Personal Data Protection Act Article 21-4

Where a government agency violates the PDPA, the competent authority shall order it to rectify the violation within a specified time limit. The government agency shall make appropriate rectification within the time limit and shall respond in writing to the competent authority regarding the status of the rectification.Where a government agency fails to rectify the violation as required under the preceding paragraph, the competent authority may publicize its name and the facts of its violation.Where personnel of a government agency fail to act in accordance with the PDPA, they shall be subject to disciplinary sanction, action, or punishment in accordance with relevant laws and regulations, depending on the severity of the violation.
中文原文 個人資料保護法第21-4條
公務機關有違反本法規定之情事者,由主管機關令其限期改正,該公務機關應依限為適當之改正,並應將改正情形以書面答覆主管機關。
公務機關未依前項規定改正者,主管機關得公布其名稱及其違法情形。
公務機關所屬人員未依本法規定辦理者,應按其情節輕重,依相關法令規定予以懲戒、懲處或懲罰。

English translation for reference only; the Chinese text prevails. Not legal advice.