(Unofficial Translation) No. 136 Chapter 69 Gor Government Gazette 27 May 2019 shall be prohibited from attending such meeting. The meeting of the commission supervising the Office of Personal Data Protection Committee may be undertaken by electronic means, as prescribed by the Committee. Section 54 The Commission Supervising the Office of Personal Data Protection Committee shall have the following powers and duties: (1) to prescribe administration policy and give approval to the Office’s operation plan; (2) to issue rules governing the organization, financial matters, human resources administration, general administrative works, internal audit, including welfares and support services of the Office; (3) to approve the annual operation plan, annual spending plan and annual budget of the Office; (4) to control the administration and operation of the Office and the Secretary-General to be in accordance with this Act and other related laws; (5) to appoint a selection committee for the selection of the Secretary-General; (6) to determine any appeals against the administrative orders of the Secretary-General in the part of the Office’s administration; (7) to evaluate the result of the Office’s operation and the SecretaryGeneral’s work performance; (8) to perform any other duties prescribed by this Act or other related laws as the duties and power of the Commission Supervising the Office of Personal Data Protection Committee or as assigned by the Committee or the Cabinet. For the rules in (2), if there is a restriction of the power of the SecretaryGeneral in entering into a juristic act with a third party, it must be published in the Government Gazette. Section 55 The commission supervising the Office of Personal Data Protection Committee shall have the power to appoint a sub-committee to perform any duties or act as assigned by the commission supervising the Office of Personal Data Protection Committee. The commission supervising the Office of Personal Data Protection Committee may appoint persons having skills or experience that will be useful for the duties performed by the commission supervising the Office of Personal Data Protection Committee as its advisers. The performance of duties and numbers of the sub-committee in paragraph one or persons in paragraph two shall be in accordance with those prescribed by the commission supervising the Office of Personal Data Protection Committee. For a meeting of the sub-committee, the substances of section 53 shall apply mutatis mutandis. Section 56 The Chairperson and members of the commission supervising the Office of Personal Data Protection Committee, advisers of the commission supervising the Office of Personal Data Protection Committee, Chairperson and members of the subcommittee appointed by the commission supervising the Office of Personal Data Protection Committee shall receive a meeting allowance or other benefits according to the rules prescribed by the Committee with the approval of the Ministry of Finance. 23

Select target paragraph3