Blockchain and General Data Protection Regulation (GDPR) compliance issues (2019)
Blockchain and General Data Protection Regulation (GDPR) compliance issues (2019)
I. Brief
Blockchain technology can solve the problem of trust between data demanders and data providers. In other words, in a centralized mode, data demanders can only choose to believe that the centralized platform will not contain the false information. However, in the decentralized mode, data isn’t controlled by one individual group or organization[1], data demanders can directly verify information such as data source, time, and authorization on the blockchain without worrying about the correctness and authenticity of the data.
Take the “immutable” for example, it is conflict with the right to erase (also known as the right to be forgotten) in the GDPR.With encryption and one-time pad (OTP) technology, data subjects can make data off-chain storaged or modified at any time in a decentralized platform, so the problem that data on blockchain not meet the GDPR regulation has gradually faded away.
II. What is GDPR?
The purpose of the EU GDPR is to protect user’s data and to prevent large-scale online platforms or large enterprises from collecting or using user’s data without their permission. Violators will be punished by the EU with up to 20 million Euros (equal to 700 million NT dollars) or 4% of the worldwide annual revenue of the prior financial year.
The aim is to promote free movement of personal data within the European Union, while maintaining adequate level of data protection. It is a technology-neutral law, any type of technology which is for processing personal data is applicable.
So problem about whether the data on blockchain fits GDPR regulation has raise. Since the blockchain is decentralized, one of the original design goals is to avoid a large amount of centralized data being abused.
Blockchain can be divided into permissioned blockchains and permissionless blockchains. The former can also be called “private chains” or “alliance chains” or “enterprise chains”, that means no one can join the blockchain without consent. The latter can also be called “public chains”, which means that anyone can participate on chain without obtaining consent.
Sometimes, private chain is not completely decentralized. The demand for the use of blockchain has developed a hybrid of two types of blockchain, called “alliance chain”, which not only maintains the privacy of the private chain, but also maintains the characteristics of public chains. The information on the alliance chain will be open and transparent, and it is in conflict with the application of GDPR.
III. How to GDPR apply to blockchain ?
First, it should be determined whether the data on the blockchain is personal data protected by GDPR. Second, what is the relationship and respective responsibilities of the data subject, data controller, and data processor? Finally, we discuss the common technical characteristics of blockchain and how it is applicable to GDPR.
1. Data on the blockchain is personal data protected by GDPR?
First of all, starting from the technical characteristics of the blockchain, blockchain technology is commonly decentralized, anonymous, immutable, trackable and encrypted. The other five major characteristics are immutability, authenticity, transparency, uniqueness, and collective consensus.
Further, the blockchain is an open, decentralized ledger technology that can effectively verify and permanently store transactions between two parties, and can be proved.
It is a distributed database, all users on the chain can access to the database and the history record, also can directly verify transaction records. Each nodes use peer-to-peer transmission for upload or transfer information without third-party intermediation, which is the unique “decentralization” feature of the blockchain.
In addition, the node or any user on the chain has a unique and identifiable set of more than 30 alphanumeric addresses, but the user may choose to be anonymous or provide identification, which is also a feature of transparency with pseudonymity[2]; Data on blockchain is irreversibility of records. Once the transaction is recorded and updated on the chain, it is difficult to change and is permanently stored in the database, that is to say, it has the characteristics of “tamper-resistance”[3].
According to Article 4 (1) of the GDPR, “personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Therefore, if data subject cannot be identified by the personal data on the blockchain, that is an anonymous data, excluding the application of GDPR.
(1) What is Anonymization?
According to Opinion 05/2014 on Anonymization Techniques by Article 29 Data Protection Working Party of the European Union, “anonymization” is a technique applied to personal data in order to achieve irreversible de-identification[4].
And it also said the “Hash function” of blockchain is a pseudonymization technology, the personal data is possible to be re-identified. Therefore it’s not an “anonymization”, the data on the blockchain may still be the personal data stipulated by the GDPR.
As the blockchain evolves, it will be possible to develop technologies that are not regulated by GDPR, such as part of the encryption process, which will be able to pass the court or European data protection authorities requirement of anonymization. There are also many compliance solutions which use technical in the industry, such as avoiding transaction data stored directly on the chain.
2. International data transmission
Furthermore, in accordance with Article 3 of the GDPR, “This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not. This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to: (a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union”.[5]
In other words, GDPR applies only when the data on the blockchain is not anonymized, and involves the processing of personal data of EU citizens.
3. Identification of data controllers and data processors
Therefore, if the encryption technology involves the public storage of EU citizens' personal data and passes it to a third-party controller, it may be identified as the “data controller” under Article 4 of GDPR, and all nodes and miners of the platform may be deemed as the “co-controller” of the data, and be assumed joint responsibility with the data controller by GDPR. For example, the parties can claim the right to delete data from the data controller.
