Chunghwa Telecom: Delayed disclosure to Bug 2008803 GTLSCA Audit Incident Report #4 - Missing evaluation for third parties

Chunghwa Telecom experienced a delayed disclosure incident related to an audit finding from the GTLSCA annual audit. The audit report, received on December 13, 2025, contained findings that were not disclosed in a public incident report until January 6, 2026. This delay was due to insufficient understanding of CCADB Policy 5.2, which mandates disclosure of audit findings within 72 hours. The issue was ultimately reported by a third party, prompting corrective actions from Chunghwa Telecom, including mandatory training on disclosure policies and the implementation of a monitoring dashboard for audit findings.

1. 2025-11-21 Start of non-compliance due to missed disclosure window
2. 2026-01-06 Non-compliance identified after third-party notification
3. 2026-01-19 Non-compliance ended with corrective actions initiated
4. 2026-02-19 Case closed after all action items completed