provider, etc.; refuse the provision of goods or services to 2. The content of how the information and the Data Subjects on the ground that the communications service provider, etc. has utilized, Data Subjects would not consent to the or provided to a third party, the personal matter eligible for selective consent pursuant information of users; or to paragraph (2), or (3) and Article 18(2)i. 3. The status at which the information and communications service provider, etc. has obtained (5) The Personal Data Controller shall, when consent for the collection, utilization or provision required to obtain consent in accordance of the personal information. with this Act with regards to children below the age of 14 years, obtain consent from (6) The Information and Communications Service their legal representatives. In such case, the Provider, etc. shall make the withdrawal of consent minimum personal data necessary to obtain pursuant to paragraph (1), or how to request consent from the legal representatives may access to, provision of, or correction of errors in, be collected directly from such children the personal information much easier than the without the consent of their legal method how to collect the personal information. representatives. ENFORCEMENT DECREE ENFORCEMENT DECREE Article 14 (Methods, etc. for Public Disclosure of Privacy Policy) (1) Pursuant to Article 27-2 (1) of Article 31 (Establishment and Disclosure of the Act, in case of the Information and Privacy Policy) (1) “Other matters as stated Communications Service Providers process in the Presidential Decree” in Article 30(1)vi personal information(any act of collecting, generating, connecting, interworking, recording, shall mean the matters of following storing, retaining, value-added processing, editing, subparagraphs: retrieving, printing, rectifying, restoring, using, 1. Items of personal information to be providing, disclosing and destructing of personal processed; information and other similar activities;), they shall 2. Matters in relation to destruction of disclose his/her Privacy Policy to the public under personal information; and the title “Privacy Policy” by any of the following 3. Matters in relation to safety measures methods, based upon the place, media, etc. from of personal information subject to Article 30.
provider, etc.; 2. The content of how the information and communications service provider, etc. has utilized, or provided to a third party, the personal information of users; or 3. The status at which the information and communications service provider, etc. has obtained consent for the collection, utilization or provision of the personal information. (6) The Information and Communications Service Provider, etc. shall make the withdrawal of consent pursuant to paragraph (1), or how to request access to, provision of, or correction of errors in, the personal information much easier than the method how to collect the personal information. ENFORCEMENT DECREE Article 14 (Methods, etc. for Public Disclosure of Privacy Policy) (1) Pursuant to Article 27-2 (1) of the Act, in case of the Information and Communications Service Providers process personal information(any act of collecting, generating, connecting, interworking, recording, storing, retaining, value-added processing, editing, retrieving, printing, rectifying, restoring, using, providing, disclosing and destructing of personal information and other similar activities;), they shall disclose his/her Privacy Policy to the public under the title “Privacy Policy” by any of the following methods, based upon the place, media, etc. from refuse the provision of goods or services to the Data Subjects on the ground that the Data Subjects would not consent to the matter eligible for selective consent pursuant to paragraph (2), or (3) and Article 18(2)i. (5) The Personal Data Controller shall, when required to obtain consent in accordance with this Act with regards to children below the age of 14 years, obtain consent from their legal representatives. In such case, the minimum personal data necessary to obtain consent from the legal representatives may be collected directly from such children without the consent of their legal representatives. ENFORCEMENT DECREE Article 31 (Establishment and Disclosure of Privacy Policy) (1) “Other matters as stated in the Presidential Decree” in Article 30(1)vi shall mean the matters of following subparagraphs: 1. Items of personal information to be processed; 2. Matters in relation to destruction of personal information; and 3. Matters in relation to safety measures of personal information subject to Article 30.