore, how to enhance the global competitiveness of SMEs is an important issue for the concerned authority. Chapter 4 of the Act for Development of Small and Medium Enterprises prescribes the tax incentive regime based on the financial capability of SMEs and characteristics of industries in order to facilitate the development of SMEs, especially the globalization of SMEs. This paper will review the importance of tax incentives to SMEs and introduces the tax incentive regime under the Act for Development of Small and Medium Enterprises In order to help SMES have an understanding of such regime. II. SME Tax Incentives Scheme As the gatekeeper of the market, the government may intervene the market with various policies or tools to reallocate and improve the soundness of the market environment when the market competitions is impaired due to information asymmetry or externalities. At this juncture, preferential tax rates or tax deductions can be offered to specific taxpayers through legal institution. This allows these taxpayers to retain higher post-tax earnings so that they are incentified to invest more resources in the legally defined economic activities. Tax incentives targeting at risky or spillover investments to create benefits to specific economic activities will help the development of industries and markets. Whilst Article 10 of the Statute for Industrial Innovation has provided tax cuts for R&D expenditures, these incentives are not focus on SMEs and hence not supportive to their research and innovations. This was the reason for the 2016 amendment of the Act for Development of Small and Medium Enterprises added Article 35 to offer tax incentives in order to encourage R&D and innovative efforts and Article 35-1 to activate intellectual properties via licensing. These articles aim to accelerate the momentum of innovations and transformations which promoting investments for SMEs. OthersTo assist SMEs to cope with change of the business environment, the Article 36-2 added the tax incentives for salary or headcount increases, to contribute to the sustainability of SMEs and stabilize the labour market and industrial structures. Following is an explanation of the applicability of these schemes and the requirements to qualify such incentives. III. Tax Incentives to Promote Investments (I) Tax deductions for R&D expenditures Governments around the world seek to encourage corporate R&D activities, that Tax incentives are put in place to reduce R&D costs and foster a healthy environment of investment for more R&D initiatives. Neighboring countries such as Japan, Korea and Singapore are frequently practicing belowing tax burdens to encourage R&D efforts. Article 35 of the Act for Development of Small and Medium Enterprises in Taiwan allows accelerated depreciation and offers tax cuts[2] to stimulate R&D and innovations and create an investment friendly environment for SMEs. 1. Taxpaying Entities and Requirements (1) Qualifications for SMEs Article 35 of the Act is applicable to qualified SMEs and individual taxpayers, which are (1) from manufacturing, construction & engineering, mining and quarrying industries, with paid-in capital below or equal to NT$80 million or with the number of full-time employees less than 200 people; (2) from other industries with the sales of the previous year below or equal to NT$100 million or with the number of full-time employees less than 100 people. Thus, the qualifications of Small and Medium Enterprises are based on either paid-in capital/sales or number of employees under the Act[3].Meanwhile, SMEs may not have an independent R&D department due to the limit of size or operating cost.Therefore, if the taxpayers hiring full-time R&D personnel that can provide records of job descriptions and work logs to R&D activities, the SMEs can access the tax incentives provided that the R&D functions. The recognized by government agencies is increasingly flexibility for SMEs seeking policy support. 2. Taxpayers and requirements (1) A certain degree of innovativeness As the tax incentive regime strives to promote innovations, the R&D expenses should be used to fund innovative developments. According to the official letters from the Small and Medium Enterprise Administration, Ministry of Economic Affairs, there is no high bar as forward-looking, risky and innovative as usually” required for other incentives previously, which is considering the size of SMEs and their industry characteristics. The “certain degree” of innovativeness shall be based on industry environments and SME businesses as determined by competent authorities in a flexible manner. (2) Flexibility in the utilization of business income tax reductions To encourage regular R&D activities, The case that SMEs may not have R&D undertakings each year due to funding constraints, or start-up company may have incurred R&D expenditures but are not yet profitable and hence have no tax liabilities during the year, Corporate taxpayers were able to choose beside deduct the payable taxes during a single year, and reduce the payable taxes during the current year over three years starting from the year when tax incentives are applicable. 3. Tax incentive effects As previously mentioned, Article 35 of the Act for Development of Small and Medium Enterprises accommodates the characteristics of SMEs by allowing reductions of corporate business taxes for up to 15% R&D expenditures during the current year, or spreading the tax reductions by spreading up to 10% of the R&D expenditures over three years from the first year when the incentives are applicable. It is worth noting that the tax deductions shall not exceed 30% of the payable business income taxes during a single year. If the instruments and equipment for R&D, experiments or quality inspections have a lifetime over two years or longer, it is possible to accelerate the depreciation within half of the years of service prescribed by the income tax codes for fixed assets. However, the final year less than 12 months over the shortened service years shall not be counted. Accelerated depreciation brings in tax benefits for fixed asset investments during the initial stage, that meets the requirements