Impact of Government Organizational Reform to Scientific Research Legal System and Response Thereto (2) – For Example, The Finnish Innovation Fund (“SITRA”)
Impact of Government Organizational Reform to Scientific Research Legal System and Response Thereto (2) – For Example, The Finnish Innovation Fund (“SITRA”)
III. Comparison of Strength and Weakness of Sitra Projects
1. Sitra Venture Capital Investment Model
In order to comprehend how to boost innovation business development to upgrade innovation ability, we analyze and compare the innovation systems applied in Sweden, France and Finland[1] . We analyze and compare the characteristics, strength and weakness of innovation promotion models in terms of funding, networking and professional guidance. Generally, the first difficulty which a start-up needs to deal with when it is founded initially is the funding. Particularly, a technology company usually requires tremendous funding when it is founded initially. Some potentially adequate investors, e.g., venture capitals, seldom invest in small-sized start-up (because such overhead as supervision and management fees will account for a high percentage of the investment due to the small total investment amount). Networking means how a start-up integrates such human resources as the management, investors, technical advisors and IP professionals when it is founded initially. Control over such human resources is critical to a new company’s survival and growth. Professional guidance means how professional knowledge and human resource support the start-up’s operation. In order to make its product required by the market, an enterprise usually needs to integrate special professional knowledge. Notwithstanding, the professional knowledge and talents which are available from an open market theoretically often cannot be accessed, due to market failure[2].
Assuming that Sitra’s funding is prioritized as Pre-seed-Initiation stage, Seed-Development stage and Follow-up – Growth stage, under Finland model, at the Pre-seed-Initiation stage, Sitra will provide the fund amounting to EUR20,000 when Tekes will also provide the equivalent fund, provided that the latter purely provides subsidy, while the fund provided by Sitra means a loan to be repaid (without interest) after some time (usually after commercialization), or a loan convertible to shares. Then, the loan would be replaced by soft or convertible (to shares) investment and the source of funding would turn to be angel investors or local seed capital at the Seed-Development stage. At this stage, the angel investors, local seed capital and Sitra will act as the source of funding jointly in Finland, while Tekes will not be involved at this stage. At the Follow-up-Growth stage, like the Sweden model, Sitra will utilize its own investment fund to help mitigate the gap between local small-sized funding and large-sized international venture capital[3].
How to recruit professional human resources is critical to a start-up’s success. Many enterprises usually lack sufficient professional human resources or some expertise. DIILI service network set up by Sitra is able to provide the relevant solutions. DILLI is a network formed by product managers. Its members actively participate in starts-up and seek innovation. They also participate in investment of starts-up independently sometimes. Therefore, they are different from angel investors, because they devote themselves to the starts-up on a full-time basis[4]. In other words, they manage the starts-up as if the starts-up were their own business.
2. Key to Public Sector’s Success in Boosting Development of Innovation Activity Business
In terms of professional guidance, voluntary guidance means the direct supply of such professional resources as financing, human resource and technology to starts-up, while involuntary guidance means the supply of strategic planning in lieu of direct assistance to help the enterprises make routine decisions[5]. The fractured and incomplete professional service attendant market generates low marginal effect. Therefore, it is impossible for the traditional consultation service to mitigate such gap and the investment at the pre-seed initiation stage will be excessive because of the acquisition of the professional services. Meanwhile, professional advisors seldom are involved in consultation services at the pre-seed initiation stage of a start-up because of the low potential added value. Therefore, at such stage, only involuntary professional guidance will be available usually. Under Sitra model, such role is played by an angel investor.
Upon analysis and comparison, we propose six suggested policies to boost innovation activities successfully as the reference when observing Sitra operation. First of all, compared with the French model, Finland Sitra and Sweden model set more specific objectives to meet a start-up’s needs (but there is some defect, e.g., Sitra model lacks voluntary professional guidance). Second, structural budget is a key to the successful model. Sitra will receive the funds in the amount of EUR235,000,000 from the Finnish Government, but its operating expenditure is covered by its own operating revenue in whole. Third, it is necessary to provide working fund in installments and provide fund at the pre-seed-initiation stage. Under both of Finland model and Sweden model, funds will be provided at the pre-seed-initiation stage (Tekes is responsible for providing the fund in Finland). Fourth, the difficulty in networking must be solved. In Sitra, the large-sized talent network set up by it will be dedicated to recruiting human resources. Fifth, the voluntary professional guidance is indispensable at the pre-seed-initiation stage, while the same is unavailable at such stage under Sitra model. Instead, the Sweden model is held as the optimal one, as it has a dedicated unit responsible for solving the difficulty to seek profit. Sixth, soft loan[6] will be successfully only when the loan cannot be convertible to shares. At the pre-seed initiation stage or seed-development stage, a start-up is usually funded by traditional loan. Assuming that the start-up is not expected to gain profit, whether the loan may be convertible to shares will also be taken into consideration when the granting of loan is considered (therefore, the fund provider will not be changed to the “capital” provider). Besides, the government authorities mostly lack the relevant experience or knowledge, or are in no position to negotiate with international large-sized venture capital companies. For example, under the French model, the government takes advantage of its power to restrict the venture capital investment and thereby renders adverse impact to starts-up which seek venture capital. Finally, the supply of own fund to meet the enterprises’ needs at seed-development stage and follow-up-growth stage to mitigate the gap with large-sized venture capital[7] is also required by a successful funding model.
IV. Conclusion－Deliberation of Finnish Sitra Experience
As the leading national industrial innovation ability promoter in Finland, Sitra appears to be very characteristic in its organizational framework or operating mechanism. We hereby conclude six major characteristics of Sitra and propose the potential orientation toward deliberation of Taiwan’s industrial innovation policies and instruments.