In addition, a blockchain operator may be identified as a “processor”, for example, Backend as a Service (BaaS) products, the third parties provide network infrastructure for users, and let users manage and store personal data. Such Cloud Services Companies provide online services on behalf of customers, do not act as “data controllers”. Some commentators believe that in the case of private chains or alliance chains, such as land records transmission, inter-bank customer information sharing, etc., compared to public chain applications: such as cryptocurrencies (Bitcoin for example), is not completely decentralized, and more likely to meet GDPR requirements[6]. For example, in the case of a private chain or alliance chain, it is a closed platform, which contains only a small number of trusted nodes, is more effective in complying with the GDPR rules.
4. Data subject claims
In accordance with Article 17 of the GDPR, The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay under some grounds.
Off-chain storage technology can help the blockchain industry comply with GDPR rules, allowing offline storage of personal data, or allow trusted nodes to delete the private key of encrypted information, which leaving data that cannot be read and identified on the chain. If the data is in accordance with the definition of anonymization by GDPR, there is no room for GDPR to be applied.
IV. Conclusion
In summary, it’s seem that the application of blockchain to GDPR may include: (a) being difficulty to identified the data controllers and data processors after the data subject upload their data. (b) the nature of decentralized storage is transnational storage, and Whether the country where the node is located, is meets the “adequacy decision” of Article 45 of the GDPR.
If it cannot be met, then it needs to consider whether it conforms to the transfers subject to appropriate safeguards of Article 46, or the derogations for specific situations of Article 49 of the GDPR.
Reference:
[1] How to Trade Cryptocurrency: A Guide for (Future) Millionaires, https://wikijob.com/trading/cryptocurrency/how-to-trade-cryptocurrency
[2] DONNA K. HAMMAKER, HEALTH RECORDS AND THE LAW 392 (5TH ED. 2018).
[3] Iansiti, Marco, and Karim R. Lakhani, The Truth about Blockchain, Harvard Business Review 95, no. 1 (January-February 2017): 118-125, available at https://hbr.org/2017/01/the-truth-about-blockchain
[4] Article 29 Data Protection Working Party, Opinion 05/2014 on Anonymisation Techniques (2014), https://www.pdpjournals.com/docs/88197.pdf
[5] Directive 95/46/EC (General Data Protection Regulation), https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN
[6] Queen Mary University of London, Are blockchains compatible with data privacy law? https://www.qmul.ac.uk/media/news/2018/hss/are-blockchains-compatible-with-data-privacy-law.html
Innovative Practice of Israel's Government Procurement Government procurement is an important pillar of government services. Because of the huge number of government purchases, government procurement management play an important role in promoting public sector efficiency and building citizenship. Well-designed government procurement systems also help to achieve policy such as environmental protection, innovation, start-ups and the development of small and medium-sized enterprises. Nowadays, countries in the world, especially OECD countries, have been widely practiced with innovative procurement to stimulate innovation and start-ups, and call Innovation procurement can deliver solutions to challenges of public interest and ICTs can play a major role in this. However, in the OECD countries, in addition to the advanced countries that have been developed, many developing countries have also used government procurement to stimulate national R & D and innovation with remarkable results. Israel is one of the world's leading technology innovation centers, one of the most innovative economies in the world, continues to leverage its own strengths, support of technology entrepreneurship and unique environment, an international reputation in the high-tech industry, the spirit of technological innovation and novelty. Government procurement is a core element of the activities of Israeli government, agreement with suppliers and compliance with the Mandatory Tenders Law. The main challenge is how to ensure efficiency and maintain government performance while ensuring an equitable and transparent procurement process. Israel’s Mandatory Tenders Law has shown the central role played by the Israeli Supreme Court in creating and developing this law, even in the absence of any procurement legislation, based instead on general principles of administrative law. Once the project of creating a detailed body of public tendering law had been completed, and the legislator was about to step in, the Supreme Court was prepared to step out and transferring the jurisdiction to lower courts. The Knesset passed the Mandatory Tenders Law, and based on it the Government issued the various tendering regulations. Besides, Israel's various international agreements on government procurement, mainly GPA and other bilateral international agreements such as free trade agreements with Mexico and Colombia and free trade agreements and memoranda of understanding with the United States. The practical significance of these commitments can only be understood on the backdrop of Israel’s domestic preference and offset policies. These policies were therefore discussed and analyzed as they apply when none of the international agreements applies. The Challenge Tenders "How to solve the problem of overcrowding in the emergency department and the internal medicine department?" is the first of a series of "problem solicitations" released by the Israeli Ministry of Health which seeks to find a digital solution to the public health system problem, questions from the government while avoiding preconceived prejudices affect the nature of the solution, allowing multiple innovative ideas from different fields to enter the health system, make fair and transparent judgments about the ideal solution to the problem. In order to ensure transparency and integrity, equality, efficiency and competition in the decision-making process, the tender proposed by the Israeli Ministry of Health defines a two-stage tender process. The Ministry of Health of Israel, in order to improve the quality of medical care, shorten the waiting time for hospitalized patients, protect the dignity of patients and their families with patients as its center, and ensure their rights, while alleviating the burden of hospital staff, so as to pass the targeted treatment areas reduce the gap between various residential areas. The Israeli government deals with these issues through challenging tenders and offers a digital solution combined with innovative ideas. The initiative proposed through the development of public service projects can raise the level of public services in the country and help the government to reduce costs and achieve the purpose of promoting innovation with limited conceptual, technical and financial capabilities. In addition, due to the online operation of the challenging tender process throughout the entire process, fair and transparent procedures can be ensured, while public-private partnerships are encouraged to facilitate the implementation of the implementation plan.
