Chief Justice of the Supreme Court: 1. Persons recommended by privacy-related civic organizations or consumer groups; 2. Persons recommended by the trade associations composed of personal information processors; and 3. Other persons who have ample academic knowledge and experiences related with personal information. (5) The term of office for the Chairperson and Commissioners shall be three years, and their term of office may be only once extended. (6) The meeting of the Commission shall be convened by the Chairperson when the Chairperson deems it necessary or more than one quarter of Commissioners demand it. (7) The resolution of the meeting of the Commission shall be made by the affirmative votes of the majority of present Commissioners if more than half of the Commissioners are present at the meeting. (8) A secretariat shall be established within the Commission to support the administration of the Commission. (9) Other matters than those provided from Paragraphs (1) through (8), necessary to the organization and operation of the Commission, shall be stated by the Presidential Decree. Article 8 (Functions of the Commission) (1) The Commission shall deliberate and resolve the following matters: 1. The Basic Plan under Article 9 and the Implementation Plan under Article 10; 2. Matters for the improvement of policies, systems and legislation related with data protection; 3. Matters for the coordination of positions taken by public institutions with respect to the processing of personal information; 4. Matters regarding the interpretation and operation of laws and regulations related with data protection; 5. Matters regarding the use and provision of personal information under Article 18(2)v; 6. Matters regarding the result of the Privacy Impact Assessment under Article 33(3); 7. Matters regarding the suggestion of opinion under Article 61(1); 8. Matters regarding the advice of measures under Article 64(4); 9. Matters regarding the disclosure of results under Article 66; 10. Matters regarding the making and submission of the Annual Report under Article 67(1); 11. Matters referred to the meeting by the President, the Chairperson of the Commission or more than two Commissioners with respect to data protection; and 12. Other matters to be deliberated and resolved by the Commission under this Act or other laws and regulations. (2) The Commission may, if necessary for the deliberation and resolution of matters stated in Paragraph (1), ask opinions of relevant public officials, specialists in data protection, - 4 -

Select target paragraph3