4. Personal information collected and used for its own purposes of reporting by the press, missionary activities by religious organizations, and nomination of candidates by political parties, respectively. (2) Articles 15, 22, 27(1) and (2), 34 and 37 shall not apply to the personal information which is processed by means of visual data processing devices installed and operated at open places pursuant to each Subparagraph of Article 25(1). (3) Articles 15, 30 and 31 shall not apply to the personal information which is processed by a personal information processor so as to operate groups or associations for friendship such as alumni associations and hobby clubs. (4) In case of processing personal information pursuant to each Subparagraph of Paragraph (1), the personal information processor is required to process such personal information as little as possible to the extent necessary to attain the intended purpose for a minimum period. Also the personal information processor shall make necessary arrangements such as technical, managerial and physical safeguards, individual grievance treatment and other necessary measures for the safe maintenance and appropriate processing of personal information. Article 59 (Prohibited Activities) No one who processes or processed personal information shall do any of the following Subparagraphs: 1. To get personal information or obtain the consent to personal information processing in a fraudulent, improper or unfair manner; 2. To leak personal information obtained in the course of business, or provide it without authority to other’s use; or 3. To damage, destroy, alter, forge or leak other’s personal information without legal authority or beyond proper authority. Article 60 (Confidentiality, etc.) Any person who is or was engaged in the business stated in the following Subparagraphs shall not leak secrets acquired while performing his/her duties to any other person, nor use such secrets for other purpose than the initial one; provided, however, that the same shall not apply where specific provisions are provided in other acts: 1. The work of the Personal Information Protection Commission under Article 8; 2. The privacy impact assessment work under Article 33; and 3. The dispute mediation work by the Dispute Mediation Committee under Article 40. Article 61 (Suggestions and Advice for Improvement) (1) The Minister of Public Administration and Security may provide its opinion to the - 29 -

Select target paragraph3