subparagraphs: of paragraph (2), the Personal Data Controller shall request the recipient of the 1. The items of personal information to be personal data to restrict the purpose and transferred; method of use and other necessary matters, 2. The state to which personal information or to prepare necessary measures to ensure will be transferred, the date and time of the safety of the personal data. In such case, transfer and the method thereof; the person who is requested shall take 3. The name (referring to the company necessary measures to ensure the safety of name and the contact points of the officer the personal data. in charge of data protection in case of a juridical person) of a person who will be provided with the personal information; and Article 26 (Limitation to Processing 4. The purpose of utilization, and the Personal Data Subsequent to Entrustment period of retention and utilization, of of Work) (1) The Personal Data Controller personal information on the part of a shall, when entrusting the processing of person who will be provided with the personal data to a third party, shall personal information. implement and use paper-based formalities (4) The Information and Communications as stated in the following subparagraphs: Service Provider, etc. shall take the 1. Prevention of processing personal data protective measures as prescribed by the for any purposes other than those intended; Presidential Decree when they transfer the 2. Technical and managerial safeguards of personal information to abroad with the personal data; and consent pursuant to paragraph (2). 3. Other matters stipulated by presidential decree for the safe management of personal Article 28 (Data Protection Measures) (1) In data case of processing the personal information (4) The entrustor shall instruct the entrustee of Users, the Information and to prevent the personal data of Data Communications Service Provider, etc. shall Subjects from being lost, stolen, leaked, take such technological and managerial forged, fabricated or damaged due to the measures as mentioned in the following entrustment of tasks and shall supervise the subparagraphs to prevent the loss, theft, entrustee to ensure that the entrustee leakage, forgery, alteration of, or damage to, properly manages, protects and processes the personal information and to ensure the such personal data in accordance with
subparagraphs: 1. The items of personal information to be transferred; 2. The state to which personal information will be transferred, the date and time of transfer and the method thereof; 3. The name (referring to the company name and the contact points of the officer in charge of data protection in case of a juridical person) of a person who will be provided with the personal information; and 4. The purpose of utilization, and the period of retention and utilization, of personal information on the part of a person who will be provided with the personal information. (4) The Information and Communications Service Provider, etc. shall take the protective measures as prescribed by the Presidential Decree when they transfer the personal information to abroad with the consent pursuant to paragraph (2). Article 28 (Data Protection Measures) (1) In case of processing the personal information of Users, the Information and Communications Service Provider, etc. shall take such technological and managerial measures as mentioned in the following subparagraphs to prevent the loss, theft, leakage, forgery, alteration of, or damage to, the personal information and to ensure the of paragraph (2), the Personal Data Controller shall request the recipient of the personal data to restrict the purpose and method of use and other necessary matters, or to prepare necessary measures to ensure the safety of the personal data. In such case, the person who is requested shall take necessary measures to ensure the safety of the personal data. Article 26 (Limitation to Processing Personal Data Subsequent to Entrustment of Work) (1) The Personal Data Controller shall, when entrusting the processing of personal data to a third party, shall implement and use paper-based formalities as stated in the following subparagraphs: 1. Prevention of processing personal data for any purposes other than those intended; 2. Technical and managerial safeguards of personal data; and 3. Other matters stipulated by presidential decree for the safe management of personal data (4) The entrustor shall instruct the entrustee to prevent the personal data of Data Subjects from being lost, stolen, leaked, forged, fabricated or damaged due to the entrustment of tasks and shall supervise the entrustee to ensure that the entrustee properly manages, protects and processes such personal data in accordance with