for new technologies and risk management by frontloading the equipment depreciation and creates a buffer for capital utilization. (II) Deferred taxations on licensing/capitalization of intellectual properties The deferral of tax payments under the Act for Development of Small and Medium Enterprises is meant to avoid any adverse effect on the application of technological R&Ds by SMEs. As the equity stakes via capitalization of intellectual properties by inventors or creators are not cashed out yet and the subsequent gains may not be at the same valuation as determined at the time of capitalization, the immediate taxation may hinder the willingness to transfer intellectual properties. Therefore, assisting SMEs to release intellectual properties with potential economic value, the licensing and capitalization of intellectual properties is strongly encouraged. The tax expenses shall be deferred within SME or an individual acquires stakes on a non-publicly-listed company by transferring their intellectual properties. This is to stimulate the applications and sharing of relevant manufacturing technologies. When an SME or an individual acquires stakes on a non-publicly-listed company by transferring their intellectual properties, their tax expenses shall be deferred. 1. Taxpayers and requirements (1) Qualifications for individuals or SMEs Article 35-1 of the Act for Development of Small and Medium Enterprises is applicable to SMEs and individual taxpayers. This is to foster the growth of SMEs and enhancement of industry competitiveness by encouraging R&D and innovations from individuals and start-ups. To promote the commercialize of intellectual properties in different ways, the Act for Development of Small and Medium Enterprises provides income tax incentives to individuals and SMEs transferring intellectual properties. The purpose is to encourage different paths to industry upgrades. (2) Ownership of intellectual properties To ensure that the proceeds of intellectual property is linked to the activity of intellectual properties which perform by individuals or SMEs. Only the owners of the intellectual properties capitalized and transferred can enjoy the tax benefits. Intellectual properties referred to in the Act for Development of Small and Medium Enterprises are the properties with value created with human activities and hence conferred with legal rights. These include but are not limited to copyrights, patent rights, trademarks, trade secrets, integrated circuit layouts, plant variety rights and any other intellectual properties protected by laws[4]. (3) Acquisition of stock options The abovementioned tax incentives are offered to the individuals or SMEs who transfer intellectual properties to non-listed companies in exchange of their new shares. The income taxes on the owners of intellectual properties are deferred until acquisition of shares. These shares are not registered with the book-entry system yet. Before the transferrers of intellectual properties dispose or offload these shares, immediate taxations will impose economic burdens and funding challenges given the unknown prices of the eventual cash-out. Therefore, this legislation is only applicable to taxpayers who obtain options for new shares. 2. Taxpayers and requirements (1) Transfer of intellectual properties According to Article 36 of the Copyright Act as interpreted by official letters issued by the Ministry of Finance, the transfer of intellectual properties is the conferring of intellectual properties to others, and the transferees access these intellectual properties within the scope of the transfer. In terms “transfer” of the first and second paragraphs of Article 36 does not include licensing[5], but such as granting, licensing and inheritance. (2) Timing of income tax payments In general, the particular time that calculation of taxes payable is based on when the taxpayers acquire the incomes, less relevant expenses or costs. The taxes payable timing should be depending on when the taxpayers obtain the newly issued shares by transferring intellectual properties. However, the levy of income taxes at the time of intellectual property transfers and new share acquisitions may cause a sudden jump in taxes payable in the progressive system and thus a burden on the economics of SMEs and individuals concerned. Thus, to avoid disruptions to company operations or personal finance planning, Article 36 makes the exception for the incomes earned by subscribing to new shares as a result of transferring intellectual properties. Such incomes are not subject to taxes during the year when the shares are acquired, in order to mitigate the tax barriers concerned. In sum, the taxes shall be paid when such shares are transferred, gifted or distributed. 3. Tax incentive effects Article 35-1 of the Act for Development of Small and Medium Enterprises provides tax incentives to stimulate the mobilization of intellectual properties by smoothing out the impact of income taxes payable. This is applicable to (1) SMEs who can postpone the business income taxes payable from the year when they acquire new shares of non-listed companies by transferring the intellectual properties they own; (2) individuals who can postpone the individual income taxes payable from the year when they acquire new shares of non-listed companies by transferring the intellectual properties they own. IV. Tax incentives aiming to improve the business environment (I) Tax reductions for wages to additional headcounts SMEs are vital to the Taiwan, making uo 90% of the companies accounting in Taiwan, who employ more than 6.5 million people or 72.8% of the total workforce. Any economic recession may make it difficult for SMEs to maintain their labor costs given their smaller funding size and external challenges. This will cause higher unemployment rates and hurt the economy, which may cause impairment of the capacity or create a labor gap for SMEs, eventually shrink the industry scale. To lower the burden of operational and investment costs and learn from the legislatives in Japan and the U.S.