Agency shall, without delay, inform the fact of the managerial and physical measures such as Korea Communications Commission. establishment of internal management plan and preservation of log-on records, etc. (3) The Information and Communications Service necessary to ensure security as stipulated by Provider, etc. shall explain the justifiable reasons presidential decree so as to prevent personal pursuant to the main sentence and proviso of data from being lost, stolen, leaked, forged, paragraph (1) to the Korea Communications fabricated or damaged. Commission. Article 34 (Personal Data Breach (4) The method, procedure, etc. of notification Notification, etc.) (1) The Personal Data and report pursuant to paragraph (1) and other Controller shall notify the relevant Data necessary matters shall be prescribed by the Subjects without delay of the fact in the Presidential Decree. following subparagraphs when it becomes aware of the leakage of any personal data: (5) The Information and Communications Service Provider, etc. shall prepare for the leakage, etc. of 1. Items of personal data that had been personal information, and explore ways to establish leaked; measures to minimize the damage to victims. 2. When and how the personal data was leaked; Article 28 (Data Protection Measures) (1) In case of processing the personal information of Users, 3. Any measures that Data Subject may the Information and Communications Service take in order to minimize probable damage Provider, etc. shall take such technological and that may break out due to leakage of managerial measures as mentioned in the personal data ; following subparagraphs to prevent the loss, theft, 4. Countermeasures of the Personal Data leakage, forgery, alteration of, or damage to, the Controller and remedial procedures; and personal information and to ensure the safety of personal information by the standard as specified 5. Help desk of the Personal Data by the Presidential Decree. Controller and contact points for Data 1. To establish and implement the in-house Subjects to report damages incurred due to management plan to process the personal the leakage of the personal data. information more safely; (2) The Personal Data Controller shall 2. To install and operate the access control
Agency shall, without delay, inform the fact of the Korea Communications Commission. (3) The Information and Communications Service Provider, etc. shall explain the justifiable reasons pursuant to the main sentence and proviso of paragraph (1) to the Korea Communications Commission. (4) The method, procedure, etc. of notification and report pursuant to paragraph (1) and other necessary matters shall be prescribed by the Presidential Decree. (5) The Information and Communications Service Provider, etc. shall prepare for the leakage, etc. of personal information, and explore ways to establish measures to minimize the damage to victims. Article 28 (Data Protection Measures) (1) In case of processing the personal information of Users, the Information and Communications Service Provider, etc. shall take such technological and managerial measures as mentioned in the following subparagraphs to prevent the loss, theft, leakage, forgery, alteration of, or damage to, the personal information and to ensure the safety of personal information by the standard as specified by the Presidential Decree. 1. To establish and implement the in-house management plan to process the personal information more safely; 2. To install and operate the access control managerial and physical measures such as establishment of internal management plan and preservation of log-on records, etc. necessary to ensure security as stipulated by presidential decree so as to prevent personal data from being lost, stolen, leaked, forged, fabricated or damaged. Article 34 (Personal Data Breach Notification, etc.) (1) The Personal Data Controller shall notify the relevant Data Subjects without delay of the fact in the following subparagraphs when it becomes aware of the leakage of any personal data: 1. Items of personal data that had been leaked; 2. When and how the personal data was leaked; 3. Any measures that Data Subject may take in order to minimize probable damage that may break out due to leakage of personal data ; 4. Countermeasures of the Personal Data Controller and remedial procedures; and 5. Help desk of the Personal Data Controller and contact points for Data Subjects to report damages incurred due to the leakage of the personal data. (2) The Personal Data Controller shall