which the User can check the relevant Internet address and matters subject to consent and then calling the User again to obtain consent over the telephone. (2) If it is impracticable for a Information and Communications Service Provider to fully state matters subject to consent due to the characteristics of a medium for collecting personal information, he/she may inform each User of a method by which the User can check matters subject to consent (Internet address, telephone numbers of the place of business, etc.) to obtain consent from the User. 18. When choices Where the Applicant Article 27-2 (Disclosure of Privacy Policy) (1) In Article 30 (Establishment and Disclosure of are provided to the answers YES, the case of processing the personal information of Privacy Policy) (1) The Personal Data individual offering Accountability Agent must Users, the Information and Communications Controller shall establish a personal data the ability to limit verify that the Applicant’s Service Provider, etc. shall establish and disclose processing policy including the particulars in the collection choice mechanism is clearly the Privacy Policy in such a manner as stated in the the following subparagraphs (hereinafter the (question 14), use worded and easily Presidential Decree so that Users may identify the "Privacy Policy"). In such case, the public (question 15) understandable. policy with ease at any time. institutions shall set up the Privacy Policy and/or disclosure regarding the personal data files subject to (2) The Privacy Policy subject to paragraph (1) shall (question 16) of Where the Applicant be registered pursuant to Article 32: contain each and all following subparagraphs: their personal answers NO, and/or when 1. The purpose of processing the personal 1. The purpose of collection and utilization of the information, are the Accountability Agent data; personal information, particulars of personal they clearly finds that the Applicant’s 2. The period for processing and retention information collected hereunder and the method worded and easily choice mechanism is not of the personal data; of collection thereof; understandable? clearly worded and easily 3. Provision of the personal data to a third understandable, the 2. The name (referring to the company name in party (if applicable); Accountability Agent must case of a juridical person) of a person who has 4. Entrustment of processing the personal
which the User can check the relevant Internet address and matters subject to consent and then calling the User again to obtain consent over the telephone. (2) If it is impracticable for a Information and Communications Service Provider to fully state matters subject to consent due to the characteristics of a medium for collecting personal information, he/she may inform each User of a method by which the User can check matters subject to consent (Internet address, telephone numbers of the place of business, etc.) to obtain consent from the User. 18. When choices are provided to the individual offering the ability to limit the collection (question 14), use (question 15) and/or disclosure (question 16) of their personal information, are they clearly worded and easily understandable? Where the Applicant answers YES, the Accountability Agent must verify that the Applicant’s choice mechanism is clearly worded and easily understandable. Where the Applicant answers NO, and/or when the Accountability Agent finds that the Applicant’s choice mechanism is not clearly worded and easily understandable, the Accountability Agent must Article 27-2 (Disclosure of Privacy Policy) (1) In case of processing the personal information of Users, the Information and Communications Service Provider, etc. shall establish and disclose the Privacy Policy in such a manner as stated in the Presidential Decree so that Users may identify the policy with ease at any time. (2) The Privacy Policy subject to paragraph (1) shall contain each and all following subparagraphs: 1. The purpose of collection and utilization of the personal information, particulars of personal information collected hereunder and the method of collection thereof; 2. The name (referring to the company name in case of a juridical person) of a person who has Article 30 (Establishment and Disclosure of Privacy Policy) (1) The Personal Data Controller shall establish a personal data processing policy including the particulars in the following subparagraphs (hereinafter the "Privacy Policy"). In such case, the public institutions shall set up the Privacy Policy regarding the personal data files subject to be registered pursuant to Article 32: 1. The purpose of processing the personal data; 2. The period for processing and retention of the personal data; 3. Provision of the personal data to a third party (if applicable); 4. Entrustment of processing the personal