[6], tax incentives are put in place as a buffer for adverse effects of external environments. The first paragraph of Article 36-2 of the Act for Development of Small and Medium Enterprises provide tax incentives for employee salaries of new headcounts based on the assessment on the economy over a time period. This is intended to encourage domestic investments and avoid the pitfall of direct government subsidies distorting salary structures. It is hoped that investments from SMEs can stimulate the momentum of economic growth. 1. Taxpayers The tax incentives under Article 36-2 of the Act for Development of Small and Medium Enterprises aim to assist SMEs through difficult times in an economic downturn. The threshold of the period time is based on the unemployment rate has been below the economic indicator predetermined for six consecutive months, which calculated by the Directorate General of Budget, Accounting and Statistics, Executive Yuan. In number of the unemployment rate has been below the economic indicator predetermined for six consecutive months, it is deemed that the business environment is not friendly to SMEs. In this instance, the Regulations for the Tax Preferences Provided to Small and Medium-sized Enterprises on Additional Wage Payment will trigger the tax incentives. The abovementioned economic indicator shall be published by the competent authorities once every two years. Moreover, to qualify for the tax incentives for new employees, SMEs should investing new ventures or instill new capital by at least $500,000[7] or hiring workforce at least two full-time headcounts compared with the previous fiscal year, that constitute at the Article 36-2 of the Act for Development of Small and Medium Enterprises, which aims to encourage SMEs investments. 2. Taxpayers (1) Qualifications of additional headcounts As the dispatched human resource services typically meet temporary or short-term requirements and contractors do not enjoy employment security, this is not consistent with the spirit of the legislation to create jobs and reduce unemployment. Therefore, to avoid the one-time increase of headcounts from accessing the tax reductions during the year and the deterioration of labor relations in Taiwan. Tax incentive is not offered to the additional recruitment of part-time or contracted workers. Meanwhile, the tax incentives are only applicable to the additional employment of Taiwanese nationals, above or below 24 years old. A tax deduction of 50% based on annual wages is provided for the hiring of people below 24 years old. The extra tax deduction will stimulate young employment. (2) Definition of additional employment The number of additional headcounts is based on permanent hires and calculated as the difference between the average number of Taiwanese employees covered by labor insurance per month throughout a single fiscal year or before and after the incremental increase of workforce. The conversion of regular contracts to indefinite employment in writing or signing up for indefinite R&D headcounts under the military service scheme can also be deemed as additional employment. It is worth noting, however, the new headcounts resulted from M&A activities or transfer between affiliated companies are excluded in this legislation. (3) Calculation of wages Companies are also required to increase employment as well as the Comparable Wages. The comparable wages are estimated with the summation of 30% of the wages for the year before and after additional employment that based on the aggregate of the new hires comparable wages compared to the prior year. In other words, if the aggregate wages paid out are higher than comparable wages during the year, the companies concerned have indeed incurred higher personnel expenses. Tax incentives are thus granted because it improves the business environment and it is the purpose of this legislation. 3. Tax incentive effects The first paragraph of Article 36-2 of the Act for Development of Small and Medium Enterprises provides deductions of business income taxes during the year to qualified SMEs at an amount equivalent to 130% of the incremental wages paid to new headcounts who are Taiwanese nationals. The deductible amount is equivalent to 150% of the incremental wages if new headcounts are Taiwanese nationals below 24 years old. (II) Tax incentives for companies that increase salaries Companies are subject to the effect of changes in the external factors such as global supply and demand on the international market, as well as the domestic business environment as a result of risk aversion from investors and expectation from customers. These uncertainties associated with investments and the rising prices for consumers will suppress the wage levels in Taiwan. This the reason why the second paragraph of Article 36-2 of the Act for Development of Small and Medium Enterprises grants tax deductions for the companies who increase salaries, to encourage companies share earnings with employees and enhance private-sector consumption. SMEs may deduct their business income taxes payable during the year up to 30% of salary increase for existing entry-level employees who are Taiwanese nationals, not as a result of statutory requirement for basic wage adjustments. 1. Taxpayers The tax incentives are applicable to SMEs as defined by the Regulations for the Tax Preferences Provided to Small and Medium-sized Enterprises on Additional Wage Payment and based on the same economic indicators previously mentioned. 2. Qualification for tax incentives (1) Definition of entry-level employees The object of taxation under this act is the enterprise's average wage payment to the entry-level employees. The entry-level employees referred to in this act are authorized by the "Small and medium-sized enterprise employee salary increase, salary deduction act " that refers to employees of local nationality with an average monthly recurring salary below nt $50,000[8] whose were entered into indefinite employment contracts with SMEs. Through such conditions, the effect of tax concessions will be concentrated on promoting the salary level of grassroots staff and helping enterprises to cope with changes in the industrial environment. (2) Average salaries The salaries to entry-level employees refer to the basic salaries, fixed allowances and bonuses paid on a monthly basis. Payment-in-kind shall be discounted based on the actual prices and included into the regular salaries. Meanwhile, regular salaries should be calculated with annualized averages, as this legislation seeks to boost salary levels. The regular salaries to entry-level employees during the year are estimated with the monthly number of entry-level employees during the same year. Only when the average basis salaries during the year are higher than those in the prior year can the tax incentives be applicable. 