(1) The Government may prescribe guidelines necessary for protection of information of users to recommend users to observe the guidelines and may take measures necessary for preventing cyber security incidents and precluding spread thereof, such as inspection of vulnerabilities and technical support.
(2) The Government may entrust affairs regarding measures taken under paragraph (1) to the Korea Internet and Security Agency or a specialized organization prescribed by Presidential Decree. <Added on Jun. 9, 2020>
(3) If a major provider of information and communications services foresees that a serious problem is likely to occur in the information system of a user who uses the services, the information and communications network, or similar provided by such provider because of an occurrence of a serious cyber security incident on the information and communications network, the provider may request the user to take necessary protective measures as stipulated by the terms and conditions of use and may place a temporary restriction on access to the relevant information and communications network if the user does not perform as requested. <Amended on Jun. 9, 2020>
(4) When a software business operator defined in Article 2 of the Software Promotion Act has produced a program that can address security vulnerabilities, he or she shall notify the Korea Internet and Security Agency of such production and shall notify users of the software of the production at least twice within 1 month from the date of production. <Amended on Apr. 22, 2009; Jun. 9, 2020>
(5) Specific details that shall be stipulated by the terms and conditions of use with respect to the request for protective measures under paragraph (3) and other related matters shall be prescribed by Presidential Decree. <Amended on Jun. 9, 2020>[This Article Wholly Amended on Jun. 13, 2008][This Article Moved from Article 47-3 <Feb. 17, 2012>]