隨著科技網路的發達、行動裝置及社群網站的普及之下，各種資訊已不受時空限制地流傳，其中亦包含每個人的個人資料，此一情形是否對於個人資料造成侵害，當有形成侵害疑慮時，當事人如何主張權利以確保個人資料不會受到侵害，亦或是受到侵害時當事人該如何主張救濟，也成為一大課題，在保障個人資料的同時，也應顧及個人資料的合理利用，故當事人權利及個人資料保護的周全性也成為多數國家追求的目標。
本論文主要以個人資料當事人權利為探討中心，先就憲法層次瞭解我國憲法、司法院釋字的沿革以及歐盟基本權利憲章中對於個人資料相關保障之規範；而後就法律層面，談及我國個人資料保護法中當事人權利保障及權利內涵，並以歐盟GDPR當事人權利規範作為比較，藉以觀察我國個人資料保護法當事人權利是否保障周延，以完善我國法制對於個人資料當事人權利保護，提出可能的修法建議與見解，包括：設立獨立監督機關、將個人資料當事人權利擴充及將個人資料保護明列入憲法基本權利中。
With the advance of information technology and the popularity of social networking sites as well as mobile devices, people can gain a variety of information online, including our detailed personal data. However, such an easy and unrestricted access to personal information may cause a serious problem that our personal data could be analyzed, misused, or even exploited. Therefore, how to protect and prevent personal data from being retrieved and exploited has now become one of the crucial issues we are faced with. Providing adequate and effective protection for personal data is also the goal that many countries are trying to attain.
This study aims to explore the personal data protection rights. First, it will provide an overview of the regulations concerning the personal data protection in the Constitution of the Republic of China (Taiwan), the interpretations made by the Constitutional Court, and the Charter of Fundamental Rights of the European Union. Next, it will examine the definition of personal data and protection regulated in the Personal Data Protection Act in Taiwan. Third, by comparing the differences between the General Data Protection Regulation (GDPR) and the Personal Data Protection Act in Taiwan, it will discuss if the current Personal Data Protection Act in Taiwan can fully protect data subjects. Finally, it will provide feasible solutions and practical suggestions for amending the Personal Data Protection Act in Taiwan.