Research on Policies for building a digital nation in Recent Years (2016-2017)Research on Policies for building a digital nation in Recent Years (2016-2017) Recent years, the government has already made some proactive actions, including some policies and initiatives, to enable development in the digital economy and fulfill the vision of Digital Nation. Those actions are as follows: 1. CREATING THE “FOOD CLOUD” FOR FOOD SAFETY CONTROLS Government agencies have joined forces to create an integrated “food cloud” application that quickly alerts authorities to food safety risks and allows for faster tracing of products and ingredients. The effort to create the cloud was spearheaded by the Executive Yuan’s Office of Food Safety under the leadership of Vice Premier Chang San-cheng on January 12, 2016. The “food cloud” application links five core systems (registration, tracing, reporting, testing, and inspection) from the Ministry of Health and Welfare (MOHW) with eight systems from the Ministry of Finance, Ministry of Economic Affairs, Ministry of Education (MOE), Council of Agriculture and Environmental Protection Administration. The application gathers shares and analyzes information in a methodical and systematic manner by employing big data technology. To ensure the data can flow properly across different agencies, the Office of Food Safety came up with several products not intended for human consumption and had the MOHW simulate the flow of those products under import, sale and supply chain distribution scenarios. The interministerial interface successfully analyzed the data and generated lists of food risks to help investigators focus on suspicious companies. Based on these simulation results, the MOHW on September 2, 2015, established a food and drug intelligence center as a mechanism for managing food safety risks and crises on the national level. The technologies for big data management and mega data analysis will enable authorities to better manage food sources and protect consumer health. In addition, food cloud systems established by individual government agencies are producing early results. The MOE, for instance, rolled out a school food ingredient registration platform in 2014, and by 2015 had implemented the system across 22 countries and cities at 6,000 schools supplying lunches for 4.5 million students. This platform, which made school lunch ingredients completely transparent, received the 2015 eAsia Award as international recognition for the use of information technology in ensuring food safety. 2. REVISING DIGITAL CONVERGENCE ACTS On 2016 May 5th, the Executive Yuan Council approved the National Communications Commission's (NCC) proposals, drafts of “Broadcasting Terrestrial and Channel Service Suppliers Administration Act”, “Multichannel Cable Platform Service Administration Act”, “Telecommunications Service Suppliers Act”, “Telecommunications Infrastructure and Resources Administration Act”, “Electronic Communications Act”, also the five digital convergence laws. They will be sent to the Legislature for deliberation. But in the end, this version of five digital convergence bills did not pass by the Legislature. However, later on, November 16, 2017, The Executive Yuan approved the new drafts of “Digital Communication Act” and the “Telecommunication Service Management Act”. The “Digital Communication Act” and the “Telecommunication Service Management Act” focused summaries as follows: 1. The digital communication bill A. Public consultation and participation. B. The digital communication service provider ought to use internet resource reasonability and reveal network traffic control measures. C. The digital communication service provider ought to reveal business information and Terms of Service. D. The responsibility of the digital communication service provider. 2. The telecommunication service management bill A. The telecommunication service management bill change to use registration system. B. The general obligation of telecommunications to provide telecommunication service and the special obligation of Specific telecommunications. C. Investment, giving, receiving and merging rules of the telecommunication service. Telecommunications are optimism of relaxing rules and regulations, and wish it would infuse new life and energy into the market. Premier Lai instructed the National Communications Commission and other agencies to elucidate the contents of the two communication bills to all sectors of society, and communicate closely with lawmakers of all parties to build support for a quick passage of the bills. 3. FOCUSING ON ICT SECURITY TO BUILD DIGITAL COUNTRIES Ｔhe development of ICT has brought convenience to life but often accompanied by the threat of illegal use, especially the crimes with the use of new technologies such as Internet techniques and has gradually become social security worries. Minor impacts may cause inconvenience to life while major impacts may lead to a breakdown of government functions and effects on national security. To enhance the capability of national security protection and to avoid the gap of national security, the Executive Yuan on August 1st 2016 has upgraded the Office of Information and Communication Security into the Agency of Information and Communication Security, a strategic center of R.O.C security work, integrating the mechanism of the whole government governance of information security, through specific responsibility, professionalism, designated persons and permanent organization to establish the security system, together with the relevant provisions of the law so that the country's information and communication security protection mechanism will become more complete. The efforts to the direction could be divided into three parts: First, strengthening the cooperation of government and private sectors of information security: In a sound basis of legal system, the government plans to strengthen the government and some private sectors’ information security protection abilities ,continue to study and modify the relevant amendments to the relevant provisions, strengthen public-private collaborative mechanism, deepen the training of human resources and enhance the protection of key information