Taiwan Bans Civil Servants From Taking Regular Devices to China, Hong Kong, Macau - Vision Times
To prevent the theft of classified information while government officials are abroad, Taiwan’s Ministry of Digital Development has stipulated that all personnel involved in national security or matters of. . .
To prevent the theft of classified information while government officials are abroad, Taiwan’s Ministry of Digital Development has stipulated that all personnel involved in national security or matters of major national interest—or those carrying highly sensitive data—must not bring their regularly used official devices or personal devices containing official data when traveling to regions with high cybersecurity risks, such as China, Hong Kong, and Macau. Ensure device security before traveling abroadAccording to a report by theCentral News Agency, the Cybersecurity Bureau of Taiwan’s Ministry of Digital Development held a press conference on Tuesday, Aug. 11. Bureau Director Tsai Fu-lung stated that data confidentiality and information security have become critical issues to address during overseas travel, with key protective measures including data encryption, secure communication channels, and device security. Consequently, the Cybersecurity Bureau has formulated the “Guidelines for the Management of Information and Communication Equipment for Official Overseas Travel. ” These measures apply not only to government agencies but can also serve as a reference for businesses organizing official overseas trips. Chiu Chun-wei, head of the Regulations and International Cooperation Division at the Cybersecurity Agency, noted that these guidelines were published on July 1 and apply to government agencies at all levels nationwide. Their primary purpose is to prevent the theft, tampering, damage, loss, or leakage of confidential data while civil servants are abroad. The guidelines are divided into “General Management Measures” and “Advanced Management Measures” based on the individual’s status and the cybersecurity risks of the destination. Qiu Junwei noted that before traveling abroad on official business, personnel from central and local government agencies should first ensure their devices are secure by completing the security configurations required by the government or their respective agencies. This includes verifying that official computers and mobile phones have only the necessary software installed, updating operating systems and antivirus software to the latest versions, disabling vulnerable features in email clients, and backing up important official data in advance. He pointed out that to prevent data leaks or cyberattacks, personnel should avoid using public Wi-Fi while abroad and must prioritize using carrier roaming or trusted SIM cards or eSIM services. When transmitting official data, use official email accounts and encrypt the data before sending if necessary. In addition, official devices must be kept secure. If a device is suspected of being compromised, lost, or stolen, immediately notify your agency and take follow-up measures in accordance with regulations. SIGN UP FOR OUR FREE NEWSLETTERFor the best of our weekly content！There is something wrong, please try again laterSuccessYou are now signed up for our newsletterSuccessCheck your email to complete sign upAs for how to handle devices upon returning to the country, Qiu Junwei stated that to minimize cybersecurity risks, official devices should be handed over to the agency’s IT staff for a security check upon return. If necessary, relevant records should be retained and data on the devices should be wiped; continued use should only resume after confirming there are no security issues. Prohibition on carrying regular devices to high-risk areasChiu Chun-wei explained that individuals classified as “key personnel” include government officials and their secretaries, as well as those involved in national security or matters of major national interest, those carrying highly sensitive data, or those with access privileges. If such personnel travel to regions with high cybersecurity risks, in addition to general management measures, they must also follow advanced management measures, “including not carrying their usual official devices or personal devices containing official data, and instead using temporary devices provided by their agency that have been reset to factory settings. ”He pointed out that before traveling abroad, personnel should set up separate temporary email accounts and accounts for communication software with end-to-end encryption, which must be deleted immediately upon returning to the country. Mobile phones must remain turned off or in airplane mode, and connections to USB devices of unknown origin should be avoided. Upon returning, devices must first undergo a cybersecurity inspection and be restored to factory settings; they may only be used again after it has been confirmed that they are secure, thereby reducing the risk of cyberattacks or data leaks that may occur in high-risk areas. China, Hong Kong, and Macau designated as high-risk areasTsai Fu-lung statedthat high-risk areas include China, Hong Kong, and Macau. These guidelines constitute administrative regulations and do not specify penalties; if civil servants violate the relevant provisions, their respective agencies will handle the matter in accordance with the Cybersecurity Act. The Cybersecurity Agency emphasized that, given the continuing rise in global cybersecurity threats, civil servants’ overseas travel is now regarded as a critical component of the government’s cybersecurity defenses. Moving forward, the agency will continue to assist central and local government agencies in implementing management measures for information and communication technology (ICT) equipment used during official overseas travel. Through institutionalized management, device security inspections, and enhanced cybersecurity awareness, the agency aims to strengthen the government’s overall cybersecurity defenses. READ MORE:Taiwan Audit Warns Chinese-Made ICT Equipment Is Bypassing Procurement RulesAI Agents Launch Unprecedented Autonomous Cyberattack on Taiwan, Report Says726 cybersecurity incidents reported in 2025In recent years, the level of cybersecurity risk faced by Taiwan’s government agencies and civil servants has remained at a high alert level. According to statisticsfrom the Cybersecurity Agency under the Ministry of Digital Development, government agencies report hundreds of cybersecurity incidents annually; for example, there were 726 incidents in 2025. Attack methods are becoming increasingly sophisticated, encompassing diverse threats such as unauthorized intrusions, malicious social engineering, and vulnerabilities in edge devices. A Central News Agencyreportnoted that the Cybersecurity Bureau of the Ministry of Digital Development announced in May of this year that government agencies reported a total of 726 cybersecurity incidents in 2025 (excluding live drills). Among these, Level 1 incidents accounted for the largest share at 87. 33 percent, followed by Level 2 at 9. 78 percent, Level 3 at 2. 89 percent, and no Level 4 incidents occurred. Major cybersecurity risks and threat types include unauthorized intrusions, which account for nearly 70 percent; attackers often conduct reconnaissance through system vulnerabilities or improper configuration settings. Other threats, such as social engineering and spoofed software, involve intruders impersonating popular instant messaging apps, administrative litigation notices, or widely used software to distribute malware. Regarding cross-border and overseas risks, civil servants traveling to high-risk regions such as mainland China, Hong Kong, and Macau face the potential risk of having their devices confiscated or infected with malware. Additionally, government departments are grappling with a shortage and attrition of specialized cybersecurity personnel, making it difficult at times to keep pace with rapidly evolving hacker attacks.