1. Particularity of Organizational Standing
In consideration of the particularity of Sitra organizational standing, it has two characteristics observable. First, Sitra is under supervision of the Finnish Parliament directly, not subordinated to the administrative organizational system and, therefore, it possesses such strength as flexibility and compliance with the Parliament’s requirements. Such organization design which acts independently of the administrative system but still aims to implement policies has been derived in various forms in the world, e.g., the agency model[8] in the United Kingdom, or the independent apparatus in the U.S.A. Nevertheless, to act independently of the administrative system, it has to deal with the deliberation of responsible political principles at first, which arouses the difficulty in taking care of flexibility at the same time. In Taiwan, the intermediary organizations include independent agencies and administrative corporations, etc., while the former still involves the participation of the supreme administrative head in the right of personnel administration and is subordinated to the ministries/departments of the Executive Yuan and the latter aims to enforce the public missions in the capacity of “public welfare” organization. Though such design as reporting to the Parliament directly is not against the responsible political principles, how the Parliament owns the authority to supervise is the point (otherwise, theoretically, the administrative authorities are all empowered by the parliament in the country which applies the cabinet system). Additionally, why some special authorities are chosen to report to the parliament directly while other policy subjects are not is also disputable. The existence of Sitra also refers to a circumstantial evidence substantiating that Finland includes the innovation policy as one of the important government policies, and also the objective fact that Finland’s innovation ability heads the first in the world.
Second, Sitra is a self-sufficient independent fund, which aims to promote technical R&D and also seeks profit for itself, irrelevant with selection of adequate investment subjects or areas. Instead, for this purpose, the various decisions made by it will deal with the utility and mitigate the gap between R&D and market. Such entity is responsible for public welfare or policy projects and also oriented toward gain from investment to feed the same back to the individuals in the organization. In the administrative system, Sitra is not directed by the administrative system but reports to the Parliament directly. Sitra aims to upgrade the national R&D innovation ability as its long-term goal mission and utilizes the promotion of innovation business and development of venture capital market. The mission makes the profit-orientation compatible with the selection of investment subjects, as an enterprise unlikely to gain profit in the future usually is excluded from the national development view. For example, such industries as green energy, which is not likely to gain profit in a short term, is still worth investing as long as it meets the national development trend and also feasible (in other words, selection of marketable green technology R&D, instead of comparison of the strength and weakness in investment value of green energy and other high-polluted energy).
2. Expressly Distinguished From Missions of Other Ministries/Departments
For the time being, Sitra primarily invests in starts-up, including indirect investment and direct investment, because it relies on successful new technology R&D which may contribute to production and marketability. Starts-up have always been one of the best options, as large-sized enterprises are able to do R&D on their own without the outsourcing needs. Further, from the point of view of an inventor, if the new technology is marketable, it will be more favorable to him if he chooses to start business on his own or make investment in the form of partnership, instead of transfer or license of the ownership to large-sized enterprises (as large-sized enterprises are more capable of negotiation). However, note that Sitra aims to boost innovation activities and only targets at start-up business development, instead of boosting and promoting the start-up per se. Under the requirement that Sitra needs to seek profit for itself, only the business with positive development view will be targeted by Sitra. Further, Sitra will not fund any business other than innovation R&D or some specific industries. Apparently, Sitra only focuses on the connection between innovation activities and start-up, but does not act as the competent authority in charge of small-sized and medium-sized enterprises.
Meanwhile, Sitra highlights that it will not fund academic research activities and, therefore, appears to be distinguished from the competent authority in charge of national scientific research. Though scientific research and technology innovation business, to some extent, are distinguished from each other in quantity instead of quality, abstract and meaningless research is existent but only far away from the commercialization market. Notwithstanding, a lot of countries tend to distinguish basic scientific research from industrial technology R&D in the administration organization's mission, or it has to be. In term of the way in which Sitra carries out its mission, such distinguishing ability is proven directly.
3. Well-Founded Technology Foresight-Based Investment Business
The corporate investments, fund investments and project funding launched by Sitra are all available to the pre-designated subjects only, e.g. ecological sustainable development, energy utilization efficiency, and social structural changes, etc. Such way to promote policies as defining development area as the first priority and then promoting the investment innovation might have some strength and weakness at the same time. First of all, the selection of development areas might meet the higher level national development orientation more therefor, free from objective environmental restrictions, e.g. technical level, leading national technology industries and properties of natural resources. Notwithstanding, an enterprise’s orientation toward innovation R&D might miss the opportunity for other development because of the pre-defined framework. Therefore, such way to promote policies as defining development areas or subjects as the first priority will be inevitably based on well-founded technology foresight-based projects[9], in order to take various subjective and objective conditions into consideration and to forecast the technology development orientation and impact to be faced by the home country’s national and social economies. That is, said strength and weakness will be taken into consideration beforehand for foresight, while following R&D funding will be launched into the technology areas pre-designated after thorough analysis.
4. Self-Interested Investment with the Same High Efficiency as General Enterprises
Sitra aims to gain profit generally, and its individual investment model, e.g., DIILI, also permits marketing managers to involve business operation. The profit-sharing model enables Sitra to seek the same high efficiency as the general enterprises when purusing its innovation activity development. The investment launched by Sitra highlights that it is not “funding” (which Tekes is responsible for in Finland) or the investment not requiring return. Therefore, it has the system design to acquire corporate shares. Sitra participates in a start-up by offering its advanced technology, just like a general market investor who will choose the potential investment subject that might benefit him most upon his personal professional evaluation. After all, the ultimate profit will be retained by Sitra (or said DIILI manger, subject to the investment model). Certainly, whether the industry which requires permanent support may benefit under such model still remains questionable. However, except otherwise provided in laws expressly, said special organization standing might be a factor critical to Sitra profit-seeking model. That is, Sitra is not subordinated to the administrative system but is under supervision of the parliament independently, and how its staff deal with the conflict of interest issues in the capacity other than the public sector’s/private sector’s staff is also one of the key factors to success of the system.
