05/09/2026
機會不會等待所有事情都準備完美。上線前都要先聲明法律相關責任，說明我們是很嚴謹態度進行
# 11-ITEM REVIEW
# # A — FREE BETA BLOCKER (6 items)
These share one root cause: the service collects 姓名／Email／手機 and generates behavioural learning records, and the 個資法 §8 notice duty attaches at the moment of collection. They must be resolved before public registration opens.
# # # A-1 · §B chapter — 告知事項 structure
**Current wording:** 「請法務確認本章結構與內容是否符合個人資料保護法關於蒐集個人資料時應告知事項之要求，並補充任何缺漏之法定應告知項目。」
**Actual behaviour:** Registration collects name, email, mobile, password; system generates learning-activity records. Consent checkboxes exist and versioned acceptance is stored.
**Risk:** If a statutory notice element is missing, the notice is defective at the point of collection — the one moment that cannot be retrofitted for users already registered.
**Minimum for Free Beta:** Counsel confirms the B chapter contains every §8 element, in order, with no omissions.
**Professional review:** **Required.** This is the item I would put first.
# # # A-2 · §B2 — 蒐集之特定目的
**Current wording:** six purposes listed, plus explicit non-purposes.
**Actual behaviour:** matches the code exactly — course delivery, hours calculation, completion/certificate, account security, material improvement, service contact. No ad targeting, no profiling, no sale.
**Risk:** Taiwan practice generally expects mapping to 法定特定目的代號. Free-text purposes may be judged insufficient.
**Minimum for Free Beta:** Keep the plain-language purposes; counsel adds the corresponding 特定目的代號.
**Professional review:** **Required** (code assignment is a legal determination I cannot make).
# # # A-3 · §B3 — 個人資料利用之期間
**Current wording:** account lifetime; certificate records until revoked/deleted; login attempts short-term; statutory periods prevail.
**Actual behaviour:** accurate. No automated deletion job exists — retention is "until deleted", which is what the text says.
**Risk:** 利用期間 is a required notice element; "帳號存續期間" may be judged too indefinite.
**Minimum for Free Beta:** Retain current wording, and **do not promise a deletion schedule that no code implements**.
**Professional review:** **Required.**
# # # A-4 · §B5.1 — 國際傳輸 / 利用地區
**Current wording:** 「可能於中華民國境外之伺服器節點進行處理與儲存。」
**Actual behaviour — now verified:** D1 primary region **APAC**, `jurisdiction: null`, read replication disabled; requests served from **NRT (Tokyo)**. So data is stored and processed **outside Taiwan**, in fact rather than in theory.
**Risk:** §21 international-transfer notice. "可能" understates it — transfer is actual and continuous.
**Minimum for Free Beta:** Strengthen to a statement of fact, e.g. 「本服務所使用之雲端基礎設施，其資料儲存與處理節點位於中華民國境外（目前為亞太地區）。」 Do not say "可能" when it is certain.
**Professional review:** **Required.**
# # # A-5 · §B10 — 當事人權利項目
**Current wording:** six rights listed; contact `[email protected]`.
**Actual behaviour:** no self-service deletion UI exists — all requests are handled manually via that mailbox. The mailbox is now real.
**Risk:** Rights list must match §3 exactly; and the manual process must actually be staffed.
**Minimum for Free Beta:** Counsel aligns the enumeration with §3. Operationally, someone must genuinely monitor that inbox.
**Professional review:** **Required.**
# # # A-6 · §B13 — 未成年人
**Current wording:** guardian should review and consent; marked for review.
**Actual behaviour — verified:** **there is no age field, no age gate, and no guardian-consent mechanism anywhere.** A 12-year-old can register today. The course is explicitly written for absolute beginners of any age.
**Risk:** The highest-exposure item. Collecting a minor's name, email and mobile with no guardian consent, while the product is deliberately beginner-friendly, is a foreseeable-audience problem, not a hypothetical one.
**Minimum for Free Beta:** Either (a) a conservative statement that the service is intended for adults and minors must have guardian consent — text only, no enforcement; or (b) counsel sets a minimum age and we add a gate. **(a) is words; (b) is code.** Choose knowingly.
**Professional review:** **Required.**
---
# # B — REVENUE / FEATURE GATE (1 item)
# # # B-1 · §B9 — 公開查驗頁面揭露範圍
**Current wording:** minimum-disclosure principle; no email/mobile; name-display format undecided.
**Actual behaviour:** `/verify/[certificateId]` **does not exist**. `certificates` table is reserved and empty. No certificate has ever been issued.
**Risk:** None today — there is nothing to verify and no page to leak from.
**Classification:** **B — defer.** Becomes **A** the moment the verification page is built or a first certificate is issued.
**Minimum for Free Beta:** No change needed; keep the undecided-format wording rather than promising a format.
**Professional review:** Required **before** the feature ships, not now.
---
# # C — PROFESSIONAL REVIEW RECOMMENDED (4 items)
Not blocking free beta *provided the public wording stays conservative and truthful*.
