我國金融科技業者使用聯合徵信信用資料之規範研究—以美國信用資料規範為比較研究對象

Abstract

個人信用資料之蒐集、處理與交換，為多數國家長期以來積極推動的制度。透過健全之信用資料體系，個人可掌握其信用狀況，金融機構亦能有效且正確評估個人信用情形，進而強化金融交易之信賴基礎，促進整體金融市場穩定運作。我國現行由財團法人金融聯合徵信中心（下稱聯徵中心）統籌個人信用資料之蒐集、處理與交換，並依據銀行間徵信資料處理交換服務事業許可及管理辦法、聯徵中心會員規約等規範運作，長期維持穩健之個人信用資料體系。 惟隨著金融科技（Financial Technology, FinTech）的快速發展，金融科技業者對於聯徵中心信用資料的需求日益增長，而對現行制度構成挑戰。為因應此一趨勢，本文擬以金融科技業者為中心，從比較法視角出發，探討美國所採行之私營信用報告機制之實務運作，並分析美國所制定之公平信用報告法（Fair Credit Reporting Act, FCRA）及金融科技業者使用信用資料之相關規範，探討其促進信用資料流通、維繫信用資料安全與強化金融監理之平衡機制。 綜整比較結果，本文建議我國未來應適度開放金融科技業者直接介接聯徵中心信用資料。考量金融科技業者之資源與規模限制，建議可採取漸進式調整政策，短期內先行開放金融科技業者得購買聯徵中心信用資料，長期則可制定明確之加入標準與風險控管機制，供金融科技業者得自願申請加入成為聯徵中心之會員機構，藉此兼顧創新發展與信用資料體系維護，促進我國個人信用資料制度之彈性。

The collection, processing, and exchange of personal credit data have long been actively promoted in many countries as a fundamental institutional framework. A sound credit information infrastructure enables individuals to understand their credit status and allows financial institutions to assess credit risk accurately and efficiently, thereby strengthening the foundation of trust in financial transactions and promoting the stability of the overall financial market. In Taiwan, the Joint Credit Information Center (JCIC), a non-profit organization, is responsible for coordinating the collection, processing, and exchange of personal credit data. The JCIC operates in accordance with relevant regulations, including the Regulations Governing Authorization and Administration of Service Enterprises Engaged in Interbank Credit Information Processing and Exchange, as well as the JCIC Membership Rules. The JCIC has maintained a stable and reliable credit information system over the years. However, with the rapid development of financial technology (FinTech), Fintech firms are increasingly demanding access to credit data managed by the JCIC, thereby posing challenges to the existing regulatory framework. In response to this trend, this paper focuses on FinTech firms and adopts a comparative legal approach to examine the operational practices of the private credit reporting system in the United States. It analyzes the structure of the federal Fair Credit Reporting Act (FCRA) and the relevant legal provisions governing the use of credit data by FinTech companies, exploring how the U.S. balances the goals of promoting data flow, ensuring data security, and enhancing financial supervision. Based on a comprehensive comparative analysis, this paper recommends that Taiwan should gradually open access for fintech companies to directly connect with JCIC credit data. In light of the resource and scale limitations faced by fintech firms, a phased policy approach is advised. In the short term, fintech companies should be permitted to purchase credit data from the JCIC. In the long term, clear eligibility criteria and risk control mechanisms should be established, enabling fintech firms to voluntarily apply for membership in the JCIC. This dual approach aims to balance the promotion of financial innovation with the integrity of the credit data system, thereby enhancing the flexibility and effectiveness of Taiwan’s personal credit information framework.