infrastructure of our country. Second, improving the information and communication security professional capability: information and communication security business is divided into policy and technical aspects. While the government takes the responsibility for policy planning and coordination, the technical service lies in an outsourcing way. Based on a sound legal system, the government will establish institutionalized and long-term operation modes and plan appropriate organizational structures through the discussion of experts and scholars from all walks of life. Third, formulating Information and Communication Safety Management Act and planning of the Fifth National Development Program for Information and Communication Security: The government is now actively promoting the Information and Communication Safety Management Act as the cornerstone for the development of the national digital security and information security industry. The main content of the Act provides that the applicable authorities should set up security protection plan at the core of risk management and the procedures of notification and contingency measures, and accept the relevant administrative check. Besides the vision of the Fifth National Development Program for Information and Communication Security which the government is planning now is to build a safe and reliable digital economy and establish a safe information and communication environment by completing the legal system of information and communication security environment, constructing joint defense system of the national Information and Communication security, pushing up the self-energy of the industries of information security and nurture high-quality human resources for elite talents for information security. 4. THE DIGITAL NATION AND INNOVATIVE ECONOMIC DEVELOPMENT PLAN The Digital Nation and Innovative Economic Development Plan (2017-2025) known as “DIGI+” plan, approved by the Executive Yuan on November 24, 2016. The plan wants to grow nation’s digital economy to NT $ 6.5 trillion (US$205.9 billion), improve the digital lifestyle services penetration rate to 80 %, increase broadband connections to 2 Gbps, ensure citizens’ basic rights to have 25 Mbps broadband access, and put our nation among the top 10 information technology nations worldwide by 2025. The plan contains several important development strategies: DIGI+ Infrastructure: Build infrastructure conducive to digital innovation. DIGI+ Talent: Cultivate digital innovation talent. DIGI+ Industry: Support cross-industry transformation through digital innovation. DIGI+ Rights: Make R.O.C. an advanced society that respects digital rights and supports open online communities. DIGI+ Cities: Build smart cities through cooperation among central and local governments and the industrial, academic and research sectors. DIGI+ Globalization: Boost nation’s standing in the global digital service economy. The plan also highlights few efforts: First is to enrich “soft” factors and workforce to create an innovative environment for digital development. To construct this environment, the government will construct an innovation-friendly legal framework, cultivate interdisciplinary digital talent, strengthen research and develop advanced digital technologies. Second is to enhance digital economy development. The government will incentivize innovative applications and optimize the environment for digital commerce. Third, the government will develop an open application programming interface for government data and create demand-oriented, one-stop smart government cloud services. Fourth, the government will ensure broadband access for the disadvantaged and citizens of the rural area, implement the participatory process, enhance different kinds of international cooperation, and construct a comprehensive humanitarian legal framework with digital development. Five is to build a sustainable smart country. The government will use smart network technology to build a better living environment, promote smart urban and rural area connective governance and construction and use on-site research and industries innovation ecosystem to assist local government plan and promote construction of the smart country. In order to achieve the overall effectiveness of the DIGI + program, interdisciplinary, inter-ministerial, inter-departmental and inter-departmental efforts will be required to collaborate with the newly launched Digital National Innovation Economy (DIGI +) Promotion Team. 5. ARTIFICIAL INTELLIGENCE SCIENTIFIC RESEARCH STRATEGY The Ministry of Science and Technology (MOST) reported strategy plan for artificial intelligence (AI) scientific research at Cabinet meeting on August 24, 2017. Artificial intelligence is a powerful and inevitable trend, and it will be critical to R.O.C.’s competitiveness for the next 30 years. The ministry will devote NT$16 billion over the next five years to building an AI innovation ecosystem in R.O.C. According to MOST, the plan will promote five strategies: 1. Creating an AI platform to provide R&D services MOST will devote NT$5 billion over the next four years to build a platform, integrating the resources, providing a shared high-speed computing environment and nurturing emerging AI industries and applications. 2. Establishing an AI innovative research center MOST will four artificial intelligence innovation research centers across R.O.C. as part of government efforts to enhance the nation’s competitiveness in AI technology. The centers will support the development of new AI in the realms of financial technology, smart manufacturing, smart healthcare and intelligent transportation systems. 3. Setting up AI robot maker spaces An NT$2 billion, four-year project assisting industry to develop the hardware-software integration of robots and innovative applications was announced by the Ministry of Science and Technology. 4. Subsidizing a semiconductor “moonshot” program to explore ambitious and groundbreaking smart technologies This program will invest NT$4 billion from 2018 through 2021 into developing semiconductors and chip systems for edge devices as well as integrating the academic sector’s R&D capabilities and resources. the project encompasses cognitive computing and AI processor chips; next-generation memory designs; process technologies and materials for key components of sensing devices; unmanned vehicles, AR and VR; IoT systems and security. 