the following Subparagraphs: 1. Where the consent is obtained from data subjects; or 2. Where personal information is provided within the scope of purposes for which personal information is collected under Subparagraphs 2, 3 and 5 of Article 15(1); (2) The personal information processor shall inform data subjects of the followings when it obtains the consent under Subparagraph 1 of Paragraph (1). The same shall apply when any of the followings is modified: 1. The recipient of personal information; 2. The purpose of use of personal information of the said recipient; 3. Particulars of personal information to be provided; 4. The period when personal information is retained and used by the said recipient; and 5. The fact which data subjects are entitled to deny consent, and disadvantage affected resultantly from the denial of consent. (3) When the personal information processor provides personal information to a third party overseas, it shall inform data subjects of any of Subparagraphs of Paragraph (2), and obtain consent from data subjects. The personal information processor shall not enter into a contract for the cross-border transfer of personal information in violation of this Act. Article 18 (Limitation to Use and Provision of Personal Information) (1) The personal information processor shall not use personal information beyond the scope stated in Article 15(1), and shall not provide it to a third party beyond the scope stated in Article 17(1) and (3). (2) Notwithstanding Paragraph (1), where any of the following Subparagraphs applies, the personal information processor may use personal information for other purpose than the intended one, or provide it to a third party, unless it likely infringes upon unfairly the interest of data subjects or a third party; provided, however, that Subparagraphs 5 through 9 are applicable only to the public institutions. 1. Where additional consent is obtained from data subjects; 2. Where special provisions exist in laws; 3. Where it deems necessary explicitly for the protection, from impending danger, of life, body or economic profits of the data subject or a third party in case that the data subject or his/her legal representative is not in a position to express intention, or prior consent cannot be obtained owing to unknown addresses; 4. Where personal information is provided in a manner keeping individuals unidentifiable necessarily for the purposes of statistics and academic research, etc.; 5. Where it is impossible to carry out the work under its jurisdiction as stated in other laws unless personal information processor uses personal information for other purpose than the intended one, or provides it to a third party, and it is subject to the - 8 -