(1) If an institution specializing in managing personal information fails to comply with the conditions under the latter part of Article 42-12 (1) pursuant to Article 35-3 (4) of the Act, the designating authority may revoke the designation of the institution specializing in managing personal information.
(2) When a designating authority (excluding the Protection Commission) intends to revoke the designation of an institution specializing in managing personal information, it shall have a prior consultation with the Protection Commission.
(3) If a designating authority (excluding the Protection Commission in cases falling under subparagraph 1) revokes the designation of an institution specializing in managing personal information, it shall take the following measures:
1. Notification to the Protection Commission;
2. Public announcement in the Official Gazette or posting on the website of the designating authority.[This Article Added on Feb. 25, 2025]