Pablo Hsiao

蕭家捷

Attorney

Attorney Hsiao focuses his practice on trade secret management and intellectual property protection. With extensive experience in privacy regulations and trade secret compliance frameworks, he has earned the trust of a broad client base, ranging from leading international game developers to Taiwan’s most prominent traditional and digital media companies, unicorn startups, software firms, medical institutions, and e-commerce enterprises.

He regularly advises clients on how to lawfully leverage data and design compliance systems within complex regulatory environments, while also working collaboratively to develop innovative strategies that address the opportunities and challenges presented by new business models and emerging legal issues. Attorney Hsiao is also a certified ISO 27001 Lead Auditor. Combining his legal expertise with management knowledge, he has provided numerous well-known enterprises with best practice guidance on internal governance frameworks, tailored to both Taiwan’s legal landscape and international standards.

Practice Area

Professional Experience

Deputy Chairperson, Digital Economy and FinTech Committee, Taiwan Bar Association
Deputy Chairperson, Digital Services and Data Protection Committee, Taipei Bar Association
Member, Cybersecurity and Personal Data Protection Legal Committee, Taiwan Bar Association
Member, China Affairs Committee, Taiwan Bar Association
Member, Review Committee, Legal Aid Foundation
Lead Auditor, ISO 27001:2022 Information Security Management System
Director, Taipei Tiaotong Commercial District Development Association

Education

Master of Laws in Financial and Economic Law, Fu Jen Catholic University
Bachelor of Laws, Soochow University

Related Insights

A Brief Analysis of Taiwan’s PDPA Amendment: Towards Independent Oversight and the Challenges of AI Governance

I. Core Amendments and Background On March 27, 2025, the Executive Yuan announced the draft Organizational Act of the Personal Data Protection Commission and draft amendments to parts of the Personal Data Protection Act. This was stated as an effort to "establish a comprehensive independent supervisory mechanism with robust enforcement powers, and to institute data governance for the era of pervasive Artificial Intelligence (AI)." These proposed changes represent what could be the most substantial revisions to the PDPA since its initial enactment. This article aims to analyze the substance of these amendments, compare them against relevant international legal norms, examine the current trajectory of the revisions, and assess the extent to which the stated goal of "data governance for the era of pervasive AI application" is realized. The central objective of this amendment is to establish an independent supervisory framework for personal data protection, as mandated by a judgment of the Constitutional Court 2022. This primarily concerns the institutional structure and mandate of⋯

Attorney Pablo Hsiao

2025/04/08