Article 15 (Collection and Use of Personal Information) (1) The personal information processor may collect personal information in any of the following cases, and use it within the scope of the collection purposes: 1. Where the consent is obtained from data subjects; 2. Where special provisions exist in laws or it is unavoidable so as to observe legal obligations; 3. Where it is unavoidable so that the public institution may carry out such work under its jurisdiction as stated by laws and regulations; 4. Where it is unavoidably necessary so as to execute and perform a contract with data subjects; 5. Where it deems necessary explicitly for the protection, from impending danger, of life, body or economic profits of the data subject or a third party in case that the data subject or his/her legal representative is not in a position to express intention, or prior consent cannot be obtained owing to unknown addresses; or 6. Where it is necessary to attain the justifiable interest of personal information processor, which is explicitly superior to that of data subjects. In this case, it is allowed only when substantial relation exists with the justifiable interest of personal information processor and it does not go beyond the reasonable scope. (2) The personal information processor shall inform data subjects of the followings when it obtains the consent under Subparagraph 1 of Paragraph (1). The same shall apply when any of the followings is modified: 1. The purpose of collection and use of personal information; 2. Particulars of personal information to be collected; 3. The period when personal information is retained and used; and 4. The fact which data subjects are entitled to deny consent, and disadvantage affected resultantly from the denial of consent. Article 16 (Limitation to Collection of Personal Information) (1) The personal information processor shall collect the minimum personal information necessary to attain the purpose in the case applicable to any Subparagraph of Article 15(1). In this case, the burden of proof that the minimum personal information is collected shall be borne by the personal information processor. (2) The personal information processor shall not deny the provision of goods or services to the data subjects on ground that they would not consent to the collection of personal information exceeding minimum requirement. Article 17 (Provision of Personal Information) (1) The personal information processor may provide (or share, hereinafter the same applies) the personal information of data subjects to a third party in the case applicable to any of - 7 -