devices pursuant to each Subparagraph of Paragraph (1) and the person who intends to
install and operate visual data processing devices pursuant to the proviso of Paragraph (2)
shall gather opinions of relevant specialists and interested persons through such formalities
as public hearings, information sessions, etc. stated by the Presidential Decree.
(4) The person who intends to install and operate visual data processing devices pursuant to
each Subparagraph of Paragraph (1) (hereinafter referred to as the “V/D Operator”) shall
take necessary measures including posting on a signboard so that data subjects may
recognize it with ease as stated by the Presidential Decree; provided, however, that the
same shall not apply to such facilities as stated by the Presidential Decree.
(5) The V/D Operator shall not handle arbitrarily visual data processing devices for other
purposes than the initial one, nor direct the said devices toward different spots, nor use
sound recording functions.
(6) The V/D Operator shall take necessary measures to ensure the safety pursuant to Article
29, so that personal information may not be lost, stolen, leaked, altered or damaged.
(7) The V/D Operator shall work out the appropriate policy to operate and manage visual
data processing devices as stated by the Presidential Decree. In this case, it may be
discharged to make the privacy policy pursuant to Article 30.
(8) The V/D Operator may outsource the installation and operation of visual data processing
devices; provided, however, that the public institutions considering outsourcing shall comply
with the procedure and requirements stated by the Presidential Decree.
Article 26 (Limitation to Processing Personal Information Subsequent to Consignment of
Work)
(1) The personal information processor shall, when it consigns processing of personal
information to a third party, go through such paper-based formalities as stated in the
following Subparagraphs:
1. Prevention of processing personal information for other purposes than the consigned
purpose;
2. Technical and managerial safeguards of personal information; and
3. Other things for the safe management of personal information as stated by the
Presidential Decree.
(2) The personal information processor, that consigns processing of personal information to a
third party pursuant to Paragraph (1) (hereinafter referred to as the “consignor”) shall
disclose what has been consigned and who carries out the consigned processing of personal
information (hereinafter referred to as the “consignee”) so that data subjects may recognize
it at any time with ease in such a way as stated by the Presidential Decree.
(3) The consignor shall, in case of consigning public relations of goods or services, or
soliciting of sales, notify data subjects of the work consigned and the consignee in such a
- 13 -