3. Tax incentive effects Applying this article, SMEs can deduct their business income taxes each year up to 130% of salary increase for existing entry-level employees who are Taiwanese nationals, which are not as a result of statutory requirement for basic wage adjustments. However, it is not allowed to double count the increased personnel expenses for new headcounts applicable to the first and second paragraphs of the same article. V. Conclusions The funding scales and relatively weak financial structures are the factors that led SMEs be susceptible influenced by supply change dynamics and business cycles. To the extent that is suppressing the flexible in capital utilization for SMEs, also influencing on the sustainability of SMEs. Differ from government subsidies require budgeting, reviewing and implementations, there are complications regarding the allocation of administrative resources. Therefore, it is important to plan for tax incentives in order to stimulate R&D, innovation and job creation by SMEs and ultimately make SMEs more competitive. The tax incentives to SMEs amended in 2016 by the Small and Medium Enterprise Administration are known for the following: (I) The lowering of thresholds for tax reductions of R&D expenses in order to encourage SMEs to invest in R&D activities with a “certain degree” of innovativeness and enhance the momentum for SMEs to upgrade and transform themselves; (II) Deferral the income taxations on the transfer of intellectual properties for equity, in order to encourage application and utilization of such intellectual properties, provide incentives for R&D programs or innovations by individuals and SMEs. This also creates a catalyst for industry upgrade; (III) Tax deductions for the employment of new headcounts or the increase of employee wages during the time the economic indicators have reached a certain threshold and based on the health of the investment environment. This is to encourage company investments and capital increases in Taiwan and mitigate the volatility of economic cycles, in order to get ready for business improvement. The above tax incentive programs, i.e. tax deductions for R&D and innovations; deferral of taxations on the transfer of intellectual properties for equity; tax deductions for the hiring of new headcounts and the increase of employee salaries, are meant to boost the investment from SMEs and the competitiveness of SMEs. The Act for Development of Small and Medium Enterprises seeks to reduce tax burdens of SMEs actively investing for their future and competitive advantages. Tax incentives help to mitigate the adverse effect of the economy on the business environment. It is also the fostering of the sources of business income tax revenues for the government. This is the very purpose of the Act for Development of Small and Medium Enterprises. [1]White Paper on Small and Medium Enterprises in Taiwan, 2018, p21 (November 9, 2018) published by the Ministry of Economic Affairs [2]Pursuant to the authorization conferred by Article 35 of the Act for Development of Small and Medium Enterprises, the Ministry of Economic Affairs has announced the Regulations Governing the Reduction of Expenditures for Small and Medium Enterprises Research and Development as Investment. [3]Article 2 on the definition of SMEs. The abovementioned criterion is universally applicable to the Act for Development of Small and Medium Enterprises. It also applies to the eligibility of tax incentives to be introduced in this paper unless otherwise specified. [4]Official Letter Economic-Business No. 10304605790, Ministry of Economic Affairs [5]Official Letter Taiwan-Finance No. 10300207480, Ministry of Finance [6]“Assessment of the Taxations under Article 35, Article 35-1, the first paragraph and the second paragraph of Article 36-2, the Act for Development of Small and Medium Enterprises” published by the Small and Medium Enterprise Administration, Ministry of Economic Affairs, pages 15-17, https://www.moeasmea.gov.tw/files/2670/93B9AF54-84E2-4293-A5CA-EA7DD9FAA05A(most recently browsed date September 9, 2019). [7]Order of Interpretation Economics-Business No. 104004602510 from the Ministry of Economic Affairs: “Second, on the day when the economic indicator has reached the threshold, the paid-in capital of the new business should be at least NT$500,000 and there is no need to instill additional capital during the period when tax incentives are applicable. For existing businesses, there is no limitation on the number of capital increases during the applicable period. So long as the cumulative increase in capital reaches NT$500,000 and new employees are hired during the same fiscal year or during the prior fiscal year.” [8]Paragraph 1, Article 2 of the Regulations for the Tax Preferences Provided to Small and Medium-sized Enterprises on Additional Wage Payment