5. Organizing Formosa Grand Challenge competitions The program is held in competitions to engage young people in the development of AI applications. The government hopes to extend R.O.C.’s industrial advantages and bolster the country’s international competitiveness, giving R.O.C. the confidence to usher in the era of AI applications. All of these efforts will weave people, technologies, facilities, and businesses into a broader AI innovation ecosystem. 6. INTELLIGENT TRANSPORTATION SYSTEM PLANS Ministry of Transportation and Communications (MOTC) launched plans to develop intelligent transportation systems at March 7th in 2017. MOTC integrates transportation and information and communications technology through these plans to improve the convenience and reduce the congestion of the transportation. These plans combine traffic management systems for highways, freeways and urban roads, a multi-lane free-flow electronic toll collection system, bus information system that provides timely integrated traffic information services, and public transportation fare card readers to reduce transport accidence losses, inconvenience of rural area, congestion of main traffic arteries and improve accessibility of public transportation. There are six plans are included: 1. Intelligent transportation safety plan; 2. Relieve congestion on major traffic arteries; 3. Make transportation more convenient in Eastern Taiwan and remote areas; 4. Integrate and share transportation resources; 5. Develop “internet-of-vehicles” technology applications; and 6. Fundamental R&D for smart transportation technology. These plans promote research and development of smart vehicles and safety intersections, develop timely bus and traffic information tracking system, build a safe system of shared, safe and green-energy smart system, and subsidize the large vehicles to install the vision enhancement cameras to improve the safety of transportation. These plans also use eTag readers, vehicle sensors and info communication technologies to gather the traffic information and provide timely traffic guidance, reduce the congestion of the traffic flow. These plans try to use demand-responsive transit system with some measures such as combine public transportation and taxi, to improve the flexibility of the public traffic service and help the basic transportation needs of residents in eastern Taiwan and rural areas to be fulfilled. A mobile transport service interface and a platform that integrating booking and payment processes are also expected to be established to provide door-to-door transportation services and to integrate transportation resources. And develop demonstration projects of speed coordination of passenger coach fleets, vehicle-road interaction technology, and self-driving car to investigate and verify the issues in technological, operational, industrial, legal environments of internet-of-vehicles applications in our country. Last but not least, research and development on signal control systems that can be used in both two and four-wheeled vehicles, and deploy an internet-of-vehicles prototype platform and develop drones traffic applications. These plans are expected to reduce 25% traffic congestion, 20% of motor vehicle incidence, leverage 10% using rate of public transportation, raise 20% public transportation service accessibility of rural area and create NT$30 billion production value. After accomplishing these targets, the government can establish a comprehensive transportation system and guide industry development of relating technology areas. Through the aforementioned initiatives, programs, and plans, the government wants to construct the robust legal framework and policy environment for digital innovation development, and facilitate the quality of citizens in our society.
Israel’s Technological Innovation SystemI.Introduction Recently, many countries have attracted by Israel’s technology innovation, and wonder how Israel, resource-deficiency and enemies-around, has the capacity to enrich the environment for innovative startups, innovative R&D and other innovative activities. At the same time, several cross-border enterprises hungers to establish research centers in Israel, and positively recruits Israel high-tech engineers to make more innovative products or researches. However, there is no doubt that Israel is under the spotlight in the era of innovation because of its well-shaped national technology system framework, innovative policies of development and a high level of R&D expenditure, and there must be something to learn from. Also, Taiwanese government has already commenced re-organization lately, how to tightly connect related public technology sectors, and make the cooperation more closely and smoothly, is a critical issue for Taiwanese government to focus on. Consequently, by the observation of Israel’s national technology system framework and technology regulations, Israel’s experience shall be a valuable reference for Taiwanese government to build a better model for public technology sectors for future cooperation. Following harsh international competition, each country around the world is trying to find out the way to improve its ability to upgrade international competitiveness and to put in more power to promote technology innovation skills. Though, while governments are wondering how to strengthen their countries’ superiority, because of the differences on culture and economy, those will influence governments’ points of view to form an appropriate national innovative system, and will come with a different outcome. Israel, as a result of the fact that its short natural resources, recently, its stunning performance on technology innovation system makes others think about whether Israel has any characteristics or advantages to learn from. According to Israeli Central Bureau of Statistics records, Israel’s national expenditures on civilian R&D in 2013 amounted to NIS 44.2 billion, and shared 4.2% of the GDP. Compared to 2012 and 2011, the national expenditure on civilian R&D