way as stated by the Presidential Decree. The same shall apply to cases where the work consigned or the consignee has been changed. (4) The consignor shall educate the consignee so that personal information of data subjects may not be lost, stolen, leaked, altered or damaged owing to the consignment of work, and supervise how the consignee processes such personal information in a safe manner by inspecting the consigned work of processing and so on as stated by the Presidential Decree. (5) The consignee shall not use personal information beyond the scope of work consigned by the personal information processor, nor provide personal information to a third party. (6) With respect to the compensation of damages arising out of processing personal information consigned to the consignee in violation of this Act, the consignee shall be deemed as an employee of the personal information processor. (7) Articles 15 through 25, 27 through 31, 33 through 38 and 59 shall apply mutatis mutandis to the consignee. Article 27 (Limitation to Transfer of Personal Information following Business Transfer, etc.) (1) The personal information processor shall, in case of transfer of personal information to others owing to the transfer of business in whole or in part, or merger, etc., notify in advance the relevant data subjects of the particulars in the following Subparagraphs in such a way as stated in the Presidential Decree: 1. The fact that the personal information will be transferred; 2. The name (referring to the company name in case of a juridical person), address, telephone number and other contact points of the recipient of the personal information (hereinafter referred to as the "business transferee"); andnotify the data subjects of the fact in such a way as stated in the Presidential Decree; provided, however, that the same shall not apply where the personal 3. The method and procedure to withdraw the consent in case the data subject would not want the transfer of his/her personal information. (2) Upon receiving the personal information, the business transferee shall without delay information processor has already notified data subjects of the fact of such transfer pursuant to Paragraph (1). (3) The business transferee may, in case of receiving personal information owing to business transfer, merger, etc., use, or provide to a third party, the personal information only for the initial purpose prior to transfer. In this case, the business transferee shall be deemed as the personal information processor. Article 28 (Supervision of Handler of Personal Information) (1) While processing the personal information, the personal information processor shall conduct appropriate control and supervision against the person who processes the personal - 14 -