Blockchain and General Data Protection Regulation (GDPR) compliance issues (2019)Blockchain and General Data Protection Regulation (GDPR) compliance issues (2019) I. Brief Blockchain technology can solve the problem of trust between data demanders and data providers. In other words, in a centralized mode, data demanders can only choose to believe that the centralized platform will not contain the false information. However, in the decentralized mode, data isn’t controlled by one individual group or organization[1], data demanders can directly verify information such as data source, time, and authorization on the blockchain without worrying about the correctness and authenticity of the data. Take the “immutable” for example, it is conflict with the right to erase (also known as the right to be forgotten) in the GDPR.With encryption and one-time pad (OTP) technology, data subjects can make data off-chain storaged or modified at any time in a decentralized platform, so the problem that data on blockchain not meet the GDPR regulation has gradually faded away. II. What is GDPR? The purpose of the EU GDPR is to protect user’s data and to prevent large-scale online platforms or large enterprises from collecting or using user’s data without their permission. Violators will be punished by the EU with up to 20 million Euros (equal to 700 million NT dollars) or 4% of the worldwide annual revenue of the prior financial year. The aim is to promote free movement of personal data within the European Union, while maintaining adequate level of data protection. It is a technology-neutral law, any type of technology which is for processing personal data is applicable. So problem about whether the data on blockchain fits GDPR regulation has raise. Since the blockchain is decentralized, one of the original design goals is to avoid a large amount of centralized data being abused. Blockchain can be divided into permissioned blockchains and permissionless blockchains. The former can also be called “private chains” or “alliance chains” or “enterprise chains”, that means no one can join the blockchain without consent. The latter can also be called “public chains”, which means that anyone can participate on chain without obtaining consent. Sometimes, private chain is not completely decentralized. The demand for the use of blockchain has developed a hybrid of two types of blockchain, called “alliance chain”, which not only maintains the privacy of the private chain, but also maintains the characteristics of public chains. The information on the alliance chain will be open and transparent, and it is in conflict with the application of GDPR. III. How to GDPR apply to blockchain ? First, it should be determined whether the data on the blockchain is personal data protected by GDPR. Second, what is the relationship and respective responsibilities of the data subject, data controller, and data processor? Finally, we discuss the common technical characteristics of blockchain and how it is applicable to GDPR. 1. Data on the blockchain is personal data protected by GDPR? First of all, starting from the technical characteristics of the blockchain, blockchain technology is commonly decentralized, anonymous, immutable, trackable and encrypted. The other five major characteristics are immutability, authenticity, transparency, uniqueness, and collective consensus. Further, the blockchain is an open, decentralized ledger technology that can effectively verify and permanently store transactions between two parties, and can be proved. It is a distributed database, all users on the chain can access to the database and the history record, also can directly verify transaction records. Each nodes use peer-to-peer transmission for upload or transfer information without third-party intermediation, which is the unique “decentralization” feature of the blockchain. In addition, the node or any user on the chain has a unique and identifiable set of more than 30 alphanumeric addresses, but the user may choose to be anonymous or provide identification, which is also a feature of transparency with pseudonymity[2]; Data on blockchain is irreversibility of records. Once the transaction is recorded and updated on the chain, it is difficult to change and is permanently stored in the database, that is to say, it has the characteristics of “tamper-resistance”[3]. According to Article 4 (1) of the GDPR, “personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Therefore, if data subject cannot be identified by the personal data on the blockchain, that is an anonymous data, excluding the application of GDPR. (1) What is Anonymization? According to Opinion 05/2014 on Anonymization Techniques by Article 29 Data Protection Working Party of the European Union, “anonymization” is a technique applied to personal data in order to achieve irreversible de-identification[4]. And it also said the “Hash function” of blockchain is a pseudonymization technology, the personal data is possible to be re-identified. Therefore it’s not an “anonymization”, the data on the blockchain may still be the personal data stipulated by the GDPR. As the blockchain evolves, it will be possible to develop technologies that are not regulated by GDPR, such as part of the encryption process, which will be able to pass the court or European data protection authorities requirement of anonymization. There are also many compliance solutions which use technical in the industry, such as avoiding transaction data stored directly on the chain. 2. International data transmission Furthermore, in accordance with Article 3 of the GDPR, “This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not. This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to: (a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union”.[5] In other words, GDPR applies only when the data on the blockchain is not anonymized, and involves the processing of personal data of EU citizens. 3. Identification of data controllers and data processors Therefore, if the encryption technology involves the public storage of EU citizens' personal data and passes it to a third-party controller, it may be identified as the “data controller” under Article 4 of GDPR, and all nodes and miners of the platform may be deemed as the “co-controller” of the data, and be assumed joint responsibility with the data controller by GDPR. For example, the parties can claim the right to delete data from the data controller. In addition, a blockchain operator may be identified as a “processor”, for example, Backend as a Service (BaaS) products, the third parties provide network infrastructure for users, and let users manage and store personal data. Such Cloud Services Companies provide online services on behalf of customers, do not act as “data controllers”. Some commentators believe that in the case of private chains or alliance chains, such as land records transmission, inter-bank customer information sharing, etc., compared to public chain applications: such as cryptocurrencies (Bitcoin for example), is not completely decentralized, and more likely to meet GDPR requirements[6]. For example, in the case of a private chain or alliance chain, it is a closed platform, which contains only a small number of trusted nodes, is more effective in complying with the GDPR rules. 