civic organizations and related operators, and request relevant materials from the authorities concerned. Article 9 (Basic Plan) (1) The Minister of Public Administration and Security shall establish the Data Protection Basic Plan (hereinafter referred to as the “Basic Plan”) every three years in consultation with the head of central administrative department or agency concerned, and submit it to the Commission, and shall carry out the Basic Plan subject to the deliberation and resolution of the Commission. (2) The Basic Plan shall include the followings: 1. The basic goals and intended directions of data protection; 2. The improvement of data protection systems and legislation; 3. Countermeasures to prevent privacy violation; 4. How to facilitate self-regulation for data protection; 5. How to activate education and public relations for data protection; 6. Training and fostering specialists in data protection; and 7. Other matters necessary for data protection. (3) The National Assembly, the Court, the Constitutional Court and the National Election Commission may establish and implement its own basic plan for data protection of relevant institutions including affiliated entities. Article 10 (Implementation Plan) (1) The head of central administrative department or agency shall establish the implementation plan for data protection each year in accordance with the Basic Plan and submit it to the Commission, and shall carry out the implementation plan subject to the deliberation and resolution of the Commission. (2) The matters necessary for the establishment and carrying out of the implementation plan shall be stated by the Presidential Decree. Article 11 (Request for Materials) (1) The Minister of Public Administration and Security may, for the efficient establishment and carrying out of the Basic Plan, request materials or suggestions regarding the actual state of regulatory compliance and personal information management, etc. by personal information processors from personal information processors, the head of central administrative departments or agencies concerned, the head of local governments and relevant organizations, etc. (2) The head of central administrative department or agency may, for the efficient establishment and carrying out of the implementation plan, request the materials stated in Paragraph (1) from personal information processors in the field under its jurisdiction. - 5 -

Select target paragraph3