(1) If a data subject makes a request for transmission under Article 35-2 (1) of the Act (hereinafter referred to as "data subject access request"), the data subject shall specify the purpose of the request for transmission and the personal information requested for transmission.
(2) If a data subject makes a third-party transmission request, he or she shall specify the following matters:
1. Purpose of the request for transmission;
2. The person to whom the request for transmission is made;
3. The person to whom personal information is transmitted;
4. Personal information requested to be transmitted;
5. Whether regular transmission is required and, if so, the frequency thereof [limited to cases where a request for transmission to a third-party is made to the information transmitter to transmit data to a general specialized agency under Article 42-9 (1) 2 (hereinafter referred to as “general specialized agency”) and a special specialized agency under subparagraph 3 of that paragraph (hereinafter referred to as “special specialized agency”);
6. The time when the request for transmission expires;
7. Period for retaining and using personal information requested for transmission.
(3) A data subject may submit a third-party transmission request to an information transmitter through either an agency specializing in personal information or a general recipient. In such cases, the institution specializing in managing personal information or a general recipient shall notify the data subject in advance, ensuring that the data subject clearly understands the details of the matters referred to in the subparagraphs of paragraph (2) before making the request.
(4) When a data subject requests a third-party transmission with regard to a general specialized agency or a special specialized agency, the data subject may request the information transmitter to transmit personal information of the same details on a regular basis.
(5) A data subject may change or withdraw a request for transmission under paragraphs (1) through (4). In such cases, an information transmitter, an institution specializing in managing personal information, and a general recipient shall ensure that the methods and procedures for changing and withdrawing the request for transmission are not more difficult than the methods and procedures as at the time of the request for transmission.[This Article Added on Feb. 25, 2025]