consent pursuant to paragraph (2), notify the User in advance of the whole matters stated in the following subparagraphs: 1. The items of personal information to be transferred; 2. The state to which personal information will be transferred, the date and time of transfer and the method thereof; 3. The name (referring to the company name and the contact points of the officer in charge of data protection in case of a juridical person) of a person who will be provided with the personal information; and 4. The purpose of utilization, and the period of retention and utilization, of personal information on the part of a person who will be provided with the personal information. (4) The Information and Communications Service Provider, etc. shall take the protective measures as prescribed by the Presidential Decree when they transfer the personal information to abroad with the consent pursuant to paragraph (2). 12. If you answered Article 24 (Restrictions on Utilizing Personal Article 18 (Limitations to Out-of-Purpose Use and Provision of Personal Data) (1) The YES to question 10 Information) No Information and Personal Data Controller shall not use and/or question Communications Service Provider shall utilize the personal data beyond the scope stated in 11, is the disclosure personal information collected pursuant to Article Article 15(1), and shall not provide it to a and/or transfer 22 and the proviso of Article 23(1) for other third party beyond the scope stated in Article undertaken to purpose than the purpose consented by the 17(1) and (3). fulfill the original relevant User or referred to in each subparagraph (2) Notwithstanding paragraph (1), where any of the following subparagraphs applies, purpose of of Article 22(2). the Personal Data Controller may use collection or
consent pursuant to paragraph (2), notify the User in advance of the whole matters stated in the following subparagraphs: 1. The items of personal information to be transferred; 2. The state to which personal information will be transferred, the date and time of transfer and the method thereof; 3. The name (referring to the company name and the contact points of the officer in charge of data protection in case of a juridical person) of a person who will be provided with the personal information; and 4. The purpose of utilization, and the period of retention and utilization, of personal information on the part of a person who will be provided with the personal information. (4) The Information and Communications Service Provider, etc. shall take the protective measures as prescribed by the Presidential Decree when they transfer the personal information to abroad with the consent pursuant to paragraph (2). 12. If you answered YES to question 10 and/or question 11, is the disclosure and/or transfer undertaken to fulfill the original purpose of collection or Article 24 (Restrictions on Utilizing Personal Information) No Information and Communications Service Provider shall utilize the personal information collected pursuant to Article 22 and the proviso of Article 23(1) for other purpose than the purpose consented by the relevant User or referred to in each subparagraph of Article 22(2). Article 18 (Limitations to Out-of-Purpose Use and Provision of Personal Data) (1) The Personal Data Controller shall not use personal data beyond the scope stated in Article 15(1), and shall not provide it to a third party beyond the scope stated in Article 17(1) and (3). (2) Notwithstanding paragraph (1), where any of the following subparagraphs applies, the Personal Data Controller may use