Syfte: Studien syftar till att förklara hur olika användare upplever de tre nivåerna av AI-genererat innehåll inom marknadsföring i företagsekonomi. Studien syftar även till att se om deras handlande går i linje med deras attityder eller om det finns utrymme för en paradox. Teoretisk bakgrund: I bakgrund och teori redogörs för begrepp som är relevanta för studien så som de olika nivåerna av AI, attityders beståndsdelar och flera modeller kopplat till handlande. Även begreppen integritetskalkylen och integritetsparadoxen behandlas samt påverkansfaktorerna upplevda fördelar, upplevt förtroende och upplevd risk.  Metod: En post-positivistisk och deduktiv ansats användes för studien i form av en kvantitativ surveyundersökning. Data samlades in genom en online-enkät som förmedlades genom sociala medier och genererade 113 svar. Resultatet analyserades med hjälp av univariata tabeller samt en regressionsanalys. Undersökningskvaliteten säkrades med hjälp av enkätfrågor förankrade i teori samt Cronbach’s Alpha och korstabeller. Resultat & Slutsatser: Resultatet av studien visar på att de tre faktorerna fördelar, förtroende och risk påverkar användares attityder kring alla nivåer av AI-baserad marknadsföring. Användarna hyste mest negativa attityder mot kännande AI och mest positiva mot mekanisk AI. Attityderna visade sig ha en påverkan på handlandet vilket inte bekräftar teorin om en paradox. Resultatet är inte applicerbart på populationen i stort och därför behövs vidare studier innan långtgående rekommendationer kan ges till managers. / Purpose: The study aims to explain how users experience the three levels of AI-based marketing within business administration. The study also aims to see if users' actions are in line with their attitudes or if a paradox is applicable.  Theoretical background: In the background and theory, concepts that are relevant to the study are described, such as the different levels of AI, components of attitudes and several models linked to behavior. The concepts of the privacy calculus and the privacy paradox are also addressed, as well as the influencing factors perceived benefits, perceived trust and perceived risk. Method: A post-positivist and deductive approach was used for the study in the form of a quantitative survey. Data was collected through an online questionnaire that was distributed through social media and generated 113 responses. The results were analyzed using univariate tables and a regression analysis. The research quality was ensured with the help of questionnaire questions rooted in theory as well as Cronbach's Alpha and crosstabs. Results & Conclusions: The results of the study show that the three factors benefits, trust and risk affect users' attitudes of all levels of AI-based marketing. Users had the most negative attitudes towards feeling AI and most positive towards mechanical AI. The attitudes showed to have an influence on the behavior, which does not confirm the theory of a paradox. The result is not applicable to the population as a whole and therefore further studies are needed before far-reaching recommendations can be given to managers.

Nyligen har forskning inom marknadsföring fokuserat på konsumenternas köpbeteende och köpmönster, vilket har haft stor inverkan genom digitaliseringen i samhället och runt om i världen. Allt fler vetenskapliga studier forskar om konsumenternas personliga integritet och hur den kan påverkas av personliga erbjudanden från företag, till exempel genom marknadsföringsmetoden 'Retargeting'. Personliga erbjudanden, även kallade skräddarsydda erbjudanden, blir alltmer synliga i B2C för att "sticka ut" från klustret av personaliserade erbjudanden och öka företagens försäljning och vinst genom att sälja produkter och tjänster. Konsumenterna kan dock uppleva både en positiv och en negativ upplevd respons baserat på dessa personaliserade erbjudanden från företag. Fem (5) tydliga faktorer som kan kopplas till konsumenternas upplevda respons är; (1) reaktans, (2) irritation, (3) bojkott, (4) integritetsoro samt (5) attraktion, varav endast den senare uppfattas som positiv. Anledningen till dessa kan bero på tre (3) nyckelfaktorer som kan påverka effekten av anpassade erbjudanden på konsumenterna; graden av (1) förtroende, (2) graden av kontroll och (3) graden av transparens. Flera vetenskapliga studier inom detta område diskuterar både likheter och skillnader mellan effekterna och konsekvenserna som uppstår och hur de utmanar balansen mellan företag och konsumenter. Å ena sidan får konsumenter personifierade erbjudanden som företag antar att konsumenter upplever som attraktiva, å andra sidan samlar företag, lagrar och använder konsumenternas personliga data i en omfattande utsträckning eftersom ett mer digitalt samhälle ständigt kräver att konsumenter alltmer kopplar upp sig digitalt, till exempel via sociala medier och företagswebbplatser. Denna studie undersöker därför de tre nyckelfaktorerna separat men också interaktionen mellan dessa och hur de påverkar personliga erbjudanden från företag i förhållande till