15 October

If a company leaks your personal data, Taiwan's Personal Data Protection Act, as amended and promulgated in November 2025, requires leaks within a defined reporting scope to be reported, and the Personal Data Protection Commission is to receive such reports. The commission's preparatory office announced in October 2025 that the commission can be established only after its organic act passes, and as of 10 October 2026 we could not find that act in the national Laws & Regulations Database, which still marks the effective date of the amendments as undetermined. Singapore's Parliament passed the Personal Data Protection Act on 15 October 2012, its Personal Data Protection Commission was established on 2 January 2013, and the Do Not Call Registry provisions, which let people register to opt out of marketing calls and messages, took effect on 2 January 2014. Taiwan's preparatory office runs a consultation line on the personal data law, though its announcement does not specify whether the line accepts breach complaints. To request an investigation in Taiwan, readers can contact the authority responsible for the company's sector or the local government, which Article 22 of the current Act empowers to inspect companies, while in Singapore the commission's website has a menu entry for reporting a data protection concern.