Article 31 (Designation of Privacy Officer) (1) The personal information processor shall designate the privacy officer who comprehensively takes charge of the personal information processing. (2) The privacy officer shall carry out the job in the following Subparagraphs: 1. To establish and implement the data protection plan; 2. To make regular survey of the actual state and practices of personal information processing, and to improve shortcomings; 3. To treat grievances and remedial compensation in relation to personal information processing; 4. To set up the internal control system to prevent the leak, or abuse and misuse, of personal information; 5. To prepare and implement the data protection education program; 6. To protect, and control and manage the personal information files; and 7. Other functions for the appropriate processing of personal information as stated by the Presidential Decree. (3) In carrying out the job as stated in each Subparagraph of Paragraph (2), the Privacy Officer may inspect the personal information status and systems more often than not, if necessary, and request the report thereon from the relevant parties. (4) The Privacy Officer shall, when he/she gets to know any violation of this Act and other relevant laws and regulations in relation to data protection, take immediately corrective measures, and shall, if necessary, report such corrective measures to the head of institution itself or relevant organizations. (5) The personal information processor shall not have the Privacy Officer give or take disadvantage without any justifiable ground while conducting the job as stated in the Subparagraphs of Paragraph (2). (6) The requirements to be designated as the Privacy Officer, data protection job, qualifications and other necessary matters shall be provided by the Presidential Decree. Article 32 (Registration and Disclosure of Personal Information Files) (1) The head of public institutions operating the personal information files shall register the matters stated in the following Subparagraphs with the Minister of Public Administration and Security. The same shall apply where the registered matters are modified: 1. The title of the personal information files; 2. The grounds and purposes for the operation of the personal information files; 3. Particulars of personal information which are recorded in the personal information files; 4. The method of processing personal information; 5. The period of retaining personal information; 6. The recipient of personal information in case it is provided routinely or repetitively; and - 16 -