「ENFORCEMENT DECREE OF THE ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK
UTILIZATION AND INFORMATION PROTECTION」
1. Persons manufacturing and supplying the operating system of mobile devices: They shall
manufacture and provide the operating system in which there are embedded functions
by which the providers of information and communications services can obtain the
consent of the users by the methods classified in the subparagraphs of paragraph (2)
and the users can revokes their consent, and they also shall prepare and disclose
operating standards for the access authority set in the operating system so that the
persons manufacturing and supplying the software of mobile devices can easily
understand such standards;
2. Manufacturers of mobile devices: They shall install on mobile devices the operating
system in which functions to give and revoke the consent under subparagraph 1 are
embedded;
3. Persons manufacturing and providing software of mobile devices: They shall embed in
the software the operating system for which the measures under subparagraphs 1 and 2
are taken and the methods for giving and revoking consent which are suitable for mobile
devices.
[This Article Newly Inserted on Mar. 22, 2017]
Article 9-3 (Criteria for Standard Subject to Review) (1) Detailed examination criteria for each
item of under Article 23-3 (1) of the Act shall be as follows: <Amended on Aug. 17, 2012;
Aug. 4, 2020>
1. A plan for physical, technological, or administrative measures: A plan for measures
concerning the following shall be formulated:
(a) The management and operation of equipment for identification services under Article
23-3 (1) of the Act (hereinafter referred to as "identification services");
(b) The prevention of a breach on information and communications networks;
(c) The operation, security, and management of systems and networks;
(d) The protection of users and the settlement of complaints;
(e) The response to urgency and emergency;
(f) The formulation and enforcement of internal regulations on identification services;
(g) The securement of safety of an alternative means under Article 23-2 (2) of the Act
(hereinafter referred to as "alternative means");
(h) The prevention of fabrication and alteration of access records;
법제처
5
국가법령정보센터