(1) A financial company, etc. shall fulfill its fiduciary duty of care in good faith so as to ensure safety in handling electronic financial transactions. <Amended on May 22, 2013; May 19, 2020>
(2) In order to ensure the safety and reliability of electronic financial transactions, a financial company etc. shall comply with the standards determined by the Financial Services Commission with respect to the information technology sector, such as human resources, facilities, electronic apparatus, and expenses for conducting electronic transmissions or processing, the electronic financial affairs and certification methods including the use of certificates under the Digital Signature Act. <Amended on Feb. 29, 2008; May 22, 2013; Oct. 15, 2014>
(3) The Financial Services Commission shall not compel the use of any specific technology or service when determining the standards referred to in paragraph (2) and shall endeavor to promote the fair competition of security technologies and certification technologies. <Amended on Oct. 15, 2014>
(4) For safe electronic financial transactions, the financial companies or electronic financial business entities prescribed by Presidential Decree shall annually establish a plan for the information technology sector and submit it to the Financial Services Commission after obtaining confirmation and signature of its representative, as prescribed by Presidential Decree. <Added on May 22, 2013>