in 2013, at Israel’s constant price, increased by 1.3%, following an increase of 4.5% in 2012 and of 4.1% in 2011. Owing to a high level of national expenditure poured in, those, directly and indirectly, makes the outputs of Israel’s intellectual property and technology transfer have an eye-catching development and performance. Based on Israeli Central Bureau of Statistics records, in 2012-2013, approximately 1,438 IP invention disclosure reports were submitted by the researchers of various universities and R&D institutions for examination by the commercialization companies. About 1,019 of the reports were by companies at the universities, an increase of 2.2% compared to 2010-2011, and a 1% increase in 2010-2011 compared to 2008-2009. The dominant fields of the original patent applicants were medicines (24%), bio-technology (17%), and medical equipment (13%). The revenues from sales of intellectual property and gross royalties amounted to NIS 1,881 million in 2012, compared to NIS 1,680 million in 2011, and increase of 11.9%. The dominant field of the received revenues was medicines (94%). The revenues from sales of intellectual property and gross royalties in university in 2012 amounted to NIS 1,853 million in 2012, compared to NIS 1,658 million in 2011, an increase of 11.8%. Therefore, by the observation of these records, even though Israel only has 7 million population, compared to other large economies in the world, it is still hard to ignore Israel’s high quality of population and the energy of technical innovation within enterprises. II.The Recent Situation of Israel’s Technology Innovation System A.The Determination of Israel’s Technology Policy The direction and the decision of national technology policy get involved in a country’s economy growth and future technology development. As for a government sector deciding technology policy, it would be different because of each country’s government and administrative system. Compared to other democratic countries, Israel is a cabinet government; the president is the head of the country, but he/she does not have real political power, and is elected by the parliament members in every five years. At the same time, the parliament is re-elected in every four years, and the Israeli prime minister, taking charge of national policies, is elected from the parliament members by the citizens. The decision of Israel’s technology policy is primarily made by the Israeli Ministers Committee for Science and Technology and the Ministry of Science and Technology. The chairman of the Israeli Ministry Committee for Science and Technology is the Minister of Science and Technology, and takes charge of making the guideline of Israel’s national technology development policy and is responsible for coordinating R&D activities in Ministries. The primary function of the Ministry of Science and Technology is to make Israel’s national technology policies and to plan the guideline of national technology development; the scope includes academic research and applied scientific research. In addition, since Israel’s technology R&D was quite dispersed, it means that the Ministries only took responsibilities for their R&D, this phenomenon caused the waste of resources and inefficiency; therefore, Israel government gave a new role and responsibility for the Chief Scientists Forum under the Ministry of Science and Technology in 2000, and wished it can take the responsibility for coordinating R&D between the government’s sectors and non-government enterprises. The determination of technology policy, however, tends to rely on counseling units to provide helpful suggestions to make technology policies more intact. In the system of Israel government, the units playing a role for counseling include National Council for Research and Development (NCRD), the Steering Committee for Scientific Infrastructure, the National Council for Civil Research and Development (MOLMOP), and the Chief Scientists Forums in Ministries. Among the aforementioned units, NCRD and the Steering Committee for Scientific Infrastructure not only provide policy counseling, but also play a role in coordinating R&D among Ministries. NCRD is composed by the Chief Scientists Forums in Ministries, the chairman of Planning and Budgeting Committee, the financial officers, entrepreneurs, senior scientists and the Dean of Israel Academy of Sciences and Humanities. NCRD’s duties include providing suggestions regarding the setup of R&D organizations and related legal system, and advices concerning how to distribute budgets more effectively; making yearly and long-term guidelines for Israel’s R&D activities; suggesting the priority area of R&D; suggesting the formation of necessary basic infrastructures and executing the priority R&D plans; recommending the candidates of the Offices of Chief Scientists in Ministries and government research institutes. As for the Steering Committee for Scientific Infrastructure, the role it plays includes providing advices concerning budgets and the development framework of technology basic infrastructures; providing counsel for Ministries; setting up the priority scientific plans and items, and coordinating activities of R&D between academic institutes and national research committee. At last, as for MOLMOP, it was founded by the Israeli parliament in 2002, and its primary role is be a counseling unit regarding technology R&D issues for Israel government and related technology Ministries. As for MOLMOP’s responsibilities, which include providing advices regarding the government’s yearly and long-term national technology R&D policies, providing the priority development suggestion, and providing the suggestions for the execution of R&D basic infrastructure and research plans. B.The Management and Subsidy of Israel’s Technology plans Regarding the institute for the management and the subsidy of Israel’s technology plans, it will be different because of grantee. Israel Science Foundation (ISF) takes responsibility for the subsidy and the management of fundamental research plans in colleges, and its grantees are mainly focused on Israel’s colleges, high education institutes, medical centers and research institutes or researchers whose areas are in science