論我國開放保險（Open Insurance）法制之建構

Abstract

對於金融業而言，「資料」是最珍貴的資產，而「開放金融」的概念，即可以結合金融與科技，透過分享金融機構原有的金融資訊，加上數位科技的分析與應用能力，創造出更貼近消費者需求的服務，是發展的趨勢。保險業更是相對資料密集的產業，有高度資料共享的需求，本文以「開放保險」作為研究對象，建構我國可行的開放保險法制。 本文首先爬梳了開放銀行與開放保險的發展以及國際間的應用，並指出更廣泛的資料共享勢必會對消費者產生更多的風險，包含消費者的個人資料保護與隱私風險、金融消費者保護風險，以及第三方服務業者的監管問題。再者，本文研究在歐盟、澳洲與美國等不同司法管轄區中，個人資料保護法制與保險消費者保護的相關規範在開放保險下的適用。於點出我國法制現況不足之處後，參酌比較法上之做法，進一步建構出可行的法制與監管方式。就開放保險下的個人資料保護法制，本文提出我國現行個人資料保護法可行的修法方向，並可針對開放保險設立資料保護框架。此外，本文以第三方服務業者和消費者的互動關係為出發，點出仍有對第三方服務業者直接監管的必要性存在。

“Data” is its most valuable asset for the financial industry. Open Finance represents a key development trend that integrates finance and technology by enabling the sharing of financial institutions’ data and leveraging digital technologies for analysis and application. This integration aims to create services that are more responsive to consumer needs. The insurance industry is particularly data-intensive and strongly demands extensive data sharing. This thesis focuses on Open Insurance as its research subject, to construct a feasible regulatory framework for Open Insurance in Taiwan. This study begins by reviewing the development and international applications of Open Banking and Open Insurance. Broader data sharing inevitably leads to increased consumer risks, including personal data protection and privacy, financial consumer protection, and the regulatory challenges associated with third-party service providers. Furthermore, the thesis analyzes the applicability of relevant legal frameworks on personal data protection and insurance consumer protection under Open Insurance in various jurisdictions, including the European Union, Australia, and the United States. After identifying the gaps and limitations in Taiwan’s current legal system, this thesis draws upon comparative legal approaches to propose a feasible regulatory framework. Regarding personal data protection under Open Insurance, this study suggests possible directions for amending Taiwan’s Personal Data Protection Act and proposes establishing a data protection framework specific to Open Insurance. Additionally, based on the interaction between third-party service providers and consumers, the paper emphasizes the necessity of establishing direct regulatory oversight over third-party service providers.