konsumenternas upplevda respons. Förtroende upplevdes som en avgörande faktor som kan förbättra relationen mellan företag och konsument, däremot ansågs den även som en skör tråd då ett minskat eller förlorat förtroende kan leda till negativa konsekvenser. Graden av kontroll ansågs som tillräcklig till en viss nivå, då det konstaterades att valmöjligheter för konsumenten att kunna kontrollera den personliga informationen om de vill var nödvändigt. Graden av transparens konstaterades som en väsentlig faktor för att skapa en ökad förståelse och insyn i företagens hantering av den personliga data som konsumenterna delar med sig av, vilket företagen samlar in, lagrar och använder i deras personaliserade erbjudanden för att matcha konsumenternas upplevda behov. / Research in marketing is heavily focused on consumers' buying behaviour and buying patterns, which has had a major impact through the advancement of digitalisation in society and around the world. More and more scientific studies are being conducted regarding consumers' personal integrity and how it can be affected by personalised offers from companies, for example through the marketing method 'Retargeting'. Personalised offers, also called tailored offers, are becoming increasingly visible in Business-to-Consumers (B2C) companies to "stand out" from everyday offerings and increase the companies' sales and profits by selling targeted products and services to individual users. There are five unique factors that can determine a consumers' perceived response: (1) reactance, (2) irritation, (3) boycott, (4) concern for integrity and (5) attraction, of which only the latter is perceived as positive. The reason for these is due to three key factors that will affect the effectiveness of personalised offers on consumers: (1) the degree of trust, (2) the degree of control and (3) the degree of transparency. Several scientific studies in this area discuss both similarities and differences between the effects and the consequences that arise and how they challenge the balance of purchasing between companies and consumers. On the one hand, companies provide consumers with personalised offers which can been perceived as attractive to the buyer, on the other hand, companies collect, store, and use consumers' personal data for company gains regardless of conduct of use. We live in an age where consumers are constantly connecting to the digital society and companies can collect and store the data from social media, and websites. This study therefore examines the three key factors: trust, control, and transparency. Additionally, the interaction between these and how they affect personalised offers from companies in relation to consumers' perceived response. Trust was perceived as a decisive factor that can improve the relationship between companies and consumers, however, trust was also considered as a fragile factor in case of reduced or lost trust which can lead to negative consequences. The degree of control was considered sufficient to a certain level, as it was found that the consumers’ choices regarding to be able to control their personal information were perceived as necessary. The degree of transparency was identified as an essential factor in creating a greater understanding and transparency in companies management of the personal data that consumers share, which companies collect, store and use in their personalised offerings to match consumers' perceived needs.

Syftet med denna studie är att genom en kombinerad metod undersöka vilka faktorer som påverkar konsumenters beslutsprocesser samt vad konsumenter upplever som inträngande på den personliga integriteten, i kontexten av personaliserad marknadsföring. För att uppnå studiens syfte har ett visst antal konsumenter undersökts genom semistrukturerade intervjuer samt via en enkät. Resultaten visar att tillförlitlighet, diverse betalningsalternativ, leverans- och returpolicyer samt olika förmåner är faktorer som påverkar konsumenters beslutsprocesser. Ännu en slutsats är att konsumenter upplever marknadsföring och erbjudanden om produkter och/eller tjänster de endast talat om som inträngande på den personliga integriteten. Dessa slutsatser baseras på respondenternas egna åsikter och tidigare upplevelser. / The purpose of this study is to, by using a combined method, investigate which factors influence consumers' decision-making processes and what consumers perceive as intrusive on personal integrity, in the context of personalized marketing. To achieve the purpose of the study, a certain number of consumers were surveyed through semi structured interviews and via a questionnaire. The results show that reliability, various payment options, delivery- and return policies and various benefits, are factors that affect consumers' decision-making processes. Another conclusion is that consumers experience marketing and offers of products and/or services they have only talked about as intrusive on personal privacy. These conclusions are based on the respondents' own opinions and previous experiences.

