(3) In case where a large scale of data breach above the level specified by the Presidential Decree takes place, the personal information processor shall, without delay, report the notification stated in Paragraph (1) and the result of measures stated in Paragraph (2) to the Minister of Public Administration and Security and such specific institution as stated in the Presidential Decree. In this case, the Minister of Public Administration and Security and such specific institution as stated in the Presidential Decree may provide technical assistance for the prevention and recovery of further damage, etc. (4) Necessary matters in relation to the time, method and procedure of the data breach notification pursuant to Paragraph (1) shall be provided by the Presidential Decree. CHAPTER V. GUARANTEE OF THE RIGHTS OF DATA SUBJECT Article 35 (Access to Personal Information) (1) The data subject may demand access to his/her own personal information, which is processed by the personal information processor, to the relevant personal information processor. (2) Notwithstanding Paragraph (1), when the data subject intends to request access to his/her own personal information to the public institution, the data subject may request directly to the said institution, or indirectly through the Minister of Public Administration and Security as stated by the Presidential Decree. (3) The personal information processor shall, when it is requested access pursuant to Paragraphs (1) and (2), let the data subjects have access to the relevant personal information for the period as stated by the Presidential Decree. In this case, if there is any justifiable ground not to permit access for such period, the personal information processor may postpone access after notifying the relevant data subjects of the said ground. If the said ground expires, the postponement shall, without delay, be lifted. (4) In case where any of the following Subparagraphs is applicable, the personal information processor may restrict or deny access after it notifies data subjects of the reason: 1. Where access is prohibited or restricted by law; 2. Where access may probably cause damage to the life or body of others, or improper violation of properties and other benefits of others; or 3. Where the public institutions have grave difficulties in carrying out any of the following Items: a. Imposition, collection or repayment of taxes; b. Evaluation of academic achievements or admission affairs at the schools established by the Elementary and Middle Education Act and the Higher Education Act, at lifelong educational facilities established by the Lifelong Education Act, and other higher - 19 -

Select target paragraph3