Personal Data Protection Act Article 47
Where a non-government agency commits any of the violations listed below, the competent authority shall impose a fine of not less than NT$50,000 and not more than NT$500,000, order it to rectify the violation within a specified period of time, and impose fines successively until the violation is rectified:1.violation of Paragraph 1, Article 6;2.violation of Article 19;3.violation of Paragraph 1, Article 20; and4.violation of an order or decision restricting cross-border transfer under Article 21.