In a high-profile case involving the secondary use of national health insurance data, the Taiwan Constitutional Court ruled in August 2022 that the absence of an independent data protection authority is against the Constitution and mandated the establishment of the relevant legal system within three years.

In response, the Taiwan Legislative Yuan passed the Amendment to the Taiwan Personal Data Protection Act (PDPA) on 16 May 2023 to establish the Personal Data Protection Commission. The Preparatory Office of the Personal Data Protection Commission was launched on 5 December 2023 to promote the establishment of the Personal Data Protection Commission, which will serve as the data protection authority of Taiwan. As the three-year period will expire in August 2025, substantial structural changes in the personal data protection authority will undoubtedly occur in 2025.