Cyber Security Management Act Article 28

Personnel of government agencies who fail to perform duties in accordance with the provisions of this Act shall be subject to disciplinary sanctions or disciplinary actions in accordance with relevant regulations, depending on the severity of the case.The rules for the disciplinary actions provided in the preceding paragraph shall be prescribed by the competent authority.Personnel of specific non-government agencies who fail to perform duties in accordance with the provisions of this Act, and where the circumstances are significant, shall be subject to disciplinary action by the specific non-government agency in accordance with relevant regulations.
中文原文 資通安全管理法第28條
公務機關所屬人員未依本法規定辦理者,應按其情節輕重,依相關規定予以懲戒或懲處。
前項懲處事項之辦法,由主管機關定之。
特定非公務機關所屬人員未依本法規定辦理,情節重大者,由特定非公務機關依規定予以懲處。

English translation for reference only; the Chinese text prevails. Not legal advice.