不同倡議，相似資訊問題

近期報導、盡職調查、企業治理與數位制度的多項倡議看似分散，卻都開始關注資訊能否長期保持可用。 本期的共同訊號，是監理、互通、盡職調查、公司治理與目標設定不再只問應揭露什麼，也開始追問資訊如何辨識、形成、維護、分享與取得信任。制度摩擦因此從標準條文差異，移到資料在多個決策環境中能否保持來源與用途。 本期 Signal 將 不同倡議由揭露內容轉向資訊形成與治理 視為多個制度行動逐步收斂的方向，而不是任何一個機構已宣布的共同計畫。各訊號的法律地位、發布時間與適用對象仍須分列，交叉閱讀只能支持方向判斷，不能把相似語言改寫成統一義務。 為使摘要能直接支援決策，本段同時回答五個問題：已發生什麼、由哪一第一方紀錄支持、影響透過什麼機制傳導、目前仍缺少哪些結果證據，以及下一個可推翻或強化判斷的檢查點。任何未被來源明示的因果關係都保留為編輯推論，不以肯定語氣包裝。

Recent initiatives in reporting, due diligence, governance and digital systems appear separate but increasingly focus on whether information can remain usable over time. The common signal is that enforcement, interoperability, due diligence, corporate governance and target setting no longer ask only what should be disclosed. They increasingly ask how information is identified, formed, maintained, shared and trusted. Institutional friction therefore moves from differences in standards to whether data retain provenance and purpose across decision environments. This Signal treats the movement of different initiatives from disclosure content to information formation and governance as a direction emerging across institutional actions, not as a joint programme announced by any one authority. Legal status, publication date and population remain source-specific. Cross-reading supports a directional judgement only; similar language must not be converted into a single obligation. To make the lead decision-ready, it answers five questions together: what has occurred, which first-party record supports it, through what mechanism the effect may travel, which outcome evidence is still missing, and what next observation could strengthen or overturn the judgement. Any causal relationship not stated by the source remains an editorial inference and is not converted into a factual claim through confident wording.

ESMA、IFRS Foundation 與 GRI、歐盟企業永續盡職調查、CDP 及 SBTN 分別從監理、互通、風險、治理與目標設定處理資訊。 ESMA 關注企業報導執法，IFRS 與 GRI 處理互補，歐盟盡職調查連接價值鏈風險，CDP 與 SBTN 則涉及治理及優先順序。各倡議使用不同證據，但都需要知道資料由誰產生、涵蓋哪一活動、如何更新，以及是否足以支援其特定判斷。 訊號收斂的判斷基礎不是關鍵字相似，而是不同制度是否開始要求相近的資料身分、來源、方法、責任、控制與版本能力。每筆來源仍保留自己的治理權限與時間點，避免把跨機構比較誤讀成制度合併。 時間與權限也必須分開記錄：公告日不等於生效日，試點不等於普遍採用，技術規格不等於法律義務，企業自願導入也不等於監理核准。把這些節點放在同一時間軸，才能判斷一項制度變動何時真正進入資料、合約、投資或揭露流程。

ESMA, the IFRS Foundation and GRI, EU due diligence, CDP and SBTN approach information through regulation, interoperability, risk, governance and target setting. ESMA addresses enforcement of corporate reporting, IFRS and GRI address complementarity, EU due diligence connects value-chain risk, and CDP and SBTN address governance and prioritisation. They use different evidence but each needs to know who produced data, which activity it covers, how it changes and whether it supports the specified judgement. Convergence is not established by repeated vocabulary. It is established when independent institutions begin to require comparable capabilities around identity, origin, method, accountability, control and version. Every source retains its own authority and time reference so that comparison does not become a claim of institutional merger. Time and authority must also be separated. An announcement date is not an effective date; a pilot is not general adoption; a technical specification is not a legal obligation; and voluntary enterprise use is not regulatory approval. Putting these events on one timeline shows when an institutional development actually enters data, contract, investment or disclosure processes and which actor is authorised to make that transition.