Since the 1970s and the first data protection laws, the flow of personal data across borders has always been a crucial issue. In this thesis, we study how we have moved from regulations advocating the protection of personal data outside borders to regulations establishing a principle of free data circulation on a global scale. This study is based firstly on a retrospective of personal data law with regard to transborder data flows, and secondly on the fact that these legal questions are now merged with issues of international trade law. Finally, we consider the drifts of such a free flow of data at the global level, and we reflect on certain avenues of reflection in order to place data protection as an end in itself, at the center of the issues. / Depuis les années 1970 et les premières législations relatives à la protection des données personnelles, la circulation des données personnelles hors des frontières a toujours été un enjeu crucial. Dans ce mémoire nous étudions comment l’on est passé de réglementations prônant la protection des données personnelles hors des frontières à des réglementations instaurant un principe de libre circulation des données à l’échelle mondiale. Cette étude se fonde dans un premier temps sur une rétrospective du droit des données personnelles en ce qui concerne les flux transfrontières de données avant de constater dans un second temps que ces questions de droit sont désormais fondues dans des enjeux de droit du commerce international. Posant enfin les dérives d’une telle libre circulation des données au niveau mondial, nous réfléchissons à certaines pistes de réflexion afin de replacer la protection des données comme une fin en soi, au centre des enjeux.

In present-day society more and more personal information is being collected. The nature of the collection has also changed: more sensitive and potentially prejudicial information is collected. The advent of computers and the development of new telecommunications technology, linking computers in networks (principally the Internet) and enabling the transfer of information between computer systems, have made information increasingly important, and boosted the collection and use of personal information. The risks inherent in the processing of personal information are that the data may be inaccurate, incomplete or irrelevant, accessed or disclosed without authorisation, used for a purpose other than that for which they were collected, or destroyed. The processing of personal information poses a threat to a person's right to privacy. The right to identity is also infringed when incorrect or misleading information relating to a person is processed. In response to the problem of the invasion of the right to privacy by the processing of personal information, many countries have adopted "data protection" laws. Since the common law in South Africa does not provide adequate protection for personal data, data protection legislation is also required. This study is undertaken from a private law perspective. However, since privacy is also protected as a fundamental right, the influence of constitutional law on data protection is also considered. After analysing different foreign data protection laws and legal instruments, a set of core data protection principles is identified. In addition, certain general legal principles that should form the basis of any statutory data protection legislation in South Africa are proposed. Following an analysis of the theoretical basis for data protection in South African private law, the current position as regards data protection in South-Africa is analysed and measured against the principles identified. The conclusion arrived at is that the current South African acts can all be considered to be steps in the right direction, but not complete solutions. Further legislation incorporating internationally accepted data protection principles is therefore necessary. The elements that should be incorporated in a data protection regime are discussed. / Jurisprudence / LL. D. (Jurisprudence)

En s’inspirant de l’exemple des défis corporatifs, c’est-à-dire, des initiatives déployées par les sociétés pour rendre le marché de l’emploi plus accessible aux membres de groupes perçus comme marginalisés, ce mémoire cherche à analyser le conflit qui pourrait surgir au Québec entre le droit à la vie privé, protégé notamment par la Loi sur la protection des renseignements personnels dans le secteur privé et la Loi sur la protection des renseignements personnels et des documents électroniques et le besoin croissant de l’entreprise d’utiliser les données privées de leurs employés pour vendre leurs biens et services. Dans un premier temps, ce mémoire effectue un survol des régimes de protection de la vie privée des pays qui ont le plus influencé le droit québécois et canadien soit l’Europe, les États-Unis et le Royaume Uni en soulignant leur influence sur le régime en vigueur au Québec. Dans un second temps, il soulève les entraves que posent la LPRPS et la LPRPDE à la participation de l’entreprise aux défis corporatifs. Dans un troisième temps, il explore des pistes possibles à la fois interprétatives, législatives et contentieuses afin de rendre ces lois plus accommodantes aux besoins de l’entreprise. / This essay uses the example of Industry Challenges - a technique deployed by companies to promote the hiring and advancement of certain members of society - to explore a conflict that could arise in Quebec between the individual’s right to privacy as protected by An Act Respecting the Protection of Personal Information In the Private Sector and the Personal Information Protection and Electronic Documents Act , and that of an organisation to use personal information relating to its workforce to market itself. It briefly reviews privacy protection in jurisdictions with the greatest legal influence on Quebec and Canada: the European Union, the United States and the United Kingdom (Chapter 2). It demonstrates how a blend of these influences is reflected in the Quebec and Canadian approaches to privacy and how existing privacy legislation might prevent a company from effectively and efficiently responding to Industry Challenges (Chapter 3). Finally, the last two chapters respectively explore the interpretive and legislative amendments that could be made to PPIPS and PIPEDA to enable companies to respond to Industry Challenges (Chapter 4) as well as the possible legal action a company could take on the ground that Quebec’s privacy legislation violates its right to express itself commercially under s. 2(b) of the Canadian Charter of Rights and Freedoms (Chapter 5).