5. Investment Model to Deal With Policy Instruments of Other Authorities/Agencies
Sitra decides to fund a start-up depending on whether it may gain profit as one of its priorities. As aforesaid, we may preliminarily recognize that the same should be consistent with funding to starts-up logically and no “government failure” issue is involved. For example, the funding at the pre-seed-initiation stage needs to tie in with Tekes’ R&D “funding” (and LIKSA service stated herein) and, therefore, may adjust the profit-seeking orientation, thereby causing deviation in promotion of policies. The dispute over fairness of repeated subsidy/funding and rationality of resource allocation under the circumstance must be controlled by a separate evaluation management mechanism inevitably.
6. Affiliation with Enhancement of Regional Innovation Activities
Regional policies cannot be separable from innovation policies, especially in a country where human resources and natural resources are not plentiful or even. Therefore, balancing regional development policies and also integrating uneven resource distribution at the same time is indispensable to upgrading of the entire national social economic benefits. The Finnish experience indicated that innovation activities ought to play an important role in the regional development, and in order to integrate enterprises, the parties primarily engaged in innovation activities, with the R&D ability of regional academic research institutions to upgrade the R&D ability effectively, the relevant national policies must be defined for adequately arranging and launching necessary resources. Sitra's approaches to invest in starts-up, release shares after specific period, integrate the regional resources, upgrade the national innovation ability and boost the regional development might serve to be the reference for universities’ centers of innovative incubator or Taiwan’s local academic and scientific sectors[10] to improve their approaches.
For the time being, the organization engaged in venture capital investment in the form of fund in Taiwan like Sitra of Finland is National Development Fund, Executive Yuan. However, in terms of organizational framework, Sitra is under supervision of the Parliament directly, while National Development Fund is subordinated to the administrative system of Taiwan. Though Sitra and National Development Fund are both engaged in venture capital investments primarily, Sitra carries out its missions for the purpose of “promoting innovative activities”, while the National Development Fund is committed to achieve such diversified goals as “promoting economic changes and national development[11]” and is required to be adapted to various ministries’/departments’ policies. Despite the difference in the administrative systems of Taiwan and Finland, Sitra system is not necessarily applicable to Taiwan. Notwithstanding, Sitra’s experience in promotion and thought about the system might provide a different direction for Taiwan to think when it is conceiving the means and instruments for industrial innovation promotion policies in the future.
[1] Bart Clarysse & Johan Bruneel, Nurturing and Growing Innovation Start-Ups: The Role of Policy As Integrator, R&D MANAGEMENT, 37(2), 139, 144-146 (2007). Clarysse & Bruneel analysis and comparison refers to Sweden Chalmers Innovation model, French Anvar/Banque de Developpement des PMEs model and Finland Sitra PreSeed Service model.
[2] id. at 141-143.
[3] id. at 141.
[4] id. at 145-146.
[5] id. at 143.
[6] The loan to be repaid is not a concern. For example, the competent authority in Sweden only expects to recover one-fourths of the loan.
[7] Clarysse & Bruneel, super note 26, at 147-148.
[8] 彭錦鵬，〈英國政署之組織設計與運作成效〉，《歐美研究》，第30卷第3期，頁89-141。
[9] Technology foresight must work with the innovation policy road mapping (IPRM) interactively, and consolidate the forecast and evaluation of technology policy development routes. One study case about IPRM of the environmental sustainable development in the telecommunication industry in Finland, the IPRM may enhance the foresighted system and indicates the potential factors resulting in systematic failure. Please see Toni Ahlqvist, Ville Valovirta & Torsti Loikkanen, Innovation policy road mapping as a systemic instrument for forward-looking policy design, Science and Public Policy 39, 178-190 (2012).
[10] 參見李昂杰，〈規範新訊：學界科專辦法及其法制配套之解析〉，《科技法律透析》，第23卷第8期，頁33（2011）。
[11] National Development Fund, Executive Yuan website, http://www.df.gov.tw/(tftgkz45150vye554wi44ret)/page-aa.aspx?Group_ID=1&Item_Title=%E8%A8%AD%E7%AB%8B%E5%AE%97%E6%97%A8#(Last visit on 2013/03/28)
Strengthening Taiwan’s Pharmaceutical Resilience: Legal Reflections from the European Union’s Critical Medicines Act 2025/11/15 Introduction: From Vulnerability to Vision For Taiwan, an island state positioned at the crossroads of geopolitical tension and globalized medical trade, the question of pharmaceutical resilience is no longer a technical concern but a constitutional one. A nation’s ability to secure the continuous availability of essential medicines defines not only its public health capacity but the very credibility of its governance. In this light, the European Union’s (hereunder, the “EU”) proposed Critical Medicines Act (hereunder, “EU CMA”) offers Taiwan an illuminating case of how law can move beyond crisis management toward systemic foresight[1]. Resilience in the pharmaceutical sector is not merely about supply stability; it embodies a triple constitutional function—protecting life and health as fundamental rights, safeguarding national security through stable access to critical goods, and reinforcing trust in regulatory governance. Law thus becomes the medium through which uncertainty is rendered governable. The global pandemic revealed that the absence of legal foresight can paralyze even the most advanced health systems, exposing the structural fragility behind administrative efficiency. While Taiwan’s current pharmaceutical regulatory framework remains largely event-driven, reactive, and post-facto, the EU CMA exemplifies an industry-oriented, anticipatory, and pre-emptive model. The contrast underscores a jurisprudential lesson: resilience cannot be legislated through emergency decrees alone; it must be architected through a continuous, legally structured process that anticipates vulnerabilities before they materialize. This article identifies three foundational principles embedded in the EU CMA—visibility, diversification, and agility—and explores how these principles could guide Taiwan in constructing a forward-looking pharmaceutical resilience regime. The goal is not imitation, but inspiration—extracting from the EU experience a conceptual framework for a resilient Taiwanese pharmaceutical order. The EU CMA as a Law of Foresight The EU CMA represents a paradigm shift in pharmaceutical governance. Instead of fragmented national reactions to shortages, the Act establishes a Union-wide framework “to strengthen the availability and security of supply of critical medicinal products” through coordinated information systems, joint vulnerability assessments, and strategic industrial actions[2]. Its architecture reflects a policy-cycle logic: identification of critical medicines (Union list), assessment of vulnerabilities (harmonized monitoring), and action to strengthen capacity (strategic