Compliance GuideJuly 14, 2026

Is AI Outbound Calling Legal in Taiwan? PDPA, Recording & Debt-Collection Rules

Pathors Team

Pathors Team

Pathors Technology

Is AI Outbound Calling Legal in Taiwan? PDPA, Recording & Debt-Collection Rules

"Is it actually legal to call customers with AI in Taiwan?" It's the first — and most important — question every company evaluating AI outbound calling should ask. With phone scams rampant in Taiwan, customers are already wary of "robot calls."

The good news: AI outbound calling itself is fully legal. What matters isn't whether you use AI, but how you source your lists, how you disclose, how you record, and which lines you respect in sensitive scenarios like debt collection. This guide walks through the compliance essentials under current Taiwan law.

Note: This article is general information, not legal advice. Consult your legal counsel before deployment.

1. The bottom line: legal — the red lines are data and disclosure

There is no special law banning AI outbound calling in Taiwan; it's governed by existing regulations. What's illegal is never "using AI to call," but using personal data without a lawful basis or causing harassment. Get three things right and you're on the compliant side: lawful lists, transparent calls, scenario rules.

2. Which laws apply? The regulator map

AreaRegulatorLegal basisKey point
Data & marketingPersonal Data Protection Commission (forming) / competent authoritiesPDPA Art. 19, 20Lists need a specified purpose; marketing can be refused
Call recordingCriminal immunity (judiciary)Communication Protection Act Art. 29One-party consent, no unlawful purpose
Sales scriptsFair Trade CommissionFair Trade Act Art. 25No deception or grossly unfair conduct
Debt collectionFinancial Supervisory CommissionBanking Act Art. 45-1; Outsourcing Rules Art. 14Hours, frequency and targets restricted

3. PDPA: where lists come from, and marketing

Your first concern is the list — and a list is personal data.

  • Collection & use (Art. 19): requires a "specified purpose" and lawful basis — consent, a contractual relationship, or a lawful public source.
  • Marketing can be refused (Art. 20): individuals may refuse at any time, and you must stop immediately.
  • First contact: you must offer a free, easy way to refuse (e.g. a toll-free line), at your cost.
  • Do-not-call list: record and update refusals, and notify all staff and contractors to stop.
  • Violating Art. 20(2)(3) can draw an order to correct; failure to do so is fined NT$20,000–200,000 per violation.

    Regulatory update: In November 2025, partial amendments to the PDPA were promulgated (effective date to be set by the Executive Yuan). Enforcement over non-government entities will transfer from the competent authorities to the Personal Data Protection Commission over a phase-in period.

    4. Call recording: Taiwan is one-party consent

    AI calls are almost always recorded — and that's legal here. Under Communication Protection Act Art. 29, a party to the communication recording without unlawful purpose is not penalized. Your AI is a party to the call, so one-party consent is enough — no per-call consent needed.

    Two limits: no unlawful purpose (humiliation, threats, extortion), which risks Criminal Code Art. 315-1; and for transparency, disclose "this call will be recorded" at the opening.

    5. Fair Trade Act Art. 25: which scripts are "improper"

    Even with lawful lists and recording, the script itself is regulated. Art. 25 prohibits "deceptive or obviously unfair conduct capable of affecting trading order." AI outbound scripts must avoid:

  • Exaggerated guarantees ("guaranteed loan approval," "you've definitely won")
  • Hiding identity or impersonating officials or banks
  • Undue urgency (time-pressure or intimidation)
  • 6. Cross-border transfer: is your AI sending calls overseas?

    Many voice AIs send audio to overseas clouds or model providers. Under the PDPA, cross-border transfer of personal data may be restricted in certain cases. Before deploying, confirm data flow, storage location, vendor contracts and encryption — and consider on-premise or in-country deployment where needed.

    7. Extra rules for debt collection

    If AI outbound is used for financial debt collection, the rules are stricter. Under Art. 14 of the financial outsourcing rules:

  • Hours: generally 7:00–22:00 only (unless the debtor consents); calling outside that window without consent is harassment.
  • Frequency: no explicit cap, but repeated intensive dialing over a short period, or contact after a clear stop request may be "continued harassment."
  • Targets: only the debtor and guarantor; contacting a third party only to obtain the debtor's contact info requires stating identity and purpose, and must not disclose the debt.
  • These rules are exactly where AI excels — hours, frequency and targets can be hard-coded into the system, safer than manual dialing.

    8. Pre-launch compliance checklist

  • Lists have a lawful source and consent/purpose records
  • Marketing scripts state the company name + a free opt-out
  • Do-not-call mechanism integrated, stops across all channels
  • Recording disclosure included in the opening
  • No exaggerated guarantees, no impersonation
  • Data flow and cross-border contracts confirmed
  • Debt collection: 7:00–22:00 only, frequency controlled, debtor/guarantor only
  • Real company caller ID, human handoff available
  • In Taiwan, AI outbound calling isn't a question of "can you" — it's whether compliance is built into the system. That's how Pathors is designed: real company caller ID, recording disclosure at the opening, automatic do-not-call write-back with all-channel suppression, and time/frequency limits for collection scenarios — all configurable in the flow, so every call starts on the compliant side.

    To learn how to evaluate an AI outbound system, read How to Choose an AI Auto-Outbound System: 5 Key Criteria.

    Frequently Asked Questions

    Is AI outbound calling legal in Taiwan?

    Yes. No special law bans it; what matters is whether your data use and disclosure are compliant — lawful lists, refusable marketing, and lawful recording and scripts.

    Do I need prior consent to make AI marketing calls?

    Lists need a specified purpose and lawful basis; first contact must offer a free opt-out, and you must stop immediately once someone refuses (PDPA Art. 20).

    Do I have to tell people AI calls are being recorded?

    Under Communication Protection Act Art. 29, the AI is a party to the call, so one-party consent is legal and per-call notice isn't mandatory — but disclosing it up front is recommended for trust.

    Is it legal if the AI sends calls to an overseas provider?

    Under the PDPA, cross-border transfer of personal data may be restricted in certain cases. Before deploying, confirm the data flow, storage location, vendor contracts and encryption — and consider on-premise or in-country deployment where needed.

    Can I use AI outbound for debt collection, and when?

    Yes, but financial collection is more tightly regulated: 7:00–22:00 only (unless the debtor consents), controlled frequency, debtor and guarantor only, and no disclosure of the debt to third parties.


    Pathors Team

    Pathors Team

    Pathors Technology

    Passionate about leveraging AI technology to transform customer service and business operations.

    Read More Articles

    Ready to Transform Your Call Center?

    Schedule a personalized demo and see how Pathors can revolutionize your customer service

    🚀
    Pathors

    Pathors empowers businesses with intelligent voice assistant solutions, streamlining customer service, appointment management, and business consulting to enhance operational efficiency.

    02-7751-8783

    Backed by leading accelerators & programs

    AppWorksNTU GarageGarage+NVIDIA InceptionFITI

    Resources

    Industries We Serve

    © 2026 Pathors Technology Co., Ltd. All rights reserved.
    派斯科技股份有限公司 | 統一編號:60410453