This study focuses on the right to privacy in the workplace, specifically employees' expectations of electronic privacy where personal information is processed. The main aim of this dissertation is to establish whether, given advantages in technology, South African laws offers adequate protection for employees when their electronic information is being processed. The study analyses South African law as it relates to the privacy of employees during the processing of their personal information in the workplace.This is examined within the parameters of the constitutional and legislative framework with due regard to the common-law right to privacy. The legal issues are examined from a South African context and is compared with data protection laws and regulations of the United Kingdom. It also offers recommendations based on experience gained in the United Kingdom. / Private Law / LL. M.

長久以來，我國在偵辦民刑事案件時，調閱相關人等之銀行帳戶資料通常是必要作法之一，表面上看來行之有年、理所當然，但深究後卻發現未臻完善、有待改進，其中尤以正當合法性及與個人隱私權之衝突最具爭議。調閱銀行帳戶資料固然是快速有效偵查案情的方式之一，但若無合理的法律依據、明確的施行方針、完善的配套措施及必要的懲處規定，將易流於擴權濫用，不僅違背法理，亦侵害當事人之隱私權，影響甚鉅，而當今我國文獻中卻較缺乏關於此方面之探討，殊為可惜。因此，目前我國偵查機關調閱銀行帳戶資料之法律依據為何？與其他法律是否有矛盾衝突之處？實務上如何施行？有哪些配套措施？未來有何改進之道？若公務機關違法濫權有何懲罰機制？如何適當修改現有法令規範以使其更臻完善？凡此皆與社會大眾息息相關，並使筆者產生高度興趣及強烈研究動機，期盼透過深入研究，得以充分瞭解相關理論與實務，並對問題提出解決或改善之建議。 無論自人性尊嚴、隱私權或資訊自決權之觀點來看，個人資料保護皆為基本且重要之議題，不容忽視，而銀行帳戶實為個人資料當中非常重要之一環。美國為隱私權概念發源地，理論與實務發展久遠，深具探討價值，故本文擇其作為比較分析對象。為求深入探討調閱銀行帳戶資料在台灣及美國司法實務面運作之情形，本文整理解析兩國近年來相關法規及民事刑事裁判，2010年4月我國立法通過之「電腦處理個人資料保護法修正案」(後更名為「個人資料保護法」，2012年10月付諸實行，以下亦簡稱「新個資法」)亦在本文討論範圍內。本文將介紹各相關法規內容，分析新舊法規之差異，探究實務面作法及未來可能走向，以提供各位讀者先進參考。 國家為履行公共任務或打擊金融犯罪，通常需要調閱相關人等之銀行帳戶資料，此為偵查機關職責所在，但若稍有不慎即可能使個人資訊隱私權遭受重大侵害，而目前理論與實務面皆尚有未盡完善之處。筆者盼以本身面臨之法令疑義，對我國新個資法及台美兩國相關法規之檢視，對本文蒐集資料之研讀心得，及在金融業服務十年之工作經驗作為本文研究之核心。 本篇論文之主要目的，盼藉由各面向之探討及對法律制度之論述，檢視當今我國與美國調閱銀行私人帳戶資料之正當性與合法性；本文不僅描述兩國偵查機關調閱銀行帳戶資料之現況，亦針對問題分析研究，提出建議策略，盼能為我國目前存在之問題困境貢獻一己之力，以供法律界、金融界及相關公務部門參考。 透過本文研究，可觀察目前我國與美國調閱銀行私人帳戶資料相關法規與實務之發展方向，探討主管機關在提升偵查效率及保障個人財務資訊隱私權之間如何取得平衡，希冀政府機關不僅能快速有效完成偵查任務，亦能在合情合理合法範圍內作好個人資料保護，兩全其美。 / In Taiwan, law enforcement’s access to private banking account is a common way of investigating civil or criminal crimes. Although it seems very normal, it still has some problems need to be solved, especially its legality and controversy over privacy. It’s efficient to investigate a crime by retrieving data from private banking account, but it’s easy to invade personal privacy if there’s no reasonable law, clear direction, supplementary measures or necessary punishments. As a result, it’s very worthwhile and important to discuss this thesis’ title. However, there are not many relevant essays or writings in our country nowadays. About this issue, there are many relevant topics which are worthy to be discussed. For example, what is the legal basis of this kind of investigation? Is there any inconsistency between its legal basis and other laws? What are the implementations or supporting measures in practice and improvements in the future? Is there any supervision mechanism if the Government abuses its power? How to amend existing legal regulations appropriately to make them more perfect? Topics above are closely related to all society so the author has a high degree of interest and motivation. Hope this thesis will make readers fully understand relevant theory and practice then they may know how to solve problems and make improvements by this article’s suggestion. Whether from the point of view of privacy, human dignity or self-determination of revealing personal information, protection of personal data is always a basic and important issue which shouldn’t be ignored. The private banking account is actually one kind of the most important personal data. The United States (hereinafter also “America”) is the birthplace of the concept of privacy which has developed there for a long time. It is worth researching so the author selects America for comparative analysis task. In order to discuss the judicial practice about private banking account being investigated by the authorities in Taiwan and America, the author sorts out and analyzes relevant regulations and criminal judges of these two countries in recent years. “Computer