projects, coordinated procurement). Each stage is legally codified and procedurally transparent. The EU CMA thus transforms resilience from a policy aspiration into a governance architecture mandated by law. This approach reveals a fundamental evolution in regulatory philosophy: from law as reaction to law as anticipation. The EU does not merely respond to pharmaceutical disruptions; it legislates the ability to foresee them. This transformation elevates resilience from a managerial tool to a juridical principle that guides administrative behavior and industrial coordination. In this sense, the EU CMA operates as a constitutional statute of preparedness—one that embeds strategic vigilance within the ordinary operations of the market. Moreover, the Act’s systemic design demonstrates a rare synthesis of industrial, health, and competition policies under a unified legal grammar. By integrating economic instruments (such as incentives for local production) with public health imperatives (such as the availability of essential drugs), the EU CMA transforms siloed policy domains into a coherent resilience regime. It institutionalizes coordination not as an afterthought but as a binding legal discipline. Crucially, the EU’s approach embodies what might be called the legality of anticipation: law as an instrument that compels foresight. Resilience here is treated as a public good, transcending national borders but rooted in legal coordination. For Taiwan—whose pharmaceutical imports are geographically concentrated and whose market size limits domestic leverage—the lesson is profound: foresight must be institutional, not intuitive. Visibility: Law as an Instrument of Anticipation At the heart of the EU CMA lies the principle of visibility—the legalization of information as a tool of preparedness. The Act mandates the creation of a Union list of critical medicines[3] and a continuous monitoring system for supply vulnerabilities, coordinated through the Critical Medicines Coordination Group[4]. By institutionalizing information flows, the EU transforms data into a public good and transparency into an act of resilience. Visibility performs a dual function. On one hand, it is technocratic, enabling states to detect early signals of supply risk. On the other, it is constitutional, embedding accountability within knowledge. Uncertainty, when unregulated, leads to discretion; when structured, it becomes a risk, which law can govern. The EU CMA thus converts chaos into cognition—an epistemic transformation at the heart of modern administrative law. For Taiwan, this implies a shift from episodic crisis reporting toward permanent, cross-sectoral data governance. Information duties should not be seen as bureaucratic burdens but as civic infrastructures that permit collective foresight. Visibility, therefore, is not simply about surveillance but about legally enabling knowledge—the first step toward prevention rather than post-hoc management. Diversification: Embedding Resilience into Market Rationality The second principle, diversification, redefines efficiency itself. The EU CMA promotes manufacturing capacity within Europe under the doctrine of “open strategic autonomy”[5]. It supports Strategic Projects that enhance production, encourages cooperation with like-minded countries, and authorizes procurement methods that reward resilience factors alongside price—what EU law calls “MEAT” (Most Economically Advantageous Tender)[6]. This reframes the very idea of market rationality: security and competition are not opposites but complements. Law functions here as a corrective to market myopia, ensuring that the invisible hand does not ignore visible fragility. By quantifying resilience as a measurable value, the EU transforms precaution into an economic variable. For Taiwan—whose procurement and reimbursement systems have historically emphasized price containment—this perspective opens conceptual space. Resilience should not be perceived as inefficiency, but as intertemporal justice: a society’s investment in its future continuity. A diversified system—of suppliers, regions, and regulatory instruments—creates not redundancy but adaptability. In this sense, diversification is law’s expression of prudence in an interconnected economy. Agility: From Administrative Response to Legal Readiness The third principle, agility, captures the law’s capacity to act swiftly yet lawfully. The EU CMA institutionalizes flexibility through accelerated procedures for strategic projects, coordinated procurement frameworks, and crisis response mechanisms[7]. These powers are accompanied by procedural safeguards and sunset clauses, ensuring proportionality and reversibility. Agility thus represents legality in motion: action without arbitrariness. It reconciles speed with scrutiny by embedding emergency measures within predefined legal channels. The lesson for Taiwan is both institutional and philosophical—true readiness is not improvisation, but preparation that preserves legitimacy. In Taiwan’s current system, regulatory energy peaks during emergencies and dissipates thereafter. A mature resilience framework would instead cultivate continuous readiness—administrative structures that learn, anticipate, and adapt. Agility, understood legally, means codifying responsiveness as a standing competence of governance. It is the hinge connecting foresight and execution, legality and flexibility. Taiwan’s Legal Trajectory: From Event-Driven to Industry-Oriented Regulation Comparatively, Taiwan’s Pharmaceutical Affairs Act—even with its proposed amendments—remains largely event-driven and post-crisis in design[8]. Regulatory intervention often follows episodes of shortage or disruption. While recently introduced draft revisions strengthening supply chain obligations[9], these proposed revisions still operate primarily within a reactive paradigm. By contrast, the EU CMA envisions an industry-oriented, anticipatory, and system-based model. It embeds resilience into the legal DNA of pharmaceutical policy—linking regulation, industrial strategy, and public health. For Taiwan, this means evolving from regulatory firefighting to regulatory design: from curing failures to cultivating foresight. To achieve this, Taiwan’s legal development must transcend compliance formalism and embrace a culture of legal learning—where rules are not static commands but adaptive instruments of governance. The transition from event-driven to foresight-driven lawmaking will not only strengthen national health security but also elevate Taiwan’s position in the network of like-minded economies pursuing resilient supply systems. Conclusion: Toward a Resilient Legal Modernity The EU Critical Medicines Act demonstrates that law can be an architecture of anticipation. Its three pillars—visibility, diversification, and agility—form a grammar of resilience that integrates market mechanisms, administrative capacity, and democratic legitimacy. For Taiwan, the value of this model lies not in replication but in reflection. Visibility teaches that knowledge must be institutionalized. Diversification reminds us that resilience can coexist with efficiency. Agility shows that speed and legality are not mutually exclusive. Together, they suggest a new philosophy of governance: one that replaces reaction with design, and uncertainty with structured foresight. Yet the deeper