When that happens, then of course the Personal Data Protection Act kicks into place. People who violate that get punished five years or lower, five or less years in jail, and NT$1 million or less, as a fine. Personal Data Protection Act also stipulates that if it’s a public servant doing the same privacy violation, then their penalty, whether criminal or fine, could be increased by up to 50 percent.