2009年銀行保險（Bancassurance）已經成為我國壽險業第一大通路，而新通過之個人資料保護法勢必對銀行保險業務帶來衝擊。本文以三方及二方銀行保險業務架構為基礎，再以銀行保險實務上四類個人資料傳遞模式，分析銀行與保險招攬涉及有關蒐集、傳遞與利用客戶個人資料適法性分析。本文發現，除轉介蒐集模式適法性較無疑義之外，其餘各種模式均有依據新法規定調整之必要，另建議主管機關得採同意銀行直接兼營保險經紀人或代理人業務方式，以降低法律遵循成本。

Bancassurance had become the largest channel of life insurance market in Taiwan since 2009. Obviously, it will face a critical challenge and legal compliance risk after the implementation of Personal Information Protection Act (PIPA). Based on two type operational structures of Bancassurance, this paper focuses on the legal issues of the personal information collecting, transferring, and using between the bank and insurance companies and intermediaries. We find that referral collecting model is the best one to fit the new norm, and this paper suggest the supervisory entity should allow banks can directly solicit insurance policies to reduce legal compliance risk.