lesson of the EU CMA is that resilience is not simply a functional attribute of a regulatory system—it is a constitutional virtue of modern states. To build resilience is to affirm the social contract anew: to promise citizens not that crises will never occur, but that when they do, institutions will stand ready, transparent, and just. This transforms law from a mirror of disorder into an instrument of collective composure. For Taiwan, embracing resilience as a constitutional principle means reimagining the relationship between law, science, and sovereignty. In a world where disruption is perpetual—whether by pandemics, trade shocks, or technological change—resilience becomes the language through which legality and modernity converge. It marks the transition from governing by reaction to governing by imagination. While the EU CMA relies on the Union’s vast market power to incentivize and coordinate pharmaceutical resilience, Taiwan faces a distinct structural challenge: its market size, though dynamic, cannot generate comparable leverage on a global scale. This asymmetry compels Taiwan to craft a dual strategy—anchoring its domestic resilience through legal foresight, while simultaneously aligning with international frameworks that promote secure and diversified supply chains. How Taiwan can reconcile these two imperatives—maintaining openness and integration with global partners, yet safeguarding autonomous resilience at home—will define the next frontier of its pharmaceutical governance. It is within this strategic and normative intersection that the Institute for Information Industry’s Science and Technology Law Institute (STLI) will continue its research efforts, exploring legal architectures capable of linking Taiwan’s national resilience with the broader ecosystem of global health security. Ultimately, resilience is not merely a regulatory principle but a moral commitment to time—a covenant between generations that law will foresee, prepare, and preserve. As Taiwan refines its pharmaceutical governance, the lesson from the EU CMA is both institutional and existential: to govern resilience is to govern the future itself, and to govern the future is to affirm the dignity of foresight as the highest form of rule of law. [1] EUROPEAN COMMISSION, Proposal for a Regulation of the European Parliament and of the Council laying down a framework for strengthening the availability and security of supply of critical medicinal products as well as for improving the availability of, and access to, medicinal products of common interest (Critical Medicines Act), COM(2025) 102 final (Mar. 11, 2025), https://health.ec.europa.eu/document/download/2abe4fc8-059e-47d9-a20a-d9e3bfc5dc2c_en?filename=mp_com2025_102_act_en.pdf (last visited Nov. 2, 2025). [2] id. at Page 17. [3] id. at Page 27. [4] id. at Page 35. [5] CRITICAL MEDICINES ALLIANCE, STRATEGIC REPORT OF THE CRITICAL MEDICINES ALLIANCE (Feb. 28, 2025), https://health.ec.europa.eu/document/download/3da9dfc0-c5e0-4583-a0f1-1652c7c18c3c_en?filename=hera_cma_strat-report_en.pdf (last visited Nov. 2, 2025). [6] EUROPEAN COMMISSION, Proposal for a Regulation of the European Parliament and of the Council laying down a framework for strengthening the availability and security of supply of critical medicinal products as well as for improving the availability of, and access to, medicinal products of common interest (Critical Medicines Act), COM(2025) 102 final (Mar. 11, 2025), https://health.ec.europa.eu/document/download/2abe4fc8-059e-47d9-a20a-d9e3bfc5dc2c_en?filename=mp_com2025_102_act_en.pdf (last visited Nov. 2, 2025). [7] id. at Page 7. [8] Pharmaceutical Affairs Act (Taiwan), Ministry of Justice, https://law.moj.gov.tw/ENG/LawClass/LawAll.aspx?pcode=L0030001 (last visited Nov. 2, 2025). [9] 〈衛生福利部公告「藥事法」部分條文修正草案〉，法源法律網，https://www.lawbank.com.tw/news/NewsContent.aspx?NID=206187.00（最後瀏覽日：2025/11/03）。
New Version of Personal Information Protection Act and Personal Information Protection & Administration SystemI.Summary In 1995, the Computer-Processed Personal Data Protection Law was implemented in the Republic of China. With the constant development of information technology and the limitations in the application of the legislation, the design of the original legal system is no longer consistent with practical requirements. Considering the increasing number of incidents of personal data leaks, discussions were carried out over a long period of time and the new version of the Personal Information Protection Act was passed after three readings in April, 2010. The title of the law was changed to Personal Information Protection Act. The new system has been officially implemented since 1 October, 2012. The new Act not only revised the provisions of the law in a comprehensive way, but also significantly increased the obligations and responsibilities of enterprises. In terms of civil liability, the maximum amount of compensation for a single incident is 200 Million NTD. For domestic industries, how to effectively respond to the requirements under the Personal Information Protection Act and adopt proper corresponding measures to lower the risk has become a key task for enterprise operation. II. Main Points 1. Implementation of the Enforcement Rules of the Personal Information Protection Act Personal information protection can be said the most concerned issue in Taiwan recently. As a matter of fact, the Computer-Processed Personal Data Protection Law was established in Taiwan as early as August 1995. After more than 10 years of development, computer and information technology has evolved significantly, and many emerging business models such as E-commerce are extensively collecting personal data. It has become increasingly important to properly protect personal privacy. However, the previous Computer-Processed Personal Data Protection Law was only applicable to certain industries, i.e. the following 8 specific industries: the credit investigation business, hospital, school, telecommunication business, financial business, securities business, insurance business, and mass media. And other business was designated by the Ministry of Justice and the central government authorities in charge of concerned enterprises. In addition, the law only protected personal information that was processed by “computer or automatic equipment”. Personal information that was not computer processed was not included. There were clearly no sufficient regulations for the protection of personal data privacy and interest. There were numerous incidents of personal data leaks. Among the top 10 consumer news issued by the Consumer Protection Committee of the Executive Yuan in 2007, “incidents of personal data leaks through E-commerce and TV shopping” was on the top of the list. This provoked the Ministry of Justice and the Ministry of Economic Affairs to “jointly designate” the retail industry without physical boutique (including 3 transaction models: online shopping, catalogue shopping and TV shopping) to be governed by the Computer-Processed Personal Data Protection Law since 1 July 2010. To allow the provisions of the personal information protection legal system to meet the environment of rapid change, the Executive Yuan proposed a Draft Amendment to the Computer-Processed Personal Data Protection Law very early and changed the title to the Personal Information Protection