問題已不只是哪一項內容應被揭露，而是風險如何辨識、優先順序如何形成、資料如何持續追溯、比較並支援決策。 資訊問題在組織內常被分割：法務保存義務、永續團隊管理指標、採購取得供應商聲明、資訊部門管理存取。當相同資料跨部門移動，權威、版本與同意可能消失；結果是下游看見一致格式，卻無法判斷風險辨識與優先順序如何形成。 上游證據若沒有穩定識別、形成時間、適用邊界與版本，最終輸出即使格式一致，覆核者仍可能無法重建形成過程。真正風險不是單一欄位缺失，而是錯誤主體、過期方法、推定關係或未核准版本在傳遞中被當成確定事實。 具體失效模式至少包括主體配對錯誤、資料人口不完整、邊界前後不一致、方法或係數未版本化、例外未留下理由、核准與發布時間倒置，以及下游重用時脫離原用途。每一種失效都可能讓合理的單筆資料，在彙總後形成無法防禦的結論。

The question is no longer only what to disclose, but how risks are identified, priorities set, and information kept traceable, comparable and decision-useful. Inside organisations, information is often divided: legal teams hold obligations, sustainability teams manage metrics, procurement obtains supplier declarations and IT controls access. As data cross departments, authority, version and consent can disappear. The downstream user sees consistent format but cannot reconstruct how risk identification or prioritisation was formed. When upstream evidence lacks stable identity, formation time, applicable boundary and version, a standardised output may still be impossible to reconstruct. The material risk is not one missing field. It is the silent conversion of the wrong entity, an expired method, an inferred relationship or an unapproved version into an apparent fact as information moves downstream. Concrete failure modes include incorrect entity matching, an incomplete data population, inconsistent boundaries, unversioned methods or factors, exceptions without rationale, approval occurring after publication, and downstream reuse outside the original purpose. Each failure can turn a reasonable individual record into a conclusion that cannot be defended after aggregation, comparison or machine-assisted interpretation.

制度需要把資訊形成、維護、分享與信任的流程納入治理，並建立可追溯、互通、連續、可比較、可用與可治理的條件。 企業需要 information formation record，將需求、來源、方法、責任、核准、分享權限、使用決策與更新狀態連在一起。資料被用於新的框架、客戶或監理用途時，先進行 purpose and boundary check，再決定可重用、需補充或必須重新形成。 可執行的控制單位應是受治理的證據物件：每項重要主張連接原始來源、計算或判斷方法、組織與時間邊界、責任人、控制狀態、例外、核准及版本。當任何元件改變時，系統保存差異與影響範圍，不以覆寫舊檔取代變更紀錄。 營運上可建立最小控制集：主張登錄、證據擁有人、來源快照、方法識別、適用期間、控制頻率、例外門檻、覆核與核准，以及允許的下游用途。高判斷或高財務影響項目採更嚴格的覆核層級；低風險資料則以自動化完整性檢查降低重工。

Governance needs to cover information formation, maintenance, sharing and trust through traceability, interoperability, continuity, comparability, usability and control. An information formation record connects requirement, source, method, owner, approval, sharing permission, decision use and update state. When data are proposed for a new framework, customer or regulatory purpose, a purpose and boundary check determines whether reuse is valid, supplementation is required or new formation is necessary. The implementable control unit is a governed evidence object. Each material claim links to its primary source, calculation or judgement method, organisational and temporal boundary, accountable owner, control state, exception, approval and version. When any component changes, the system preserves the difference and affected uses instead of overwriting the earlier basis. A minimum operating control set includes a claim register, evidence owner, source snapshot, method identity, valid period, control frequency, exception threshold, review, approval and permitted downstream use. High-judgement or high-financial-impact items receive a stronger review tier. Lower-risk records use automated completeness and consistency checks so that governance effort is concentrated where a wrong claim would change a decision.