Processed Personal Information Protection Act Amendments” (later renamed “Personal Information Protection Act”, implemented in October 2012, hereinafter also “New Personal Information Act”) passed by the Legislative Yuan of Taiwan in April 2010 is also within the scope of this article. This article will describe the contents of relevant laws, analyze the differences between old and new regulations and discuss practical approaches and possible directions in the future so this thesis will provide reference for all readers. The Government often needs to retrieve banking account information to fulfill public tasks or fight against financial crimes. Although this is the duty of the authorities, it will result in serious violation of personal information privacy if the authorities make any mistake. In fact, both of relevant theory and practice in our country have some drawbacks and deficiencies at this time. The author looks forward to discussing the doubts of law, examining “New Personal Information Act” and relevant regulations of Taiwan and America and sharing study experience on this issue and a decade of work experience in the financial industry in order to constitute the core of this research. The main purpose of this thesis is to examine the necessity and legality of retrieving banking account information in Taiwan and America by discussing all relevant aspects and legal systems. This article not only describes the authorities’ access to banking account information in the current situation but also analyzes problems, makes suggestions and offers strategies. The author hopes to do his best to make some contribution to the law, financial industry and related public authorities. Through this thesis, readers could observe Taiwan and America’s investigation of private banking account currently and developing directions of relevant regulations and actual situations in the future. Readers could also learn and discuss how the authorities weigh improvement of investigation efficiency and protection of personal financial information privacy. Hope our Government will not only complete investigation quickly and efficiently but also protect personal information privacy legally and reasonably.

In present-day society more and more personal information is being collected. The nature of the collection has also changed: more sensitive and potentially prejudicial information is collected. The advent of computers and the development of new telecommunications technology, linking computers in networks (principally the Internet) and enabling the transfer of information between computer systems, have made information increasingly important, and boosted the collection and use of personal information. The risks inherent in the processing of personal information are that the data may be inaccurate, incomplete or irrelevant, accessed or disclosed without authorisation, used for a purpose other than that for which they were collected, or destroyed. The processing of personal information poses a threat to a person's right to privacy. The right to identity is also infringed when incorrect or misleading information relating to a person is processed. In response to the problem of the invasion of the right to privacy by the processing of personal information, many countries have adopted "data protection" laws. Since the common law in South Africa does not provide adequate protection for personal data, data protection legislation is also required. This study is undertaken from a private law perspective. However, since privacy is also protected as a fundamental right, the influence of constitutional law on data protection is also considered. After analysing different foreign data protection laws and legal instruments, a set of core data protection principles is identified. In addition, certain general legal principles that should form the basis of any statutory data protection legislation in South Africa are proposed. Following an analysis of the theoretical basis for data protection in South African private law, the current position as regards data protection in South-Africa is analysed and measured against the principles identified. The conclusion arrived at is that the current South African acts can all be considered to be steps in the right direction, but not complete solutions. Further legislation incorporating internationally accepted data protection principles is therefore necessary. The elements that should be incorporated in a data protection regime are discussed. / Jurisprudence / LL. D. (Jurisprudence)