Act. The draft was discussed many times in the Legislative Yuan. Personal Information Protection Act was finally passed after three readings in April 2010, which was officially published by the Office of the President on 26 May. Although the new law was passed in April 2010, to allow sufficient time for enterprises and the public to understand and comply the new law, the new version of the personal information protection law was not implemented on the date of publication. In accordance with Article 56 of the Act, the date of implementation was to be further established by the Executive Yuan. After discussions over a long period of time, the Executive Yuan decided for the Personal Information Protection Act to be officially implemented on 1 October 2012. However, the implementation of two articles is withheld: Article 6 of the Act about the principal prohibition against the collection, processing and use of special personal information and Article 54 about the obligation to notice the Party within one year for personal information indirectly acquired before the implementation of the new law. In terms of the personal data protection legal system, other than the most important Personal Data Protection Act, the enforcement rules established in accordance with the main law also play a key role. The previous Enforcement Rules of the Computer-Processed Personal Data Protection Law were published and implemented on 1 May, 1996. Considering that the Computer-Processed Personal Data Protection Law was amended in 2010 and that its title has been changed to the Personal Data Protection Act, the Ministry of Justice also followed the amended provisions under the new law and actively studied the Draft Amendment to the Enforcement Rules of the Computer-Processed Personal Data Protection Act. After it was confirmed that the new version of the Personal Data Protection Act would be officially launched on 1 October 2012, the Ministry of Justice announced officially the amended enforcement rules on 26 September, 2012. The title of the enforcement rules was also amended to the Enforcement Rules of the Personal Data Protection Act. The new version of personal data protection law and enforcement rules was thus officially launched, creating a brand new era for the promotion of personal data protection in Taiwan. II. Personal Data Administration System and Information Privacy Protection Charter Before the amendment to the Personal Data Protection Act was passed, the Legislative Yuan made a proposal to the government in June 2008 to promote a privacy administration and protection certification system in Taiwan, in reference to foreign practices. In August of the following year, the Strategic Review Board of the Executive Yuan passed a resolution to promote the E-Commerce Personal Data Administration and Information Security Action Plan. In December of the same year, approval was granted for the plan to be included in the key government promotion plans from 2010 to 2013. Based on this action plan, since October 2010, the Ministry of Economic Affairs has asked the Institution for Information Industry to execute an E-Commerce Personal Data Administration System Setup Plan. Since 2012, the E-Commerce Personal Data Administration System Promotion Plan and the Taiwan Personal Information Protection and Administration System (TPIPAS) have been established and promoted, with the objective of procuring enterprises to, while complying with the personal data protection legal system, properly protect consumers’ personal information through the establishment of an internal administration mechanism and ensuring that the introducing enterprises meet the requirements of the system. The issuance of the Data Privacy Protection Mark (dp.mark) was also used as an objective benchmark for consumers to judge the enterprise’s ability to maintain privacy. Regarding the introduction of the personal data administration system, enterprises should establish a content administration mechanism step by step in accordance with the Regulations for Taiwan Personal Information Protection and Administration System. Such system also serves as the review benchmark to decide whether domestic enterprises can acquire the Data Privacy Protection Mark (dp.mark). Since domestic enterprises did not have experience in establishing internal personal data administration system in the past, starting 2011, under the Taiwan Personal Information Protection and Administration System, enterprises received assistance in the training of system professionals such as Personal Data Administrators and Personal Data Internal Appraisers. Quality personal data administrators can help enterprises establish complete internal systems. Internal appraisers play the role of confirming whether the systems established by the enterprises are consistent with the system requirements. As of 2012, there are almost 100 enterprises in Taiwan that participate in the training of system staff and a total of 426 administrators and 131 internal appraisers. In terms of the introduction of TPIPAS, in additional to the establishment and introduction of administration systems by qualified administrators, enterprises can also seek assistance from external professional consulting institutions. Under the Taiwan Personal Information Protection and Administration System, applications for registration of consulting institutions became available in 2012. Qualified system consulting institutions are published on the system website. Today 9 qualified consulting institutions have completed their registrations, providing enterprises with personal data consulting services. After an enterprise completes the establishment of its internal administration system, it may file an application for certification under the Taiwan Personal Information Protection and Administration System. The certification process includes two steps: “written review” and “site review”. After the enterprise passing certification, it is qualified to use the Data Privacy Protection Mark (dp.mark). Today 7 domestic companies have passed TPIPAS certification and acquired the dp.mark: 7net, FamiPort, books.com.tw, LOTTE, GOHAPPY, PAYEASY and Sinya Digital, reinforcing the maintenance of consumer privacy information through the introduction of personal data administration system. III. Event Analysis The Taiwan Personal Information Protection and Administration System (TPIPAS) is a professional personal data administration system established based on the provisions of the latest version of the domestic Personal Data Protection Act, in reference to the latest requirements of personal data protection by international organizations and the experience of main countries in promoting personal data administration system. In accordance with the practical requirements to protect personal data by industries, TPIPAS converted professional legal conditions into an internal personal data administration procedure to effectively assist industries to establish a complete and proper personal data administration system and to comply with the requirements of personal data legislations. With the launch of the new version of the Personal Data Protection Act, introducing TPIPAS and acquiring dp.mark are the best strategies for enterprises to lower the risk from the personal data protection law and to upgrade internal personal data administration capability.
