(Unofficial Translation) No. 136 Chapter 69 Gor Government Gazette 27 May 2019 the commission supervising the Office of Personal Data Protection Committee. Section 61 In each year, the performance of the Secretary-General shall be evaluated in accordance with the period and method prescribed by the commission supervising the Office of Personal Data Protection Committee. Section 62 In addition to vacating office upon the expiration of the term in section 60, the Secretary-General shall vacate office upon: (1) death; (2) resignation; (3) being disqualified under section 58, or under any of the prohibited characteristics under section 59; (4) being dismissed by the commission supervising the Office of Personal Data Protection Committee due to failure to pass the performance evaluation, disgraceful behavior, negligence or dishonesty in the performance of duties, or incapability. Section 63 The Secretary-General shall have the following duties and power: (1) to manage the works of the Office for the achievements according to the Office’s missions and in accordance with the national policies and plans, strategic plans, policy of the Cabinet, of the Committee and of the commission supervising the Office of Personal Data Protection Committee and according to the rules, regulations or resolutions of the commission supervising the Office of Personal Data Protection Committee; (2) to establish regulations with respect to the operations of the Office which are not contrary to or against the laws, the Cabinet resolutions and the regulations, rules, requirements, policies, resolutions or notifications prescribed by the commission supervising the Office of Personal Data Protection Committee; (3) to act as the supervisor of the staffs and employees of the Office and to evaluate the performance of the staffs and employees of the Office according to the Office’s rules or regulations; (4) to appoint the Deputy Secretary-General and the Assistant SecretaryGeneral by the approval of the commission supervising the Office of Personal Data Protection Committee in order to act as the Secretary-General’s assistant as assigned by the SecretaryGeneral; (5) to recruit, appoint, promote, decrease or deduct the salary of, and to take disciplinary action against the staffs and employees of the Office, as well as to dismiss the staffs and employees of the Office according to the rules or regulations of the commission supervising the Office of Personal Data Protection Committee; (6) to perform any act according to the regulations, rules, requirements, policies, resolutions or notifications prescribed by the Commission Supervising the Office of Personal Data Protection Committee. The Secretary-General shall be responsible for the administration of the Office and shall directly report to the commission supervising the Office of Personal Data Protection Committee. Section 64 In the Office’s affairs related to the third party, the Secretary- 25

Select target paragraph3