iRent's personal data leakage incident broke out, affecting about 400,000 users. The Taipei Municipal Transportation Bureau determined that iRent had not fulfilled its management responsibilities and imposed a fine of up to 90,000 yuan. Liao Yuanling, the section chief of the Transportation Bureau, pointed out that a sanction will be issued tomorrow If there is no improvement in the re-examination at another day, a fine of 90,000 yuan will be imposed.

(file photo)

[Reporter Cai Yahua/Taipei Report] iRent’s personal data leakage incident broke out, affecting about 400,000 users. The Highway Administration of the Ministry of Communications issued a penalty today. The Taipei City Transportation Bureau determined that iRent had not fulfilled its management responsibilities, and the circumstances were serious. A fine of up to 90,000 yuan will be imposed for violating the "Taipei Municipal Regulations on the Self-Government of Shared Transportation Business Management". Liao Yuanling, section chief of the Transportation Bureau, pointed out that a written judgment will be issued tomorrow, and a further fine of 90,000 yuan will be imposed if there is no improvement after a re-examination.

The Bureau of Transportation pointed out that upon receiving the news on January 31, it immediately contacted iRent to explain the reason, issued a document on February 2 requesting to explain the follow-up processing situation, and sent personnel from the company to conduct an on-site investigation on February 4.

After investigation by iRent, the company's temporary database did not properly block external connections, resulting in the possibility that the database may be accessed by external professional information personnel using specific tools and techniques to inquire about member transaction data in the past 3 months, all potential risks involved The number of users is about 400,100.

Please read on...

The Bureau of Transportation further pointed out that iRent did not take appropriate security measures to leak personal data, which was determined by the Highway Administration of the Ministry of Communications on February 9 to violate the provisions of Article 27, Item 1 and Item 2, of the Personal Data Protection Act.

The Bureau of Transportation believes that iRent has failed to fulfill its management responsibilities, and the circumstances are serious. According to the provisions of Article 9, Item 1, Subparagraph 10 and Article 14 of the Beishi City Shared Transportation Management Autonomous Regulations, a fine of up to 90,000 yuan will be imposed and a deadline will be given for improvement. .

The Transportation Bureau stated that if the public believes that they have suffered related damages due to the incident, they can not only contact iRent to learn about the relevant situation, but also claim according to Chapter 4 of the Personal Data Protection Act on Compensation for Damages and Group Actions. The Beishi Transportation Bureau can also assist in referrals Department of Highway Administration, Ministry of Communications.

In addition, claims for damages arising from personal information leaks arising from consumer relationships can also be handled through the consumer dispute appeal and mediation procedures stipulated in the Consumer Protection Law.