Positioning of this centre
The Uedu platform is deployed across many universities and colleges in Taiwan, accumulating interaction data between teachers/students and generative AI, learning behaviour records, and physiological sensing and in-depth interview data collected with the individual consent of data subjects. Before entering into cooperation with overseas research institutions, establishing public, structured and externally reviewable governance documents is the platform's fundamental commitment to research ethics and data protection.
This framework centre adopts the stricter of the GDPR and Taiwan’s Personal Data Protection Act as its design baseline, and extends this approach to jurisdictions of collaborators such as Switzerland’s nFADP and Singapore’s PDPA. All documents are described in the present tense, referring only to mechanisms currently implemented; planned items not yet implemented are not included in this framework centre.
Document list
Governance Foundations
| Document | Content summary | Version |
|---|---|---|
| 資料治理框架 | 治理原則、角色、適用法律與資料分類 | v1.0 |
| IRB 倫理審查通過摘要 | NTU REC 202507EM058 結構化揭露 | v1.0 |
| 服務條款 | 適用範圍、帳號、使用者內容授權、通知—取下、免責；附錄 A：UeduHub 教學資源投稿條款 | v1.0 |
Operational Policies
| Document | Content summary | Version |
|---|---|---|
| 隱私與資料保存政策 | 蒐集項目、保存期限、刪除程序、資料主體權利 | v1.1 |
| 次處理者清單 | 基礎設施、LLM、認證、Email、DNS 等供應商揭露 | v1.0 |
Collaboration Frameworks
| Document | Content summary | Version |
|---|---|---|
| 研究者授權範本 | 三層存取、保密、發表審閱、終止條件 | v1.0 |
| 定型化契約公開版 | 教師端四份同意書全文、版本與生效日，以及系統如何執行這些條文 | v1.2 |
| 研究結案資料處理說明 | 匯出資料生命週期、銷毀聲明機制、平台側保存策略、結案佐證文件 | v1.0 |
Cross-Jurisdiction
| Document | Content summary | Version |
|---|---|---|
| 跨法域合規對照表 | TW PDPA、GDPR/CH、SG PDPA、JP/KR/UK 對照 | v1.0 |
| 台灣個資法（PDPA）對應說明 | Core requirements of that jurisdiction, Uedu's corresponding approach, cross-border transfer mechanism, and the route for exercising data subject rights | — |
| EU GDPR 與瑞士 nFADP 對應說明 | Core requirements of that jurisdiction, Uedu's corresponding approach, cross-border transfer mechanism, and the route for exercising data subject rights | — |
| 新加坡 PDPA 對應說明 | Core requirements of that jurisdiction, Uedu's corresponding approach, cross-border transfer mechanism, and the route for exercising data subject rights | — |
A tool for partner organisations
This centre collects governance documents of Uedu platform itself. If partner institutions need to establish their own generative AI usage guidelines, they may use the AI usage policy generator — first complete a governance maturity self-assessment (five dimensions, fixed scoring), then generate a chapter-by-chapter draft policy according to the unit’s context, including a classifiable AI usage tier and disclosure mechanism.
This generator is a tool, not a governance document; its output is a draft and may only be implemented after passing the reviewing unit's own approval process, and it differs in authoritative status from this centre's documents.
Contact person
| Data Controller | Chia-Kai Chang, PhD, operates Uedu in his personal capacity as the platform owner and developer. |
|---|---|
| Privacy Contact | [email protected] |
| Academic Collaboration (Academic Collaboration) | [email protected] |
| IRB Case Number | NTU REC 202507EM058 (approval date: 2026-04-10) |
Initial launch of this framework centre: 2026-05-11 · Effective Date for all documents: 2026-04-10 (aligned with the IRB approval date) · Legal Review Status: Self-authored by Platform Owner; partner institutions may use these documents as a starting point for discussion when carrying out their own legal assessment.