4. Data subject claims In accordance with Article 17 of the GDPR, The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay under some grounds. Off-chain storage technology can help the blockchain industry comply with GDPR rules, allowing offline storage of personal data, or allow trusted nodes to delete the private key of encrypted information, which leaving data that cannot be read and identified on the chain. If the data is in accordance with the definition of anonymization by GDPR, there is no room for GDPR to be applied. IV. Conclusion In summary, it’s seem that the application of blockchain to GDPR may include: (a) being difficulty to identified the data controllers and data processors after the data subject upload their data. (b) the nature of decentralized storage is transnational storage, and Whether the country where the node is located, is meets the “adequacy decision” of Article 45 of the GDPR. If it cannot be met, then it needs to consider whether it conforms to the transfers subject to appropriate safeguards of Article 46, or the derogations for specific situations of Article 49 of the GDPR. Reference: [1] How to Trade Cryptocurrency: A Guide for (Future) Millionaires, https://wikijob.com/trading/cryptocurrency/how-to-trade-cryptocurrency [2] DONNA K. HAMMAKER, HEALTH RECORDS AND THE LAW 392 (5TH ED. 2018). [3] Iansiti, Marco, and Karim R. Lakhani, The Truth about Blockchain, Harvard Business Review 95, no. 1 (January-February 2017): 118-125, available at https://hbr.org/2017/01/the-truth-about-blockchain [4] Article 29 Data Protection Working Party, Opinion 05/2014 on Anonymisation Techniques (2014), https://www.pdpjournals.com/docs/88197.pdf [5] Directive 95/46/EC (General Data Protection Regulation), https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN [6] Queen Mary University of London, Are blockchains compatible with data privacy law? https://www.qmul.ac.uk/media/news/2018/hss/are-blockchains-compatible-with-data-privacy-law.html
The Status of Taiwan's Regulations Concerning with Access to Biological ResourcesPreface In actual practice, the research and development of biotech medicine, food, and environmental products cannot be done by in-lab researches. This is a unique character of the biotechnology industry. To get the research going, the researchers need to search for and exploit new biological materials and, samples outside the lab. Therefore, the access to and management of biological resources have significant impact on the stimulation and development of national biotech industry. Ever since the enforcement of Convention on Biological Diversity (CBD) in 1992 by 172 countries, a general principal about conserving biological diversity and using biological resources has been set. According to CBD, States have sovereign rights over their own biological resources. CBD also encourages each State to access to and manage the biological resources conformed with the principals of conservation, sustainability, NOEL environment friendly, and adequate sharing of benefit arising from biological resources. Therefore, issues such as environmental protection and sustainability have become political issues internationally. If the ABS system for the access to biological resources is designed too strictly, the establishment of the system will make the research and development staffs and related institutions hang back with hesitation both domestically and internationally. Their intention of bioprospecting in the designated country will then be reduced. On the other hand, if the system is designed too loosely, it will not be able to protect the rights of the owner of the resources. As a result, currently, every country holds a cautious attitude in setting up the regulations of managing the access to biological resources. Currently, many countries and regional international organizations already set up ABS system, such as Andean Community, African Union, Association of Southeast Asia Nations (ASEAN), Australia, South Africa, and India, all are enthusiastic with the establishment of the regulations regarding the access management of biological resources and genetic resources. On the other hand, there are still many countries only use traditional and existing conservation-related regulations to manage the access of biological resources. Since it has been more than 10 years that the regulation of access to biological resources and benefit sharing has been developed in some countries, how is Taiwan's current situation regarding this issue? Taiwan's Existing Regulations on the Access to Bioloical Resources In terms of regulations, Taiwan's existing management style of the access to biological resources is similar to that of the US and the EU. It refers to the existing regulations on environmental protection and conservation, and evaluates from the perspective of environmental protection to control and manage the exploitation and application of the related biological resources. These regulations include the Wildlife Conservation Act, theNational Park Law, the Forestry Act, the Cultural Heritage Preservation Act, and the Aboriginal Basic Act. The paragraphs below describe the contents of the acts mentioned that are related to the access to biological resources. 1 、 Wildlife Conservation Act According to the Wildlife Conservation Act, the Protected Species and the products made of cannot be hunted, traded, owned, imported, exported, raised, bred, and processed unless the number of protected wildlife has exceeded the amount the environment permits, or carry the objectives of academic research and education with the permits of central or regional authorities. As for the hunting of General Wildlife, pre-application and approval is needed with the exception of projects based on the objectives of academic research or education. In addition, the import and export of the living wildlife and the products of Protected Wildlife are restricted to the condition of being permitted by management authority. With respect to the import and export of living Protected Wildlife, Academic research institutions and colleagues are the only person who can seek for the approval of management authority before they proceed. 