Cyber Security Management Act Article 33

In the event that a cyber security incident defined under this Act involves the personal data breach, government agencies and specific non-government agencies shall handle the matter separately in accordance with the Personal Data Protection Act and its related laws and regulations.
中文原文 資通安全管理法第33條
本法所定資通安全事件,涉及個人資料外洩時,公務機關及特定非公務機關應另依個人資料保護法及其相關法令規定辦理。

English translation for reference only; the Chinese text prevails. Not legal advice.