本期彙整 ESRS 技術意見、IFRS 與 GRI 互通出版、CSDDD 執行指引諮詢、CDP 治理觀察及 SBTN 優先順序討論。 本期彙整能支持多項倡議正在重視實作與資訊治理，不能證明所有機構採用相同流程。SNN 所稱共同資訊問題，是對跨制度摩擦的分析，並不把執法、盡職調查、目標設定或公司治理視為可互換的制度。 證據判讀採來源對照而非票數累加。多筆文件若都引用同一基礎資料，仍只構成一條證據路徑；不同機構出現相近要求，則可提高方向性訊號，但不能證明執行成效、法律等同性或所有市場已同步成熟。 每一項關鍵句都應進入 claim ledger，標示其為官方事實、直接量測、估算、企業承諾、已交付結果或 SNN 編輯推論，並記錄來源所能支持的精確範圍。若兩筆來源衝突，保留衝突與處理理由；若資料尚未出現，明確標成待驗證，而不是以相近案例補成確定答案。

The edition reviews ESRS technical advice, IFRS-GRI interoperability, the CSDDD implementation consultation, CDP governance observations and SBTN prioritization. The publications support the observation that multiple initiatives are focusing on implementation and information governance. They do not establish one common process. SNN's shared information problem is an analysis of cross-regime friction and does not treat enforcement, due diligence, target setting and corporate governance as interchangeable institutions. Evidence is assessed through source comparison rather than a simple source count. Documents that repeat one underlying dataset remain one evidential path. Similar requirements from independent institutions can strengthen a directional signal, but they do not prove implementation results, legal equivalence or equal market maturity. Every material sentence should enter a claim ledger and be classified as official fact, direct measurement, estimate, corporate commitment, delivered outcome or SNN editorial inference. The ledger records the precise scope that each source supports. Conflicting evidence is retained with the resolution rationale; absent evidence is marked pending rather than filled with a convenient analogue from another entity, period or jurisdiction.

跨制度重點正由減少標準差異，轉向降低標準之間的資訊摩擦。這會改變企業投資資料與流程的方式。 當資訊形成過程可被看見，決策者不只取得數字，也能理解優先順序、例外與不確定性。這讓企業把資料投資從報告專案轉成可重用的營運能力，也讓監管或客戶要求改變時，可以辨識哪些證據受影響，而不是重新蒐集全部資料。 這種資訊密度的目的不是增加篇幅，而是縮短主張到決策之間的查核距離。董事會、投資人、監理者與營運團隊應能辨識哪些內容是事實、估算、承諾、進度或結果，並在情境改變時更新判斷，而不是重新尋找散落的檔案與口頭說明。 責任分工因此必須落到決策權：資料擁有人維護來源，方法擁有人控制計算，業務單位說明使用情境，內控或確信人員測試可重建性，核准者承擔最終採用責任。例外若沒有到期日、補救人與影響範圍，就會從暫時處置變成永久的證據債務。

The cross-system priority is moving from reducing differences among standards toward reducing information friction between them. When formation is visible, a decision-maker receives not only a number but also priority, exception and uncertainty. Data investment becomes reusable operating capability rather than a reporting project, and a changed regulator or customer requirement can identify affected evidence without recollecting the entire dataset. The purpose of this information density is not length for its own sake. It is to shorten the verification distance between claim and decision. Boards, investors, regulators and operational teams should be able to distinguish fact, estimate, commitment, progress and outcome, then update the judgement when conditions change without reconstructing the case from scattered files and oral explanation. Accountability therefore attaches to decision rights. The data owner maintains the source, the method owner controls calculation, the business function defines the use case, internal control or assurance tests reproducibility, and the approver accepts responsibility for final use. An exception without an expiry date, remediation owner and impact scope stops being temporary treatment and becomes persistent evidence debt.

