(1) "Person who meets the standards prescribed by Presidential Decree" in Article 39-7 (1) of the Act means a person who meets all of the following requirements (hereinafter referred to as "subscribed personal information controller"): <Amended on Mar. 12, 2024>
1. The same sales, etc. of the previous year (in cases of a corporation, referring to the immediately preceding business year) shall be at least one billion won;
2. The number of data subjects (excluding data subjects falling under Article 15-3 (2) 2; hereafter the same shall apply in this Article) whose personal information has been stored and managed for three months immediately preceding the end of the previous year shall be at least 10,000 per day average daily; provided, where personal information has been transferred due to acquisition of all or part of business, division, merger, etc. in the relevant year, the number of data subjects shall be at least 10,000 persons as of the time of transfer.
(2) "Public institutions, non-profit corporations, and organizations prescribed by Presidential Decree" in Article 39-7 (2) 1 of the Act means the following institutions: <Added on Mar. 12, 2024>
1. Public Institutions; provided, this shall not apply to public institutions falling under subparagraphs 2 through 5 of Article 2, which fall under the subparagraphs of Article 32 (4);
2. Public interest corporations under Article 2 of the Act on the Establishment and Operation of Public Interest Corporations;
3. Associations registered under Article 4 of the Assistance for Non-Profit, Non-Governmental Organizations Act.
(3) "Person prescribed by Presidential Decree" in Article 39-7 (2) 2 of the Act means a person who meets all of the following requirements: <Amended on Mar. 12, 2024>
1. A person entrusted with the storage and management of personal information by a micro enterprise under Article 2 (1) of the Framework Act on Micro Enterprises to prevent personal information from being lost, stolen, divulged, divulged, forged, altered, or damaged;
2. A person who takes necessary measures, such as purchasing an insurance policy or joining a mutual aid agreement or accumulating reserves to guarantee the fulfillment of liability for damage compensation under Articles 39 and 39-2 of the Act with respect to affairs entrusted pursuant to subparagraph 1.
(4) The standards for the minimum subscription amount (referring to the minimum reserve amount in cases of accumulating reserves; hereafter the same shall apply in this Article) where a subscribed personal information controller subscribes to insurance or mutual aid or accumulates reserves shall be as specified in Appendix 1-4; provided, where a personal information controller subject to enrollment subscribes to insurance or mutual aid or accumulates reserves simultaneously, the aggregate of the amount of insurance or mutual aid and reserves shall be at least the standards for the minimum subscription amount prescribed in Appendix 1-4. <Amended on Sep. 12, 2023; Mar. 12, 2024>[This Article Added on Aug. 4, 2020]