(1) The Protection Commission shall examine the appropriateness of the following matters every 3 years, counting from each base date specified in the following (referring to the period that ends on the day before the base date of every 3rd year) and shall take measures, such as making improvements. <Added on Aug. 4, 2020; Mar. 8, 2022; Sep. 12, 2023; Mar. 12, 2024; Feb. 25, 2025>
1. Deleted; <Feb. 25, 2025>
2. Scope of the persons required to be notified of the details of the use and provision of personal information, the types of information required to be notified, and the frequency and method of notification under Article 15-3: September 15, 2023;
3. Scope and standards of the parties required to purchase an insurance, etc. for performance of damage compensation responsibilities under Article 48-7: August 5, 2020.
4. Combination of pseudonymized information between personal information controllers under Article 29-3: Jan. 1, 2024.
5. Matters regarding information transmitters and information transmitted under Articles 42-2 through 42-4: January 1, 2025;
6. Matters regarding requests for and methods of transmitting personal information under Articles 42-5 through 42-8: January 1, 2025;
7. Matters regarding institutions specializing in managing personal information under Articles 42-9 through 42-16: January 1, 2025;
8. Matters regarding the designation, etc. of an Expert Data Combination Agency under Article 29-2: January 1, 2026;
9. Matters regarding the management, supervision, etc. of an Expert Data Combination Agency under Article 29-4: January 1, 2025.
(2) The Protection Commission shall examine the appropriateness of the following matters every 2 years, counting from each base date specified in the following (referring to the period that ends on the day before January 1 of every 2nd year) and shall take measures, such as making improvements. <Amended on Mar. 12, 2024; Feb. 25, 2025>
1. Deleted; <Feb. 25, 2025>
2. The qualification requirements for persons in charge of personal information protection under Article 32 (4) and (6) and Appendix 1 and matters to be observed by personal information controllers to guarantee the independence of persons in charge of personal information protection: Jan. 1, 2025;
3. Procedures and Methods for Requesting Rejection of Automated Decisions or Requesting Explanation, Measures Following Requests for Rejection of Automated Decisions or Requests for Explanation, etc., Standards and Procedures for Automated Decisions, etc. under Articles 44-2 through 44-4: Jan. 1, 2025.
(3) Deleted. <Mar. 8, 2022>[This Article Wholly Amended on Dec. 9, 2014]