Data, privacy and AI rules

Due in 60 days12Regulations190

12 due in 60 days · 190 regulations

Taiwan AI Basic Act

In force Taiwan · In force Jan 14, 2026 · next deadline Jan 14, 2028 (in 15 months)

Official text
Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

Deadlines

Coming up
Transition endsTentativeJan 14, 2028 · in 15 months · Source
Agencies must align laws with the ActGovernment agencies must finish amending or adopting laws and administrative measures within 2 years of entry into force (art. 18). Date is computed from the statute.
Already passed
Takes effectJan 14 · 9 months ago · Source
AI Basic Act in forcePromulgated and in force on the same day (art. 20).

Summaries for reference, not legal advice. Check the official text.

What it does

Taiwan's framework law for AI. It sets seven principles (including privacy, security, transparency, fairness and accountability), names the National Science and Technology Council as the lead authority, and has the Ministry of Digital Affairs build a risk classification framework that sector regulators use for risk-based rules. High-risk AI must carry warnings, and the government must set liability and remedy rules for high-risk AI.

Who it applies to
Government agencies, which must implement it through sector rules. Private AI developers and deployers are affected through those sector rules and risk-based management standards.
Penalties
None in the Act itself. Obligations are expected to come through sector laws and rules.
Enforced by
National Science and Technology Council (lead), Ministry of Digital Affairs (risk framework), and sector regulators
Official name
Artificial Intelligence Basic Act
Citation
Presidential Order Hua-Zong-Yi-Zi No. 11500001671 (14 Jan 2026)
Topics
AI
Verified 2026-09-25 law.moj.gov.tw
Research notes

20 articles. Article 18 two-year deadline is counted from 14 Jan 2026.

Related

AmendedAustralia
Australia Privacy ActAustralia's federal privacy law (13 Australian Privacy Principles, Notifiable Data Breaches scheme). The 2024 amendment adds a statutory tort for serious invasions of privacy, tiered civil penalties and infringement notices, a mandate for a Children's Online Privacy Code, clearer security duties, and privacy-policy transparency for substantially automated decisions from 10 December 2026. It also adds criminal doxxing offences.Next: Dec 10 Children's Online Privacy Code must be registered · in 44 days
In forceChina
China AI Content Labeling MeasuresRequires generative AI service providers to add explicit (visible) labels to AI-generated text, images, audio, video and virtual scenes, and implicit labels (metadata) to generated files. Content distribution platforms must detect and label AI-generated content, and app stores must check labeling functions when apps are listed. A mandatory national standard (GB 45438-2025) takes effect on the same date.In effect since Sep 1, 2025
In forceChina
China Algorithmic Recommendation ProvisionsRegulates recommendation, ranking, personalization, generation and dispatch algorithms used in internet services in China. Users must be able to switch off personalized recommendations and manage tags, and providers may not use algorithms for price discrimination or to induce addiction. Providers with public opinion attributes or social mobilization capacity must file their algorithms with the CAC within 10 working days of launching a service.In effect since Mar 1, 2022
In forceChina
China Anthropomorphic AI MeasuresRegulates AI companion and emotional interaction services that simulate human personality. Providers must tell users they are talking to AI, remind users after every 2 hours of use, intervene in crises such as self-harm, offer easy exit, and may not offer virtual partner or relative services to minors. Users' interaction data may not be shared or used for training on sensitive data without consent, and services with 1 million registered or 100,000 monthly active users need a security assessment filed with the provincial CAC.In effect since Jul 15, 2026
AmendedChina
China Cybersecurity LawChina's base cybersecurity statute: multi-level protection scheme duties for network operators, localization and security review duties for critical information infrastructure (CII) operators, and content controls. The 2025 amendment, in force from 1 January 2026, adds AI governance support, ties PI processing to PIPL, allows fines on first violations and sharply raises maximum fines.In effect since Jun 1, 2017
In forceChina
China Deep Synthesis ProvisionsRegulates deepfakes and other deep synthesis services such as synthetic text, voice cloning, face swapping and immersive scenes. Providers must verify user identity, review content, add technical marks to generated content, and add prominent labels where content could confuse the public. Providers with public opinion attributes must file algorithms, and app stores must check filings and security assessments.In effect since Jan 10, 2023
In forceChina
China Generative AI MeasuresChina's main rule for generative AI services offered to the public in China. Providers must use lawfully sourced training data, respect IP and personal information rights, label generated content, handle illegal content, and protect minors. Services with public opinion attributes or social mobilization capacity need a security assessment and algorithm filing.In effect since Aug 15, 2023
In forceIndia
India IT Rules amendment on synthetic contentAmends India's IT Rules 2021 to regulate synthetically generated information (AI-made or AI-altered audio, images and video). Intermediaries that enable such content must label it prominently, keep labels and metadata from being removed, and significant social media intermediaries must get a user declaration and verify it. Takedown clocks are cut sharply: 3 hours after a court or government order, 36 hours for certain grievances, and 2 hours for intimate or morphed images.In effect since Feb 20, 2026
Questions about Taiwan AI Basic Act
What are the Taiwan AI Basic Act compliance deadlines?
Jan 14, 2026: AI Basic Act in force. Jan 14, 2028: Agencies must align laws with the Act (tentative).
When does Taiwan AI Basic Act take effect?
Taiwan AI Basic Act took effect on Jan 14, 2026. The next milestone is Jan 14, 2028: Agencies must align laws with the Act.
Who does Taiwan AI Basic Act apply to?
Government agencies, which must implement it through sector rules. Private AI developers and deployers are affected through those sector rules and risk-based management standards.
What are the penalties under Taiwan AI Basic Act?
None in the Act itself. Obligations are expected to come through sector laws and rules.