Jiàoyù zīliào yǔ túshūguǎn xué (Nov 2023)
An Exploratory Study on the Taiwanese Higher Education Students’ Understanding of Personal Data Protection Act 台灣高等教育學生對個人資料保護法理解之初探
Abstract
資訊隱私權是現代人生活中重要權利之一，高等教育階段學生對資訊隱私之個人資料保護法（簡稱個資法）的理解程度，是落實此權利之基礎。本研究設計情境案例問卷，蒐集到745 位高等教育學生對個資法理解之情形，結果顯示：1. 高度理解部分為「通知義務」。2. 中度理解是關於公務機關之定義，以及委託者負擔損害賠償責任。3. 低度理解是(1) 死亡者個人資料不受個資法保護；(2) 個人資料之定義；(3) 蒐集事項之告知；(4) 對特種個人資料之蒐集；(5) 非公務機關負擔損害賠償之要件；(6) 不適用個資法之兩種情況。至於對一般個人資料之蒐集，視實際具體情況為低度或中度理解。上述研究發現，可作為大專校院對學生個資法教育之參酌。 Information privacy is one of the important rights in modern people’s lives, and the level of understanding regarding information privacy in the Personal Data Protection Act (hereinafter referred to as the PDPA) by students at the higher education stage (that is, at the university level or above) is the basis for exercising the right. To explore students' understanding of the PDPA, the researcher distributed the “PDPA situational-case questionnaire,” and collected responses from 745 students. Results of the analysis stated that, firstly, the students have a high level of understanding in terms of “notification obligation”. Secondly, students possess a moderate understanding of the definition of government agency and the liability of the commissioning agency for damages. Lastly, students have a low level understanding in the following concepts: 1. the personal data of the deceased are not protected by the PDPA; 2. Definition of personal data; 3. Notification of collection matters; 4. Collection of special personal data; 5. The condition for a non-government agency shall be liable for the damages; 6. Two situations where the PDPA is not applicable. In addition, students have a low or moderate understanding of the collection, processing and use of general personal data, depending on the actual situation. Results of the study can be used as a reference for colleges and universities in the development of PDPA courses.
Keywords
