(Unofficial Translation) No. 136 Chapter 69 Gor Government Gazette 27 May 2019 Section 44 In addition to the Office’s duty to carry out its operations to achieve the objectives as set out in section 43 paragraph one, the Office shall have the duty to perform academic and administrative tasks for the Committee, the commission supervising the Office of Personal Data Protection Committee, the expert committee, and the sub-committee. The Office shall also have the following duties and power: (1) to draft the master plan on the operation for the promotion and protection of Personal Data, which are consistent with policies, national strategies and relevant national plans, and to draft the master plan and corrective measures regarding the difficulties in carrying out such policies, national strategies and national plans in order to propose to the Committee; (2) to promote and support the research for the development of technology relating to the protection of Personal Data; (3) to analyze and certify the compliance with and accuracy of the standards or measures, or the supervision mechanism in connection with Personal Data protection, as well as to review and certify the Personal Data protection policy according to section 29; (4) to conduct surveys, collect information, and follow the latest updates and trends on Personal Data protection, as well as to conduct analysis and research on Personal Data protection issues that affect the country’s development, to propose to the Committee. (5) to liaise with the public sector, state enterprises, local government administration, public organizations, or other organizations of the country regarding Personal Data protection; (6) to provide consultations to government agency and private agency in acting in compliance with this Act; (7) to act as the center to provide academic services or services related to Personal Data protection to the government agency, private agencies, and the public, including to promote and provide knowledge and understanding regarding Personal Data protection; (8) to establish course outlines and provide training of the performance of the Data Controller, Data Processor, data protection officer, employees, service providers, or the people in general; (9) to enter into agreements and cooperate with organizations or agencies both domestic and international, in the matters relating to the Office’s operation carried out under the Office’s duties and power, upon obtaining the approval from the Committee; (10) to follow-up on and evaluate compliance with this Act; (11) to carry out other duties as assigned by the Committee, the commission supervising the Office of Personal Data Protection Committee, the expert committee, or the subcommittee, or as specified by law. Section 45 In carrying out the Office’s operation, apart from those stipulated under section 44, the Office shall also have the power and duties to carry out the following: (1) to hold the title to, be in the possession of, and hold the property right to properties; (2) to create rights or carry out all kinds of juristic acts to bind upon properties, as well as to carry out any other juristic acts for the purpose of carrying out the Office’s operation; (3) to provide and to give funding to support the Office’s operations; (4) to impose fees, maintenance fees, compensation, or service fees for the Office’s operations according to the Office’s objectives, in accordance with the criteria and at the rate specified by the Office, with the approval of the commission supervising the Office of Personal Data Protection Committee; (5) to carry out any other acts that the law specifies to be the duties and powers of the Office, or as assigned by the Committee, the commission supervising the Office of Personal Data Protection Committee, the expert committee, or the sub-committee. 20