(3) In case where a large scale of data breach above the level specified by the Presidential
Decree takes place, the personal information processor shall, without delay, report the
notification stated in Paragraph (1) and the result of measures stated in Paragraph (2) to
the Minister of Public Administration and Security and such specific institution as stated in
the Presidential Decree. In this case, the Minister of Public Administration and Security
and such specific institution as stated in the Presidential Decree may provide technical
assistance for the prevention and recovery of further damage, etc.
(4) Necessary matters in relation to the time, method and procedure of the data breach
notification pursuant to Paragraph (1) shall be provided by the Presidential Decree.
CHAPTER V. GUARANTEE OF THE RIGHTS OF DATA SUBJECT
Article 35 (Access to Personal Information)
(1) The data subject may demand access to his/her own personal information, which is
processed by the personal information processor, to the relevant personal information
processor.
(2) Notwithstanding Paragraph (1), when the data subject intends to request access to his/her
own personal information to the public institution, the data subject may request directly to
the said institution, or indirectly through the Minister of Public Administration and Security
as stated by the Presidential Decree.
(3) The personal information processor shall, when it is requested access pursuant to
Paragraphs (1) and (2), let the data subjects have access to the relevant personal
information for the period as stated by the Presidential Decree. In this case, if there is any
justifiable ground not to permit access for such period, the personal information processor
may postpone access after notifying the relevant data subjects of the said ground. If the
said ground expires, the postponement shall, without delay, be lifted.
(4) In case where any of the following Subparagraphs is applicable, the personal information
processor may restrict or deny access after it notifies data subjects of the reason:
1. Where access is prohibited or restricted by law;
2. Where access may probably cause damage to the life or body of others, or improper
violation of properties and other benefits of others; or
3. Where the public institutions have grave difficulties in carrying out any of the following
Items:
a. Imposition, collection or repayment of taxes;
b. Evaluation of academic achievements or admission affairs at the schools established by
the Elementary and Middle Education Act and the Higher Education Act, at lifelong
educational facilities established by the Lifelong Education Act, and other higher
- 19 -