SNN 編輯分析：歐盟盡職調查、數位產品資料與公司治理倡議的共同壓力，會落到台灣電子、紡織、機械與消費品供應鏈。企業若只在揭露端整理資訊，將無法說明資料如何形成、由誰維護、經何種授權分享；台灣產業應把這些條件內建於採購、生產、品質與客戶交付流程。 台灣電子、紡織、機械與消費品供應鏈面對歐盟盡職調查、數位產品及客戶治理要求時，應把供應商身分、同意、風險判斷、稽核、改善與資料分享連起來。企業不能只在揭露端整理；來源若未在採購與生產形成，後續英文報告再完整也無法補足責任鏈。 對台灣市場的意義應沿實際傳導路徑判斷：國際制度或客戶要求先進入融資、採購、合約、供應商資料與確信流程，再影響台灣企業的系統與控制。這不等於外國規則自動成為台灣法律義務；本地企業要做的是辨識適用情境、保留跨語言對應並建立可授權覆核的證據鏈。 台灣企業可把傳導測試落在具體物件：公司與法律主體、廠區、產品、批次、供應商、合約、融資工具及揭露欄位。中英文名稱、內外部分類與不同框架之間應連到同一主張識別，同時保留商業機密、個資與權限邊界，避免可追溯被誤解為全面公開。

SNN editorial analysis: EU due-diligence, digital-product-data and corporate-governance initiatives create a shared pressure on Taiwan electronics, textile, machinery and consumer-goods supply chains. Companies need provenance, maintenance responsibility and permissions embedded in procurement, production, quality and customer-delivery workflows rather than assembled only at disclosure. Taiwan electronics, textile, machinery and consumer-goods supply chains facing EU due diligence, digital-product and customer-governance requests should connect supplier identity, consent, risk judgement, audit, remediation and data sharing. Evidence absent from procurement and production cannot be recreated by a complete English report at the disclosure endpoint. For Taiwan, relevance should be traced through an actual transmission path. An international rule or customer requirement first enters finance, procurement, contract, supplier-data and assurance processes, then changes local systems and controls. It does not automatically become Taiwan law. Companies need to identify the applicable scenario, preserve bilingual mappings and make the evidence chain reviewable under controlled access. Taiwan companies can perform the transmission test on concrete objects: the company and legal entity, facility, product, batch, supplier, contract, financing instrument and disclosure field. Chinese and English names, internal and external classifications and different reporting frameworks should resolve to the same claim identity. Traceability must still preserve commercial confidentiality, personal data and access boundaries; it does not require unrestricted publication.

未來應追蹤盡職調查數位工具、第三方驗證與跨標準資訊共享是否形成可重複實作。 後續應追蹤數位盡職調查工具、第三方驗證與資料共享是否保存目的及權限。低後悔行動是抽查一項跨三個部門使用的資料，重建其產生、轉換、核准與分享，並修復任何無法說明用途或版本的節點。 後續追蹤應分開最終文件、技術指引、採用範圍、執行控制、監督活動與可觀察結果。現階段的低後悔行動，是挑選一項高風險主張做端到端重建測試，記錄缺少的身分、來源、方法、責任與版本；這是治理準備，不是合規保證或結果預測。 監測不只依日曆，而應由事件觸發：最終規則發布、技術指引變更、適用範圍擴大、主管機關執法、企業採用數據或實際成果出現時，都建立新版本並重評原判斷。舊結論不刪除，而是標示當時依據、被何種新證據修正，以及哪些決策需要重新檢視。

Future implementation should be evaluated through due-diligence tools, third-party verification and repeatable information sharing across standards. Future evidence should test whether digital due-diligence tools, third-party verification and data sharing preserve purpose and permission. A low-regret action is to sample one item used by three departments, reconstruct its production, transformation, approval and sharing, and repair any node unable to explain purpose or version. Future monitoring should separate final text, technical guidance, adoption scope, operating controls, supervision and observable outcomes. A low-regret step is to select one high-risk claim for an end-to-end reconstruction test and record missing identity, source, method, accountability and version. That is governance preparation, not a compliance guarantee or forecast of results. Monitoring should be event-triggered as well as calendar-based. A final rule, amended technical guidance, expanded scope, supervisory action, adoption data or observed outcome creates a new version and a reassessment of the earlier judgement. The prior conclusion is not erased. It retains its original basis, identifies the new evidence that changed it and states which decisions or downstream uses now require review.