Legal Opinion Led to Science and Technology Law: By the Mechanism of Policy Assessment of Industry and Social NeedsWith the coming of the Innovation-based economy era, technology research has become the tool of advancing competitive competence for enterprises and academic institutions. Each country not only has begun to develop and strengthen their competitiveness of industrial technology but also has started to establish related mechanism for important technology areas selected or legal analysis. By doing so, they hope to promote collaboration of university-industry research, completely bring out the economic benefits of the R & D. and select the right technology topics. To improve the depth of research cooperation and collect strategic advice, we have to use legislation system, but also social communication mechanism to explore the values and practical recommendations that need to be concerned in policy-making. This article in our research begins with establishing a mechanism for collecting diverse views on the subject, and shaping more efficient dialogue space. Finally, through the process of practicing, this study effectively collects important suggestions of practical experts.
Reviews on Taiwan Constitutional Court's Judgment no. 13 of 2022Reviews on Taiwan Constitutional Court's Judgment no. 13 of 2022 2022/11/24 I.Introduction In 2012, the Taiwan Human Rights Promotion Association and other civil groups believe that the National Health Insurance Administration released the national health insurance database and other health insurance data for scholars to do research without consent, which may be unconstitutional and petitioned for constitutional interpretation. Taiwan Human Rights Promotion Association believes that the state collects, processes, and utilizes personal data on a large scale with the "Personal Data Protection Law", but does not set up another law of conduct to control the exercise of state power, which has violated the principle of legal retention; the data is provided to third-party academic research for use, and the parties involved later Excessive restrictions on the right to withdraw go against the principle of proportionality. The claimant criticized that depriving citizens of their prior consent and post-control rights to medical data is like forcing all citizens to unconditionally contribute data for use outside the purpose before they can use health insurance. The personal data law was originally established to "avoid the infringement of personality rights and promote the rational use of data", but in the insufficient and outdated design of the regulations, it cannot protect the privacy of citizens' information from infringement, and it is easy to open the door to the use of data for other purposes. In addition, even if the health insurance data is de-identified, it is still "individual data" that can distinguish individuals, not "overall data." Health insurance data can be connected with other data of the Ministry of Health and Welfare, such as: physical and mental disability files, sexual assault notification files, etc., and you can also apply for bringing in external data or connecting with other agency data. Although Taiwan prohibits the export of original data, the risk of re-identification may also increase as the number of sources and types of data concatenated increases, as well as unspecified research purposes. The constitutional court of Taiwan has made its judgment on the constitutionality of the personal data usage of National Health Insurance research database. The judgment, released on August 12, 2022, states that Article 6 of Personal Data Protection Act(PDPA), which asks“data pertaining to a natural person's medical records, healthcare, genetics, sex life, physical examination and criminal records shall not be collected, processed or used unless where it is necessary for statistics gathering or academic research by a government agency or an academic institution for the purpose of healthcare, public health, or crime prevention, provided that such data, as processed by the data provider or as disclosed by the data collector, may not lead to the identification of a specific data subject”does not violate Intelligible principle and Principle of proportionality. Therefore, PDPA does not invade people’s right to privacy and remains constitutional. However, the judgment finds the absence of independent supervisory authority responsible for ensuring Taiwan institutions and bodies comply with data protection law, can be unconstitutional, putting personal data protection system on the borderline to failure. Accordingly, laws and regulations must be amended to protect people’s information privacy guaranteed by Article 22 of Constitution of the Republic of China (Taiwan). In addition, the judgment also states it is unconstitutional that Articles 79 and 80 of National Health Insurance Law and other relevant laws lack clear provisions in terms of store, process, external transmission of Personal health insurance data held by Central Health Insurance Administration of the Ministry of Health and Welfare. Finally, the Central Health Insurance Administration of the Ministry of Health and Welfare provides public agencies or academic research institutions with personal health insurance data for use outside the original purpose of collection. According to the overall observation of the relevant regulations, there is no relevant provision that the parties can request to “opt-out”; within this scope, it violates the intention of Article 22 of the Constitution to protect people's right to information privacy. II.Independent supervisory authority According to Article 3 of Central Regulations and Standards Act, government agencies can be divided into independent agencies that can independently exercise their powers and operate autonomously, and non- independent agencies that must obey orders from their superiors. In Taiwan, the so-called "dedicated agency"(專責機關) does not fall into any type of agency defined by the Central Regulations and Standards Act. Dedicated agency should be interpreted as an agency that is responsible for a specific business and here is no other agency to share the business. The European Union requires member states to set up independent regulatory agencies (refer to Articles 51 and 52 of General Data Protection Regulation (GDPR)). In General Data Protection Regulation and the adequacy reference guidelines, the specific requirements for personal data supervisory agencies are as follows: the country concerned should have one or more independent supervisory agencies; they should perform their duties completely independently and cannot seek or accept instructions; the supervisory agencies should have necessary and practicable powers, including the power of investigation; it should be considered whether its staff and budget can effectively assist its implementation. Therefore, in order to pass the EU's adequacy certification and implement the protection of people's privacy and information autonomy, major countries have set up independent supervisory agencies for personal data protection based on the GDPR standards. According to this research, most countries have 5 to 10 commissioners that independently exercise their powers to supervise data exchange and personal data protection. In order to implement the powers and avoid unnecessary conflicts of interests among personnel, most of the commissioners are full-time professionals. Article 3 of Basic Code Governing Central Administrative Agencies Organizations defines independent agency as "A commission-type collegial organization that exercises its powers and functions independently without the supervision of other agencies, and operates autonomously unless otherwise stipulated." It is similar to Japan, South Korea, and the United States. III.Right to Opt-out The judgment