sui generis right

The sui generis right, originating from the EU Database Directive 96/9/EC, is a unique intellectual property right distinct from copyright. Its core purpose is to protect the 'substantial investment'—whether financial, human, or technical—made by a database 'maker' in obtaining, verifying, or presenting the contents. According to Article 7 of the Directive, it grants the maker the power to prevent the 'extraction' and/or 're-utilization' of the whole or a substantial part of the database. In enterprise risk management, it serves as a critical legal tool to mitigate the risk of unauthorized data scraping and exploitation, thereby protecting a company's investment in its data assets. Unlike copyright, which protects originality, this right protects the investment itself, making it applicable even if the database contains non-original public information.

Practical application involves a three-step process. Step 1: Asset Identification. Systematically inventory all corporate databases (e.g., CRM, market intelligence) and assess which ones meet the 'substantial investment' threshold, aligning with ISO/IEC 27001's A.8.1.1 requirement for an asset inventory. Step 2: Evidence Documentation. Meticulously document all resources invested in the database's creation and maintenance, including timesheets, invoices, and process logs, to create a robust evidentiary trail for potential litigation. Step 3: Policy & Control Implementation. Establish clear usage policies and technical controls (e.g., access rights, rate limiting) to prevent unauthorized extraction. A global e-commerce firm successfully used this right to stop competitors from scraping its product pricing database, thereby protecting its competitive advantage and reducing data leakage risks.

Taiwanese enterprises face three primary challenges. First, the lack of a direct domestic legal framework; Taiwan's Copyright Act protects 'compilations' based on creativity, not 'investment' like the sui generis right. The mitigation strategy is to incorporate terms based on the EU Database Directive into contracts for any EU-related business. Second, difficulty in proving 'substantial investment' due to inadequate record-keeping. The solution is to implement project management systems to systematically track and document all associated costs and labor. Third, low internal awareness among management and staff. This can be overcome through targeted training programs that frame databases as valuable IP assets and integrate their protection into corporate governance and risk management policies. A priority action is to review and amend EU-related data contracts within 90 days.

Winners Consulting specializes in sui generis right for Taiwan enterprises, delivering compliant management systems within 90 days. Free consultation: https://winners.com.tw/contact