三大訴訟理由
政府應主動通知個資事件
主管機關知悉個資事件後，即負有通知當事人之義務，不待過失認定。
Once authorities learn of a personal-data incident, they are obligated to notify affected individuals — regardless of fault determination.
不得阻撓人民變更身分證字號
北高行112-訴-1114判決確認，非法持有個人資料本身即構成損害，人民有權申請變更身分證字號。
Taipei High Administrative Court ruling 112-訴-1114 confirmed that unauthorized possession of personal data constitutes harm, and citizens have the right to apply for ID number changes.
應依法補償並負起法律責任
依個資法第28至31條，每人每事件可請求新臺幣500至20,000元賠償，無需證明下游損害。
Under 個資法 §28–§31, each affected person may claim NT$500–20,000 per incident without needing to prove downstream damage.