雇主在招募過程中，為了提高企業的生產力或行政組織的效率，防免契約、侵權責任的發生，必須謹慎挑選人才，因此通常會以詢問或檢測（如人格測驗）盡量蒐集與求職者相關的資訊，來遴選合適員工。但是，雇主得要求應徵者揭露多少資訊？求職者在雇主的要求下，為了提高獲聘的機會，是否只能拋棄個人的隱私利益？這些疑惑均值得思考，從中也顯現出了雇主與求職者間利益衝突的問題。 關於求職者個人資訊的保障，我國目前的基本規範為「個人資料保護法（簡稱個資法）」及「就業服務法（簡稱就服法）第5條第2項第2款」。雇主如欲蒐集求職者的個資，除必須符合個資法的特定條款外，假若涉及隱私資訊，尚須通過就服法第5條第2項第2款「就業所需」的檢驗。 在這看似簡明的基本架構中，事實上存有許多令人困惑的地方，以個資法特定條款的蒐集事由為例，如：「執行法定職務必要範圍內」的意涵具體所指為何；「與當事人有類似契約之關係」是否包含雇主可請求當事人以外的第三人（如：前雇主）協助為履歷調查；以及「經當事人同意」在勞動關係不對等時其有效性的爭議等。而就服法第5條第2項第2款最讓人頭痛之處則為應如何詮釋「就業所需」。是以，我們須要更多的實務及學說見解來填充個資法與就服法勾勒出的雇主與求職者間利益權衡框架。 本文將先探討雇主通常是基於什麼考量而對求職者為哪些詢問及檢測；而應徵者面對這些詢問及檢測往往會有什麼憂慮。接著借鏡美國法制，剖析我國針對求職者個人資訊保障的判準，並關注在個資法修正與就服法第5條第2項第2款增訂後，過往的實務見解是否依舊恰當或有所革新。最後比較美國與我國法制的異同，提出檢討與建議，期望能在保障求職者個資的同時，也兼顧到雇主的利益。 / In the hiring process, employers need to select workers cautiously in order to improve the productivity and efficiency of their enterprises, and to avoid the potential liability caused by reckless employees. To screen out the best possible candidate for a particular job, employers usually wish to gather as much information about job applicants as possible by making oral or written inquiries, or conducting different kinds of employment tests (such as personality tests). However, what kind of information can employers legally require job applicants to disclose? Do job applicants have no choice but to relinquish their personal privacy if they want to be employed? To answer these questions, we need to carefully balance the competing interests between employers and job applicants. In Taiwan, “Personal Information Protection Act (PIPA)” and “Employment Service Act (ESA) §5II②” form the basic framework of protecting job applicants’ informational privacy. Employers need to obey specific provisions of the PIPA before they can collect job applicants’ information; and if private information is to be collected, employers should further confirm their collecting actions meet the “job-related” requirement specified by §5II② of the ESA. This legal framework seems simple and clear, but there are many questions remain to be answered. For example, what is the exact scope of the term “within the scope of job functions provided by laws and regulations” of the PIPA? Does the condition “quasi-contractual relationship between the Parties” specified in PIPA allow employers to contact third parties (such as job applicants’ former employers) and conduct a reference check? Further, since there is a serious power-imbalanced problem in the employment relationship, can we truly expect the job applicants to offer a free and valid consent when they are requested to provide their personal information? Last but not the least, what is the precise meaning of the term “job-related” of §5II② of the ESA? More studies and court judgments are needed to delineate the boundaries between what employers are entitled to know and what job applicants should be able to keep private. This thesis begins with analyzing why employers need/hope to gather information about job applicants and what screening tools they prefer to use. It then discusses job applicants’ concerns when they face employers’ inquiries or employment tests. By comparing relevant U.S. legislation and judicial decisions regarding the protection of job applicants’ informational privacy, this thesis examines the standards used in Taiwan’s case-law when balancing employers’ and job applicants’ interests. Special attentions are paid to the issue whether these standards are still appropriate or should be updated in light of the latest amendments to the PIPA and ESA. Finally, through concrete cases, this thesis tries to provide practical recommendations on how we can better protect job applicants’ privacy while respecting employers’ legitimate interests in knowing their future employees.