Taiwan Depository & Clearing Corporation

With the rapid development of digital finance, personal data protection and privacy governance have become core competitive advantages for enterprises expanding into international markets. On December 12, the Taiwan Depository & Clearing Corporation (TDCC) successfully completed three major certifications and simultaneously obtained the marks for Taiwan Personal Information Protection & Administration System (TPIPAS), the APEC Cross-Border Privacy Rules (CBPR), and the Global Cross-Border Privacy Rules (Global CBPR). TDCC has thus become the first institution in Taiwan to achieve the milestone of “one audit, three certifications,” underscoring that its personal data management capabilities are fully aligned with international standards.

Mr. Daniel Chen, President of TDCC, stated that obtaining the Global CBPR certification not only demonstrates TDCC’s excellence in personal data governance, but also serves as a powerful tool to enhance brand value and earn the trust of international clients. He further noted that jurisdictions including Japan, Singapore, Bermuda, and Dubai have already enacted legislation recognizing CBPR certification as a legitimate mechanism for cross-border data transfers.

Mr. Chen emphasized that after obtaining these three certifications, TDCC will continue to uphold robust personal data protection practices to safeguard investor information. At the same time, TDCC will participate more flexibly in the global digital economy and cross-border data flows, thereby strengthening Taiwan’s pivotal position within the global data governance framework.

The Global CBPR Forum, established in 2022, is an international organization aimed at setting high-standard personal data protection requirements outside the APEC framework. Currently, its members include 10 economies such as Taiwan, the United States, Japan, South Korea, and Singapore, with Dubai officially joining this year. As a founding member of the Global CBPR Forum, Taiwan not only plays an active role within the organization, but obtaining this certification is also regarded as a key cornerstone in the practical implementation of personal data and privacy protection.

TDCC’s validation was conducted by the Institute for Information Industry (III), the authorized accountability agent responsible for TPIPAS, APEC CBPR, and Global CBPR certifications in Taiwan. The simultaneous attainment of all three domestic and international certifications not only validates the international efficacy of Taiwan’s Personal Data Protection Act, but also reduces compliance costs for enterprises. Moreover, it significantly enhances legal certainty and international trust in cross-border data transfers.