「ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION」 1. Where they have obtained approval for the creation and processing of connecting information under paragraph (1) 4 by fraud or in any other improper means; 2. Where they fail to comply with the matters examined under each subparagraph of paragraph (2); 3. Where they violate the obligation to take physical, technical, or administrative measures under Article 23-6 (1); 4. Where they violate a statute or regulation related to the protection of personal information and the reason for such violation is material. (4) A person who is provided with connecting information from an identification service agency (hereinafter referred to as a "entity using connecting information") for the services under the subparagraphs of paragraph (1) may process the connecting information within the scope of purposes for which the person has been provided: Provided, That if the data subject separately consents, the connecting information may be processed within the scope of the consented purpose. (5) Matters necessary for approval procedures for creating and processing connecting information under paragraphs (1) through (4), detailed examination criteria for each approval, criteria for revoking approval, and other matters shall be prescribed by Presidential Decree. [This Article Newly Inserted on Jan. 23, 2024] [Effective date has not yet specified] Article 23-6 (Obligation to Take Safety Measures for Connecting information) (1) Where an identification service agency creates and processes connecting information, it shall take physical, technical and administrative measures to ensure safety for creating and processing the connecting information in addition to the measures under Article 29 of the Personal Information Protection Act. (2) Where an entity using connecting information provides services under the subparagraphs of Article 23-5 (1), in addition to measures pursuant to Article 29 of the Personal Information Protection Act, the entity shall store and manage the connecting information separately from resident registration numbers and take measures to ensure that the connecting information is not lost, stolen, leaked, falsified, altered, or damaged (hereinafter referred to as "safety measures"). 법제처 15 국가법령정보센 터