devices pursuant to each Subparagraph of Paragraph (1) and the person who intends to install and operate visual data processing devices pursuant to the proviso of Paragraph (2) shall gather opinions of relevant specialists and interested persons through such formalities as public hearings, information sessions, etc. stated by the Presidential Decree. (4) The person who intends to install and operate visual data processing devices pursuant to each Subparagraph of Paragraph (1) (hereinafter referred to as the “V/D Operator”) shall take necessary measures including posting on a signboard so that data subjects may recognize it with ease as stated by the Presidential Decree; provided, however, that the same shall not apply to such facilities as stated by the Presidential Decree. (5) The V/D Operator shall not handle arbitrarily visual data processing devices for other purposes than the initial one, nor direct the said devices toward different spots, nor use sound recording functions. (6) The V/D Operator shall take necessary measures to ensure the safety pursuant to Article 29, so that personal information may not be lost, stolen, leaked, altered or damaged. (7) The V/D Operator shall work out the appropriate policy to operate and manage visual data processing devices as stated by the Presidential Decree. In this case, it may be discharged to make the privacy policy pursuant to Article 30. (8) The V/D Operator may outsource the installation and operation of visual data processing devices; provided, however, that the public institutions considering outsourcing shall comply with the procedure and requirements stated by the Presidential Decree. Article 26 (Limitation to Processing Personal Information Subsequent to Consignment of Work) (1) The personal information processor shall, when it consigns processing of personal information to a third party, go through such paper-based formalities as stated in the following Subparagraphs: 1. Prevention of processing personal information for other purposes than the consigned purpose; 2. Technical and managerial safeguards of personal information; and 3. Other things for the safe management of personal information as stated by the Presidential Decree. (2) The personal information processor, that consigns processing of personal information to a third party pursuant to Paragraph (1) (hereinafter referred to as the “consignor”) shall disclose what has been consigned and who carries out the consigned processing of personal information (hereinafter referred to as the “consignee”) so that data subjects may recognize it at any time with ease in such a way as stated by the Presidential Decree. (3) The consignor shall, in case of consigning public relations of goods or services, or soliciting of sales, notify data subjects of the work consigned and the consignee in such a - 13 -

Select target paragraph3