2 、 National Park Law The design and management of Taiwan's national parks are based on the regulations listed in the National Park Law with the purpose of protecting our country's exclusive natural scenery, wildlife and historical spots. Based on the properties and the nature of resources, the national park management structures the preserved area into general control area, playground and resting area, spot of historical interest, special landmark area, and ecological protection area. Ecological protection area refers to the areas where the natural surroundings, creatures, the society they live and propagate are strictly protected only for the research of ecology. According to the regulation of National Park Law, inside the national park area, it is prohibited to hunt animals, fish, take off flowers or trees, not to mention the behaviours that are prohibited by the management authority. Exceptions are made based on the conditions of preserved areas and for the research purposes. In the general control area or resting area, the national park authority allows fishing or other activities agreed by the authority. However, these activities are prohibited in the preserved area of historical interest, special landmark area, and ecological protection area. To suit special purposes, in the special landmark area or ecological protection area, collection of specimens is allowed subject to the approval of authority. Under the purpose of academic research, better management of public safety, and special management of national park, the Ministry of the Interior will permit the collection of specimen. However, to enter the ecological protection area, one must obtain the permission of authority. 3 、 Forestry Act To protect the forest resources and to maximize the public welfare and economic effectiveness, some of the properties are classified as forestry land and being managed by authority. Based on the Forestry Act, management authority has to restrict the area of cutting timber and to identify the area or period of restricted digging of greensward, tree roots, and grass roots, based on the condition of the forest. In addition, to maintain the current ecological environment in the forest, and to preserve the diversity of species, identification of natural preserved area is needed inside the forestland. The entrance and exit of human and vehicles are controlled based on the nature of the resources inside the preserve area. Unless obtaining the approval from the management authority, not a single activity of damaging, logging or digging soil, stones, greensward and roots is allowed. Furthermore, any unauthorized activity of collecting specimen inside the forest recreation area and natural reserve will be fined. Collecting flowers and plants in these areas, or trespassing the natural reserve will also be fined. Only the activities taken by the aborigines to sustain their living or accommodate their customs are not restricted. 4 、 Cultural Heritage Preservation Act The objectives of setting up the Cultural Heritage Preservation Act are to preserve and apply the cultural resources, to enrich the spiritual lives of citizens, and to add glory to the existing diverse cultures. The Cultural Heritage Preservation Act classifies the natural landscape and scenery as cultural assets. Vistas of Natural Culture refer to the natural areas, landforms, plants and mineral which contain the values of preservation. It can be further grouped into natural preserved area and natural monuments. Since the natural monuments include the unusual plants and mineral, it is connected to the management of biological resources. According to the Cultural Heritage Preservation Act, unless approved by the management authority, it is prohibited to collect, log, destroy the plants or bio resources classified as natural monuments or trespass into the area of natural preserve. For the purposes of academic research, or for the memorial ceremony of aboriginal custom, research institute and the aborigines can collect the natural monuments without the approval of authority. 5 、 Aboriginal Basic Act To protect the basic rights of the aborigines, and to sustain and develop the aboriginal society, the Aboriginal Basic Act was designed and enacted. The government not only admits the aborigine's rights in lands and natural resources, but also permits the non-profit behaviour such as hunting of wildlife, colleting of wild plants and fungi for the objective of complying with traditional culture, ceremony or private uses. In addition, the Aboriginal Basic Act provides the requirement of Prior Informed Consent (PIC) to require government or private individual to inform the aborigines before they proceed with land development, resource exploitation, ecological preservation, and academic research in the land where the aborigines live. They need to consult and obtain the aborigines' agreement or participation, and to share the related interests derived from this project. In the case of restricting the aborigine's right of the use of land or natural resources by law, the government,shall consult with the aborigines or the tribe and reach the agreement. When the government wish to design and establish national park, national scenic area, forestry area, ecological protection area, recreational area, or other resource management authorities, the government should obtain the agreement from the local aborigines and to build up the co-management mechanism.
