7. "Visual data processing devices" shall mean the devices installed continuously at a certain
place to take pictures of a person or image of things, or transmit such pictures via wired
or wireless networks, which are designated by the Presidential Decree.
Article 3 (Personal Information Protection Principles)
(1) The personal information processor shall make the personal information processing
purposes explicit and specified, and shall collect minimum personal information lawfully
and fairly to the extent necessary for such purposes.
(2) The personal information processor shall process personal information compatibly to the
extent necessary to attain the personal information processing purposes, and shall not use
beyond such purposes.
(3) The personal information processor shall ensure the personal information accurate,
complete and up to date to the extent necessary to attain the personal information
processing purposes.
(4) The personal information processor shall manage personal information in a safe way
according to the personal information processing methods, types, etc. in consideration of
the possibility that the data subject rights are infringed upon and the degree of such risks.
(5) The personal information processor shall make public its privacy policy and other
personal information processing matters, and shall guarantee the data subject rights
including the right to access to his/her personal information.
(6) The personal information processor shall process personal information in a manner to
minimize the possibility to infringe upon the privacy of data subject.
(7) The personal information processor shall make efforts to process personal information in
anonymity, if possible.
(8) The personal information processor shall make efforts to obtain trust of data subjects by
observing and carrying out such duties and responsibilities as stated in this Act and other
related laws and regulations
Article 4 (Rights of Data Subject)
The data subject shall, in relation to the processing of his/her own personal information,
have the rights stated in the following Subparagraphs:
1. The right to be informed of the processing of such personal information;
2. The right to consent or not, and to elect the scope of consent, to the processing of such
personal information;
3. The right to confirm the processing of such personal information, and to demand access
(including the issuance of certificate, hereinafter the same applies) to such personal
information;
4. The right to suspend processing of, and to make correction, deletion and destruction of
such personal information; and
- 2 -