Information privacy is one of the important rights in modern people's lives, and the level of understanding regarding information privacy in the Personal Data Protection Act (hereinafter referred to as the PDPA) by students at the higher education stage (that is, at the university level or above) is the basis for exercising the right. To explore students' understanding of the PDPA, the researcher distributed the ＂PDPA situational-case questionnaire,＂ and collected responses from 745 students. Results of the analysis stated that, firstly, the students have a high level of understanding in terms of ＂notification obligation＂. Secondly, students possess a moderate understanding of the definition of government agency and the liability of the commissioning agency for damages. Lastly, students have a low level understanding in the following concepts: 1. the personal data of the deceased are not protected by the PDPA; 2. Definition of personal data; 3. Notification of collection matters; 4. Collection of special personal data; 5. The condition for a non-government agency shall be liable for the damages; 6. Two situations where the PDPA is not applicable. In addition, students have a low or moderate understanding of the collection, processing and use of general personal data, depending on the actual situation. Results of the study can be used as a reference for colleges and universities in the development of PDPA courses.