disclose his/her Privacy Policy to the public under (4) The Personal Data Controller shall not the title “Privacy Policy” by any of the following refuse the provision of goods or services to methods, based upon the place, media, etc. from the Data Subjects on the ground that the which personal information has been collected: Data Subjects would not consent to the 1. Displaying the information about matters matter eligible for selective consent pursuant specified in Article 27-2 (2) of the Act on the first to paragraph (2), or (3) and Article 18(2)i. page of his/her web-site or a page linked to the (5) The Personal Data Controller shall, when first page to ensure that Users can read the information. In such cases, the Information and required to obtain consent in accordance Communications Service Providers shall display the with this Act with regards to children below Privacy Policy conspicuously by utilizing size, color, the age of 14 years, obtain consent from etc. of fonts to ensure that Users can easily read; their legal representatives. In such case, the 2. Posting or keeping the information at a place minimum personal data necessary to obtain where such information is easily noticeable in a consent from the legal representatives may shop or office; be collected directly from such children 3. Publishing the information in periodicals, new without the consent of their legal bulletins, leaflets, or bills issued regularly and representatives. distributed to Users at least twice a year under an identical title. ENFORCEMENT DECREE Article 31 (Establishment and Disclosure of (2) Pursuant to Article 27-2 (3) of the Act, reasons Privacy Policy) (1) “Other matters as stated why a Privacy Policy is revised and the details of in the Presidential Decree” in Article 30(1)vi such revision shall be publicly notified by at least one of the following methods: shall mean the matters of following subparagraphs: 1. Posting public notice on a space for public notice in the first page of the web-site operated by the 1. Items of personal information to be Information and Communications Service Providers processed; or on a separate page; 2. Matters in relation to destruction of personal information; and 2. Giving notice to Users by writing, facsimile, 3. Matters in relation to safety measures
disclose his/her Privacy Policy to the public under the title “Privacy Policy” by any of the following methods, based upon the place, media, etc. from which personal information has been collected: 1. Displaying the information about matters specified in Article 27-2 (2) of the Act on the first page of his/her web-site or a page linked to the first page to ensure that Users can read the information. In such cases, the Information and Communications Service Providers shall display the Privacy Policy conspicuously by utilizing size, color, etc. of fonts to ensure that Users can easily read; 2. Posting or keeping the information at a place where such information is easily noticeable in a shop or office; 3. Publishing the information in periodicals, new bulletins, leaflets, or bills issued regularly and distributed to Users at least twice a year under an identical title. (2) Pursuant to Article 27-2 (3) of the Act, reasons why a Privacy Policy is revised and the details of such revision shall be publicly notified by at least one of the following methods: 1. Posting public notice on a space for public notice in the first page of the web-site operated by the Information and Communications Service Providers or on a separate page; 2. Giving notice to Users by writing, facsimile, (4) The Personal Data Controller shall not refuse the provision of goods or services to the Data Subjects on the ground that the Data Subjects would not consent to the matter eligible for selective consent pursuant to paragraph (2), or (3) and Article 18(2)i. (5) The Personal Data Controller shall, when required to obtain consent in accordance with this Act with regards to children below the age of 14 years, obtain consent from their legal representatives. In such case, the minimum personal data necessary to obtain consent from the legal representatives may be collected directly from such children without the consent of their legal representatives. ENFORCEMENT DECREE Article 31 (Establishment and Disclosure of Privacy Policy) (1) “Other matters as stated in the Presidential Decree” in Article 30(1)vi shall mean the matters of following subparagraphs: 1. Items of personal information to be processed; 2. Matters in relation to destruction of personal information; and 3. Matters in relation to safety measures