(3) Any person who has been requested to furnish the materials under Paragraphs (1) and (2) shall do as requested except otherwise exempted by specific circumstances. (4) Any necessary matters including the scope and method to furnish the materials under Paragraphs (1) and (2) shall be stated by the Presidential Decree. Article 12 (Data Protection Guidelines) (1) The Minister of Public Administration and Security may establish the standard data protection guidelines (hereinafter referred to as the “Standard Guidelines”) regarding the personal information processing standard, types of privacy violations and preventive measures, etc., and encourage personal information processors to comply with it. (2) The head of central administrative department or agency may establish the data protection guidelines regarding the personal information processing in the field under its jurisdiction, and encourage personal information processors to comply with it. (3) The National Assembly, the Court, the Constitutional Court and the National Election Commission may establish and implement its own data protection guidelines of relevant institutions including affiliated entities. Article 13 (Promotion and Support of Self-Regulation) The Minister of Public Administration and Security shall work out the following policy measures necessary to promote and support the self-regulating data protection activities of personal information processors: 1. Education and public relations for data protection; 2. Promotion and support of data protection related institutions and organizations; 3. Introduction and facilitation of privacy mark system; 4. Support of formation and implementation of the self-regulating rules of personal information processors; and 5. Other matters necessary to support the self-regulating data protection activities of personal information processors. Article 14 (International Cooperation) (1) The government shall work out policy measures necessary to enhance the data protection standard in the international environment. (2) The government shall work out relevant policy measures so that the rights of data subjects may not be infringed upon owing to cross border transfer of personal information. CHAPTER III. PROCESSING OF PERSONAL INFORMATION Section 1 Collection, Use, Provision, etc. of Personal Information - 6 -

Select target paragraph3