and technical, life science and medicine, and humanity and social science. As for the budget of ISF, it mainly comes from the Planning and Budgeting Committee (PBC) in Israel Council for Higher Education. In addition, the units, taking charge of the management and the subsidy of technology plans in the government, are the Offices of the Chief Scientist in Ministries. Israel individually forms the Office of the Chief Scientist in the Ministry of Agriculture and Rural Development, the Ministry of Communications, the Ministry of Defense, the Ministry of National Infrastructures, Energy and Water Resources, the Ministry of Health and the Ministry of Economy. The function of the Office of the Chief Scientist not only promotes and inspires R&D innovation in high technology industries that the Office the Chief Scientist takes charge, but also executes Israel’s national plans and takes a responsibility for industrial R&D. Also, the Office of the Chief Scientist has to provide aid supports for those industries or researches, which can assist Israel’s R&D to upgrade; besides, the Office of the Chief Scientists has to provide the guide and training for enterprises to assist them in developing new technology applications or broadening an aspect of innovation for industries. Further, the Office of the Chief Scientists takes charge of cross-country R&D collaboration, and wishes to upgrade Israel’s technical ability and potential in the area of technology R&D and industry innovation by knowledge-sharing and collaboration. III.The Recent Situation of the Management and the Distribution of Israel’s Technology Budget A.The Distribution of Israel’s Technology R&D Budgets By observing Israel’s national expenditures on civilian R&D occupied high share of GDP, Israel’s government wants to promote the ability of innovation in enterprises, research institutes or universities by providing national resources and supports, and directly or indirectly helps the growth of industry development and enhances international competitiveness. However, how to distribute budgets appropriately to different Ministries, and make budgets can match national policies, it is a key point for Israel government to think about. Following the Israeli Central Bureau of Statistics records, Israel’s technology R&D budgets are mainly distributed to some Ministries, including the Ministry of Science and Technology, the Ministry of Economy, the Ministry of Agriculture and Rural Development, the Ministry of National Infrastructures, Energy and Water Resources, the Israel Council for Higher Education and other Ministries. As for the share of R&D budgets, the Ministry of Science and Technology occupies the share of 1.7%, the Ministry of Economy is 35%, the Israel Council for Higher Education is 45.5%, the Ministry of Agriculture and Rural Development is 8.15%, the Ministry of National Infrastructures, Energy and Water Resources is 1.1%, and other Ministries are 7.8% From observing that Israel R&D budgets mainly distributed to several specific Ministries, Israel government not only pours in lot of budgets to encourage civilian technology R&D, to attract more foreign capitals to invest Israel’s industries, and to promote the cooperation between international and domestic technology R&D, but also plans to provide higher education institutes with more R&D budgets to promote their abilities of creativity and innovation in different industries. In addition, by putting R&D budgets into higher education institutes, it also can indirectly inspire students’ potential innovation thinking in technology, develop their abilities to observe the trend of international technology R&D and the need of Israel’s domestic industries, and further appropriately enhance students in higher education institutes to transfer their knowledge into the society. B.The Management of Israel’s Technology R&D Budgets Since Israel is a cabinet government, the cabinet takes responsibility for making all national technology R&D policies. The Ministers Committee for Science and Technology not only has a duty to coordinate Ministries’ technology policies, but also has a responsibility for making a guideline of Israel’s national technology development. The determination of Israel’s national technology development guideline is made by the cabinet conference lead by the Prime Minister, other Ministries does not have any authority to make national technology development guideline. Aforementioned, Israel’s national technology R&D budgets are mainly distributed to several specific Ministries, including the Ministry of Science and Technology, the Ministry of Economy, the Ministry of Agriculture and Rural Development, the Ministry of National Infrastructures, Energy and Water Resources, the Israel Council for Higher Education, and etc. As for the plan management units and plan execution units in Ministries, the Office of the Chief Scientist is the plan management unit in the Ministry of Science and Technology, and Regional Research and Development Centers is the plan execution unit; the Office of the Chief Scientist is the plan management unit in the Ministry of Economy, and its plan execution unit is different industries; the ISF is the plan management units in the Israel Council for Higher Education; also, the Office of the Chief Scientist is the plan management unit in the Ministry of Agriculture, and its plan execution units include the Institute of Field and Garden Corps, the Institute of Horticulture, the Institute of Animal, the Institute of Plan Protection, the Institute of Soil, Water & Environmental Sciences, the Institute for Technology and Storage of Agriculture Products, the Institute of Agricultural Engineering and Research Center; the Office of the Chief Scientist is the plan management unit in the Ministry of National Infrastructures, Energy and Water Resources, and its plan execution units are the Geological Survey of Israel, Israel Oceanographic and Limnological Research and the Institute of Earth and Physical. As for other Ministries, the Offices of the Chief Scientist are the plan management units for Ministries, and the plan execution unit can take Israel National Institute for Health Policy Research or medical centers for example.
