deliberation and resolution of the Commission; 6. Where it is necessary to provide personal information to a foreign government or international organization so as to perform a treaty or other international convention; 7. Where it is necessary for the investigation of crimes, indictment and prosecution; 8. Where it is necessary for the court to proceed the case; or 9. Where it is necessary for punishment, and enforcement of care and custody. (3) The personal information processor shall inform data subjects of the followings when it obtains the consent under Subparagraph 1 of Paragraph (2). The same shall apply when any of the followings is modified: 1. The recipient of personal information; 2. The purpose of use of personal information (in case of provision of personal information, it means the purpose of use of the recipient); 3. Particulars of personal information to be used or provided; 4. The period when personal information is retained and used (in case of provision of personal information, it means the period for retention and use by the recipient); and 5. The fact which data subjects are entitled to deny consent, and disadvantage affected resultantly from the denial of consent. (4) When the public institution uses personal information for other purpose than the intended one, or provides it to a third party under Subparagraphs 2 through 6, 8 and 9, the public institution shall post the legal grounds for such use or provision, purpose and scope, and other necessary matters on the Official Gazette or its Website as stated by the Ordinance of the Ministry of Public Administration and Security. (5) When the personal information processor provides personal information to a third party for other purpose than the intended one in the case applicable to any of Subparagraphs of Paragraph (2), the personal information processor shall request the recipient of personal information to restrict the purpose and method of use and other necessary matters, or to prepare for necessary safeguards to ensure the safety of personal information. In this case, the person who is requested shall take necessary measures to ensure the safety of personal information. Article 19 (Limitation to Use and Provision of Personal Information on the Part of Its Recipient) The person who receives personal information from the personal information processor shall not use personal information for other purpose than the intended one, or shall not provide it to a third party except the case applicable to any of the following Subparagraphs: 1. Where additional consent is obtained from data subjects; or 2. Where special provisions exist in other laws; - 9 -