# # # C-1 · §0 — 營運者揭露方式
**Current wording:** 群創國際汽車租賃有限公司 / 統編 24231760 / 桃園市中壢區九和一街 48 號 2 樓之 32 / `[email protected]`.
**Actual behaviour:** truthful and complete as supplied.
**Risk:** Low for disclosure itself. The genuine question is whether a **car-rental company's registered 營業項目 covers online education / digital content** — a company-registration matter, not a privacy one.
**Minimum for Free Beta:** Display as written.
**Professional review:** Recommended — **legal *and* accounting**, on business scope.
# # # C-2 · §A5 — 證明性質
**Current wording:** four explicit negations (非政府認證／非官方學分／非法定訓練時數／非政府補助認定時數) plus 非專業證照資格.
**Actual behaviour:** no certificate is issued today; issuance code does not exist.
**Risk:** Low now. The wording is already strongly conservative.
**Minimum for Free Beta:** Keep all negations verbatim; do not soften.
**Professional review:** Recommended now, **mandatory before first issuance** (becomes A at that point).
# # # C-3 · §A9 — 免責與責任範圍
**Current wording:** teaching purpose; AI may be wrong; liability excluded to the extent law allows, with a carve-out for non-excludable liability.
**Actual behaviour:** free service, no payment, no professional advice given.
**Risk:** 定型化契約 fairness rules can apply even to free consumer services; over-broad exclusions may be struck and can themselves attract criticism.
**Minimum for Free Beta:** Keep it **narrow** — teaching purpose + verify-AI-output + the statutory carve-out. **Do not expand.**
**Professional review:** **Recommended, highest priority among the C items.** I would not object if counsel reclassifies this as A.
# # # C-4 · §B11 — 處理期間
**Current wording:** 「在合理期間內依申請內容及相關法令處理；如依法須於特定期間內處理，則依該法定期間辦理。」
**Actual behaviour:** manual handling via mailbox; no SLA implemented.
**Risk:** Low — deliberately avoids a fixed contractual promise while deferring to statutory periods.
**Minimum for Free Beta:** As written.
**Professional review:** Recommended — counsel may prefer naming the statutory period explicitly.
---
# # Summary
| Class | Count | Items |
|---|---|---|
| **A — Free Beta blocker** | **6** | B-chapter structure, B2, B3, B5.1, B10, B13 |
| **B — deferred** | **1** | B9 |
| **C — review recommended** | **4** | §0, A5, A9, B11 |
**All 11 `LEGAL REVIEW REQUIRED` markers remain in the document. None removed.**
---
# TAIWAN FREE BETA LAUNCH LEGAL CHECKLIST
*Covers only the current free service. Not a compliance certification.*
| # | Area | Current actual state | Status |
|---|---|---|---|
| 1 | **Operator disclosure** | Name, 統編, address, contact all present and truthful in draft; **not yet published** — `/legal/*` returns 404 in production | ⚠️ ready, unpublished |
| 2 | **Personal-data notice** | Draft B chapter structured to §8; **not published**; production signup currently shows **no notice at all** | 🔴 **blocker** |
| 3 | **Privacy contact** | `[email protected]` set; must be genuinely monitored | ⚠️ needs an owner |
| 4 | **Consent** | Checkboxes + versioned timestamp (`v1.0-2026-09`) built and tested — **but not deployed**; live signup captures no consent | 🔴 **blocker** |
| 5 | **Learning activity tracking** | Activity-based, capped, never page-open time; anonymous excluded from certificate hours; disclosed in B4 | ✅ accurate |
| 6 | **Learning-hours claims** | Explicitly "not equal to time actually spent"; caps disclosed | ✅ conservative |
| 7 | **Certificate claims** | Five explicit negations; **no certificate issued, feature not built** | ✅ safe today |
| 8 | **Cloudflare / international processing** | **Verified: APAC region, Tokyo colo, outside Taiwan.** Draft says 「可能」— understated | 🔴 **strengthen wording** |
| 9 | **LINE external link** | Add-friend link only; click intent logged with no PII; never treated as identity | ✅ accurate |
| 10 | **External AI-tool links** | Links and instructions only; **no server-side AI API call exists**; §B5.3 binds us to update policy before enabling | ✅ accurate |
| 11 | **Minors** | **No age field, no gate, no guardian consent anywhere in code** | 🔴 **blocker — highest exposure** |
| 12 | **Liability wording** | Narrow, with statutory carve-out | ⚠️ counsel review |
---
# # The one thing I'd raise above all others
**Production `/signup` is open right now, collecting personal data, with `/legal/terms` and `/legal/privacy` both returning 404.** Users and sessions are still 0, so no data has been collected — but every item classified **A** above is currently unmitigated on the live site, not merely pending.
The fastest risk reduction is not legal review; it is closing or gating that route until the policy is approved. That remains your call and I have not touched it.
Stopping here. Nothing published, nothing deployed, no migrations, payment unchanged, no AI Tutor.
