Cyber Security Management Act Article 29

If specific non-government agencies fail to report a cyber security incident in accordance with Paragraph 2, Article 24, the central competent authority in charge of the relevant sector shall impose a fine of not less than NT$300,000 and not more than NT$10,000,000 and shall order correction within a specified period; if correction is not made within the prescribed period, additional fines shall be imposed for each violation.
中文原文 資通安全管理法第29條
特定非公務機關未依第二十四條第二項規定,通報資通安全事件,由中央目的事業主管機關處新臺幣三十萬元以上一千萬元以下罰鍰,並令限期改正;屆期未改正者,按次處罰之。

English translation for reference only; the Chinese text prevails. Not legal advice.