pointed out that the parties still have the right to control afterwards the personal information that is allowed to be collected, processed and used without the consent of the parties or that meets certain requirements. Although Article 11 of PDPA provides for certain parties to exercise the right to control afterwards, it does not cover all situations in which personal data is used, such as: legally collecting, processing or using correct personal data, and its specific purpose has not disappeared, In the event that the time limit has not yet expired, so the information autonomy of the party cannot be fully protected, the subject, cause, procedure, effect, etc. of the request for suspension of use should be clearly stipulated in the revised law, and exceptions are not allowed. The United Kingdom is of great reference. In 2017, after the British Information Commissioner's Office (ICO) determined that the data sharing agreement between Google's artificial intelligence DeepMind and the British National Health Service (NHS) violated the British data protection law, the British Department of Health and Social Care proposed National data opt-out Directive in May, 2018. British health and social care-related institutions may refer to the National Data Opt-out Operational Policy Guidance Document published by the National Health Service in October to plan the mechanism for exercising patient's opt-out right. The guidance document mainly explains the overall policy on the exercise of the right to opt-out, as well as the specific implementation of suggested practices, such as opt-out response measures, methods of exercising the opt-out right, etc. National Data Opt-out Operational Policy Guidance Document also includes exceptions and restrictions on the right to opt-out. The Document stipulates that exceptions may limit the right to Opt-out, including: the sharing of patient data, if it is based on the consent of the parties (consent), the prevention and control of infectious diseases (communicable disease and risks to public health), major public interests (overriding) Public interest), statutory obligations, or cooperation with judicial investigations (information required by law or court order), health and social care-related institutions may exceptionally restrict the exercise of the patient's right to withdraw. What needs to be distinguished from the situation in Taiwan is that when the UK first collected public information and entered it into the NHS database, there was already a law authorizing the NHS to search and use personal information of the public. The right to choose to enter or not for the first time; and after their personal data has entered the NHS database, the law gives the public the right to opt-out. Therefore, the UK has given the public two opportunities to choose through the enactment of special laws to protect public's right to information autonomy. At present, the secondary use of data in the health insurance database does not have a complete legal basis in Taiwan. At the beginning, the data was automatically sent in without asking for everyone’s consent, and there was no way to withdraw when it was used for other purposes, therefore it was s unconstitutional. Hence, in addition to thinking about what kind of provisions to add to the PDPA as a condition for "exception and non-request for cessation of use", whether to formulate a special law on secondary use is also worthy of consideration by the Taiwan government. IV.De-identification According to the relevant regulations of PDPA, there is no definition of "de-identification", resulting in a conceptual gap in the connotation. In other words, what angle or standard should be used to judge that the processed data has reached the point where it is impossible to identify a specific person. In judicial practice, it has been pointed out that for "data recipients", if the data has been de-identified, the data will no longer be regulated by PDPA due to the loss of personal attributes, and it is even further believed that de-identification is not necessary. However, the Judgment No. 13 of Constitutional Court, pointed out that through de-identification measures, ordinary people cannot identify a specific party without using additional information, which can be regarded as personal data of de-identification data. Therefore, the judge did not give an objective standard for de-identification, but believed that the purpose of data utilization and the risk of re-identification should be measured on a case-by-case basis, and a strict review of the constitutional principle of proportionality should be carried out. So far, it should be considered that the interpretation of the de-identification standard has been roughly finalized. V.Conclusions The judge first explained that if personal information is processed, the type and nature of the data can still be objectively restored to indirectly identify the parties, no matter how simple or difficult the restoration process is, if the data is restored in a specific way, the parties can still be identified. personal information. Therefore, the independent control rights of the parties to such data are still protected by Article 22 of the Constitution. Conversely, when the processed data objectively has no possibility to restore the identification of individuals, it loses the essence of personal data, and the parties concerned are no longer protected by Article 22 of the Constitution. Based on this, the judge declared that according to Article 6, Item 1, Proviso, Clause 4 of the PDPA, the health insurance database has been processed so that the specific party cannot be identified, and it is used by public agencies or academic research institutions for medical and health purposes. Doing necessary statistical or academic research complies with the principles of legal clarity and proportionality, and does not violate the Constitution. However, the judge believes that the current personal data law or other relevant regulations still lack an independent supervision mechanism for personal data protection, and the protection of personal information privacy is insufficient. In addition, important matters such as personal health insurance data can be stored, processed, and transmitted externally by the National Health Insurance Administration in a database; the subject, purpose, requirements, scope, and method of providing external use; and organizational and procedural supervision and protection mechanisms, etc. Articles 79 and 80 of the Health Insurance Law and other relevant laws lack clear provisions, so they are determined to be unconstitutional. In the end, the judge found that the relevant laws and regulations lacked the provisions that the parties can request to stop using the data, whether it is the right of the parties to request to stop, or the procedures to be followed to stop the use, there is no relevant clear text, obviously the protection of information privacy is insufficient. Therefore, regarding unconstitutional issues, the Constitutional Court ordered the relevant agencies to amend the Health Insurance Law and related laws within 3 years, or formulate specific laws.
- Impact of Government Organizational Reform to Scientific Research Legal System and Response Thereto (1) – For Example, The Finnish Innovation Fund (“SITRA”)
- The amendment of the Taiwanese Personal Data Protection Act
- The Demand of Intellectual Property Management for Taiwanese Enterprises
- Legal issues of Third-Party Payment in Taiwan
- Recent Federal Decisions and Emerging Trends in U.S. Defend Trade Secrets Act Litigation
- Impact of Government Organizational Reform to Research Legal System and Response Thereto (2) – Observation of the Swiss Research Innovation System
- Blockchain in Intellectual Property Protection
- Copyright Ownership for Outputs by Artificial Intelligence