After the European Union's Artificial Intelligence Law, the draft of AI Basic Law is announced in Taiwan.After the European Union's Artificial Intelligence Law, the draft of AI Basic Law is announced in Taiwan. 2024/09/19 Countries around the world are currently seeking to establish AI governance principles. The U.S. currently has only AI executive orders and state bills, and the European Union (EU) first AI law came into effect in August 2024. Taiwan has announced a draft of AI Basic Law for public comments on July 15, 2024, which, if passed by the Legislative Yuan, will become the world's second special legislation on AI. Taiwan's Coming AI Basic Law - Legislative Development and Progress With the successful conclusion of the 2024 Paris Olympics, AI technology has demonstrated its potential on the global stage, bringing new experiences to the public in varied areas, such as sport competition analysis, athlete training, and referee assisting, and showing that AI has also crossed over into the sports industry, in addition to its known applications in areas such as healthcare, finance, transportation, arts and culture fields. As AI will be apply in various industries, it may also bring new risks or impacts to individuals or society. Countries are seeking to establish guidelines and principles for AI governance. The EU’s Artificial Intelligence Act, which was announced to take effect in August 2024. Even in the AI pioneer, the U.S., there are currently only U.S. President’s AI Executive Orders and bills introduced by Congress or state governments. When Taiwan President Lai announced the promotion of the Island of Artificial Intelligence, Taiwan also had a draft of the AI Basic Law announced for public comments by the National Science and Technology Council (NSTC) on July 15, 2024, proposing the principles of basic values for the development of AI in Taiwan. What is the Basic Law in Taiwan? There are 11 basic laws/acts in Taiwan, including the Fundamental Science and Technology Act, and the Ocean Basic Act, etc. A basic law/act is a legislative model of principle, progress, or guideline for a specific important matter. The AI Basic Law serves as a declaration of policy integration, reveals the government's goals and principles, and regulates the executive branch without directly regulating the people, or deriving the rights for substantive claims. Why Taiwan need a Basic Law on Artificial Intelligence? AI is evolving rapidly, and its applications are spreading to a wider range of areas. If all sectors and administrations have different values, there will be no way for a country to develop AI. NSTC has announced a total of 18 articles in the draft, in Article 3 first set out 7 common principles, such as human autonomy, from the AI research and development to the final market application must comply with the basic values; and in the following provisions of Article 4 to declare that the government's 4 major promotional focuses. The most important provision is found in Article 17, which requires that government ministries should review and adjust the functions, businesses and regulations under their scope in accordance with the Basic Law, so as to enable the executive branch to accelerate its response to the changes brought about by AI, and to share a common set of values: the promotion of innovation while taking human rights into consideration. 7 basic principles The draft AI Basic Law in the announcement contains the following 7 basic principles: 1. Sustainable development and well-being: Social equity and environmental sustainability should be taken into account. Appropriate education and training should be provided to minimize the possible digital gap, so that people can adapt to the changes brought about by AI. 2. Human autonomy: It shall support human autonomy, respect for fundamental human rights and cultural values such as the right to personal integrity, and allow for human oversight, thereby implementing a human-based approach that upholds the rule of law and democratic values. 3. Privacy Protection and Data Governance: The privacy of personal data should be properly protected to avoid the risk of data leakage, and the principle of data minimization should be adopted; at the same time, the opening and reuse of non-sensitive data should be promoted. 4. Security and safety: In the process of AI research and development and application, security measures should be established to prevent security threats and attacks and to ensure the robustness and safety of the system. 5. Transparency and explainability: The output of AI should be appropriately disclosed or labeled to facilitate the assessment of possible risks and the understanding of the impact on related rights and interests, thereby enhancing the trustworthiness of AI. 6. Fairness and non-discrimination: In the process of AI research and development and application, the risks of bias and discrimination in algorithms should be avoided as much as possible, and should not lead to discriminatory results for specific groups. 7. Accountability: Ensure the assumption of corresponding responsibilities, including internal governance responsibilities and external social responsibilities. 4 key areas of promotion 1. Innovative Collaboration and Talent Cultivation: Ensuring the resources and talent needed for AI. 2. Risk management and application responsibility: Risks must be identified and managed before AI systems can be safely applied. 3. Protection of rights and access to data: People's basic rights, such as privacy, cannot be compromised. 4. Regulatory Adaptation and Business Review: Policies and regulations must be agile to keep pace with AI development. The AI Basic Law is paving the way for Taiwan's future opportunities and challenges. AI development requires sufficient resources, data and a friendly environment; to ensure the safe application of AI, it is necessary to first identify and plan for different possible risks, and the draft AI Basic Law has initially drawn a blueprint for the above innovative development and safe application. In the future, various government ministries will need to work together to keep up with the wave of AI innovation in terms of business and legal regulations for multiple fields and industries. It is believed that Taiwan can leverage the advantages in the semiconductor industry and talent resources to gain a favorable global strategic position for the development of AI, as well as to help achieve the goal of "AI for good" to enhance the well-being of Taiwan people through a sound legal environment.