(1) "Where a personal information controller becomes aware of the possibility of divulgence, etc. prescribed by Presidential Decree" in Article 34(2) of the Act means any of the following times, according to the following classifications:
1. Where circumstances give rise to suspicion of divulgence, etc. of personal information due to unlawful access to a personal information processing system or an information device used by a personal information handler for processing personal information, but it is difficult to identify the data subjects of such personal information: The time when the personal information controller becomes aware of such unlawful access;
2. Where it is confirmed that some personal information processed by a personal information controller has been divulged, etc., such as by being traded by a third party in violation of the Act, this Decree, or any other statute concerning personal information protection, and it is deemed that personal information concerning other data subjects may also have been divulged, etc.: The time when the personal information controller becomes aware of such fact.
(2) "Matters prescribed by Presidential Decree, including information necessary to minimize damage" in Article 34(2) of the Act means the following matters:
1. The items of personal information that are likely to be divulged, etc.;
2. The time when divulgence, etc. is suspected or deemed to have occurred and the circumstances thereof;
3. The matters specified in Article 34(1)3 through 5 of the Act;
4. The fact that additional notification will be given if it is determined that divulgence, etc. has occurred.[This Article Added on Sep. 10, 2026]