Draft of AI Product and System Evaluation Guidelines Released by the Administration for Digital Industries to Enhance AI GovernanceDraft of AI Product and System Evaluation Guidelines Released by the Administration for Digital Industries to Enhance AI Governance 2024/08/15 I. AI Taiwan Action Plan 2.0 In 2018, the Executive Yuan launched the “AI Taiwan Action Plan” to ensure that the country keeps pace with AI developments. This strategic initiative focuses on attracting top talent, advancing research and development, and integrating AI into critical sectors such as smart manufacturing and healthcare. The action plan has sparked growing discussion on AI regulation. Through these efforts, Taiwan aims to position itself as a frontrunner in the global smart technology landscape. Later in 2023, the Executive Yuan updated the action plan, releasing “AI Taiwan Action Plan 2.0” to further strengthen AI development. “AI Taiwan Action Plan 2.0” outlines five main pillars: 1. Talent Development: Enhancing the quality and quantity of AI expertise, while improving public AI literacy through targeted education and training initiatives. 2. Technological and Industrial Advancement: Focusing on critical AI technologies and applications to foster industrial growth; and creating the Trustworthy AI Dialogue Engine (TAIDE) that communicates in Traditional Chinese. 3. Enhancing work environments: Establishing robust AI governance infrastructure to facilitate industry and governmental regulation, and to foster compliance with international standards. 4. International Collaboration: Expanding Taiwan's role in international AI forums, such as the Global Partnership on AI, to collaborate on developing trustworthy AI practices. 5. Societal and Humanitarian Engagement: Utilizing AI to tackle pressing societal challenges such as labor shortages, an aging population, and environmental sustainability. II. AI Product and System Evaluation Guidelines: A Risk-based Approach to AI Governance To support infrastructure, in March 2024, the Administration for Digital Industries issued the draft AI Product and System Evaluation Guidelines. The Guidelines are intended to serve as a reference for industry when developing and using AI products and systems, thus laying a crucial foundation for advancing AI-related policies in Taiwan. The Guidelines outline several potential risks associated with AI: 1. Third-Party Software and Hardware: While third-party software, hardware, and datasets can accelerate development, they may also introduce risks into AI products and systems. Therefore, effective risk management policies are crucial. 2. System Transparency: The lack of transparency in AI products and systems makes risk assessment relatively challenging. Inadequate transparency in AI models and datasets also pose risks for development and deployment. 3. Differences in Risk Perception: Developers of AI products and systems may overlook risks specific to different application scenarios. Moreover, risks may gradually emerge as the product or system is used and trained over time. 4. Application Domain Risks: Variations between testing results and actual operational performance can lead to differing risk assessments for evaluated products and systems. 5. Deviation from Human Behavioral Norms: If AI products and systems behave unexpectedly compared to human operations, this can indicate a drift in the product, system, or model, thereby introducing risks. The Guidelines also specify that businesses have to categorize risks when developing or using AI products and systems, and manage them in accordance with these classifications. In alignment with the EU AI Act, risks are classified into four levels: unacceptable, high, limited, and minimal. 1. Unacceptable Risk: If AI systems used by public or private entities provide social scoring of individuals, this could lead to discriminatory outcomes and the exclusion of certain groups. Furthermore, if AI systems are employed to manipulate the cognitive behavior of individuals or vulnerable populations, causing physical or psychological harm, such systems are deemed unacceptable and prohibited. 2. High risk: AI systems are classified as high-risk in several situations. These include applications used in critical infrastructure, such as transportation, where there is potential risk to citizens' safety and health. These situations also encompass AI systems involved in educational or vocational training (such as exam scoring), which can determine access to education or professional paths. AI used as safety-critical product components, such as robot-assisted surgery, also falls into this category. In the employment sector, AI systems used for managing recruitment processes, including CV-sorting software, are considered high-risk. Essential private and public services, such as credit scoring systems that impact loan eligibility, also fall under high-risk. AI used in law enforcement in ways that it may affect fundamental rights, such as evaluating the reliability of evidence, is also included. AI systems involved in migration, asylum, and border control, such as automated visa application examinations, are categorized as high-risk. Finally, AI solutions used in the administration of justice and democratic processes, such as court ruling searches, are also classified as high-risk. If an AI system is classified as high risk, it must be evaluated across ten criteria—Safety, Explainability, Resilience, Fairness, Accuracy, Transparency, Accountability, Reliability, Privacy, and Security—to ensure the AI system’s quality. 3. Limited risk: When an AI product or system is classified as having limited risk, it is up to the enterprise to determine whether an evaluation is required. The Guidelines also introduce specific transparency obligations to ensure that humans are informed when necessary, thus fostering trust. For instance, when using AI systems such as chatbots or systems for generating deepfake content, humans must be made aware that they are interacting with a machine so they can take an informed decision to continue or step back. 4. Minimal or no risk: The Guidelines allow the free use of minimal-risk AI. This includes applications such as AI-enabled video games and spam filters. Ⅲ. Conclusion The AI Product and System Evaluation Guidelines represent a significant step forward in establishing a robust, risk-based framework for AI governance in Taiwan. By aligning with international standards like the EU AI Act, these Guidelines ensure that AI products and systems are rigorously assessed and categorized into four distinct risk levels: unacceptable, high, limited, and minimal. This structured approach allows businesses to manage AI-related risks more effectively, ensuring that systems are safe, transparent, and accountable. The emphasis on evaluating AI systems across ten critical criteria—including safety, explainability, and fairness—reflects a comprehensive strategy to mitigate potential risks. This proactive approach not only safeguards the public but also fosters trust in AI technologies. By setting clear expectations and responsibilities for businesses, the Guidelines promote responsible development and deployment of AI, ultimately contributing to Taiwan's goal of becoming a leader in the global AI landscape.
- Impact of Government Organizational Reform to Scientific Research Legal System and Response Thereto (1) – For Example, The Finnish Innovation Fund (“SITRA”)
- The Demand of Intellectual Property Management for Taiwanese Enterprises
- Impact of Government Organizational Reform to Research Legal System and Response Thereto (2) – Observation of the Swiss Research Innovation System
- Blockchain in Intellectual Property Protection
- Copyright Ownership for Outputs by Artificial Intelligence
- Recent Federal Decisions and Emerging Trends in U.S. Defend Trade Secrets Act Litigation
- The effective and innovative way to use the spectrum: focus on the development of the "interleaved/white space"
- Legal issues of Third-Party Payment in Taiwan