civic organizations and related operators, and request relevant materials from the authorities
concerned.
Article 9 (Basic Plan)
(1) The Minister of Public Administration and Security shall establish the Data Protection
Basic Plan (hereinafter referred to as the “Basic Plan”) every three years in consultation
with the head of central administrative department or agency concerned, and submit it to
the Commission, and shall carry out the Basic Plan subject to the deliberation and
resolution of the Commission.
(2) The Basic Plan shall include the followings:
1. The basic goals and intended directions of data protection;
2. The improvement of data protection systems and legislation;
3. Countermeasures to prevent privacy violation;
4. How to facilitate self-regulation for data protection;
5. How to activate education and public relations for data protection;
6. Training and fostering specialists in data protection; and
7. Other matters necessary for data protection.
(3) The National Assembly, the Court, the Constitutional Court and the National Election
Commission may establish and implement its own basic plan for data protection of relevant
institutions including affiliated entities.
Article 10 (Implementation Plan)
(1) The head of central administrative department or agency shall establish the
implementation plan for data protection each year in accordance with the Basic Plan and
submit it to the Commission, and shall carry out the implementation plan subject to the
deliberation and resolution of the Commission.
(2) The matters necessary for the establishment and carrying out of the implementation plan
shall be stated by the Presidential Decree.
Article 11 (Request for Materials)
(1) The Minister of Public Administration and Security may, for the efficient establishment
and carrying out of the Basic Plan, request materials or suggestions regarding the actual
state of regulatory compliance and personal information management, etc. by personal
information processors from personal information processors, the head of central
administrative departments or agencies concerned, the head of local governments and
relevant organizations, etc.
(2) The head of central administrative department or agency may, for the efficient
establishment and carrying out of the implementation plan, request the materials stated in
Paragraph (1) from personal information processors in the field under its jurisdiction.
- 5 -