(1) A person who intends to be designated as an institution specializing in managing personal information pursuant to Article 35-3 (1) of the Act shall file an application for designation to the designating authority under paragraph (2) by submitting the following documents; in such cases, a person who intends to be designated as an institution specializing in managing personal information may submit it through the personal information transmission support platform:
1. Application for designation;
2. Articles of incorporation or bylaws (not applicable to public institutions falling under subparagraph 6 (a) of Article 2 of the Act);
3. A business plan;
4. A personal information management plan;
5. Financial statements for the last 3 years (not applicable to public institutions falling under subparagraph 6 (a) of Article 2 of the Act);
6. Documents proving that the requirements for designation under Article 35-3 (2) of the Act are satisfied.
(2) A person who may designate an institution specializing in managing personal information pursuant to Article 35-3 (1) of the Act (hereinafter referred to as "designating authority") shall be as follows:
1. A specialized relay agency: The head of a relevant central administrative agency related to the information that the Protection Commission or specialized relay agency intends to receive; provided, the Minister of Health and Welfare shall be the specialized relay agency in the case of an agency specializing in relaying health and medical services information subject to transmission;
2. A general specialized agency: The head of a relevant central administrative agency related to the information to be transmitted to the Protection Commission or a general specialized agency;
3. A special specialized agency: The Minister of Health and Welfare.
(3) Upon receipt of an application for designation under paragraph (1), the designating authority shall verify the corporation registration certificate (limited to where a person who intends to be designated as an institution specializing in managing personal information is a corporation) through administrative data matching under Article 36 (1) of the Electronic Government Act.
(4) A person who intends to be designated as an institution specializing in managing personal information may apply for a preliminary examination to the designating authority before filing an application for designation under paragraph (1) to determine whether the detailed criteria for designation under Article 42-11 are satisfied.[This Article Added on Feb. 25, 2025]