3. The way and procedure for the individual to exercise his/her rights provided for by this Law; and 4. Any other matter to be informed as required by law or administrative regulations. Any change to any matter stated in the preceding paragraph shall be informed to the individual. Where any matter stated in the first paragraph is informed by personal information processors through their established rules of processing of personal information, such rules shall be made available to the public and easy to access and store. Article 18 A personal information processor who is to process personal information of an individual may be allowed not to inform the individual of any matter stated in the first paragraph of the preceding Article if such matter shall be kept confidential or is not required to be disclosed according to law or administrative regulations. If, for the protection of life, health or property safety of a natural person in the case of an emergency, the individual cannot be informed in a timely manner, the individual shall be informed in a timely manner by the personal information processor after the emergency is cleared. Article 19 The retention period of personal information shall be the minimum period necessary for achieving the purpose of processing, unless any law or administrative regulations stipulate otherwise. Article 20 Two or more personal information processors who jointly decide on the purpose and method of the processing of personal information shall agree on their respective rights and obligations in the joint processing, but such agreement shall not affect the right of individuals to exercise their rights provided for by this Law against any of the personal information processors. Personal information processors who jointly process personal information shall be liable jointly and severally under the law for any damages caused due to an infringement of personal rights and interests in their joint processing of personal information. Article 21 A personal information processor contracting the processing of personal information to another party shall agree with the contracted party on the purpose, period, and method of the contracted processing, the type of personal information to be processed, any protection measure to be taken, and the rights and obligations of both parties, etc., and supervise the activities of processing of personal information carried out by the contracted party. The contracted party shall process personal information as agreed, and shall not process personal information beyond the agreed purpose and method of the contracted processing; if the contract of the contracted processing fails to become effective, becomes null and void, or is cancelled or terminated, the contracted party shall return the personal information to the contracting personal information processor or delete it, and shall not retain such information. Without the approval of the contracting personal information processor, the contracted party shall not subcontract the contracted processing of personal information to any other person. Article 22 A personal information processor who needs to transfer personal information of any individual due to a merger, division, dissolution, declared bankruptcy or any other reason shall inform the individual of the organizational or personal name and contact information of the receiving party. The receiving party shall continue to perform obligations as a personal information processor. For any change of the original purpose or method of processing, the receiving party shall obtain consent from the individual anew in accordance with this Law Article 23 A personal information processor who is to provide any personal information of an individual processed to another person shall inform the individual of the organizational or personal name and contact information of the receiving party, the purpose and method of the processing, and the type of personal information involved, and obtain specific consent from the individual. The receiving party shall process the personal information received within the scope of such purpose and method of processing as well as type of 4