(Unofficial Translation)
No. 136 Chapter 69 Gor
Government Gazette
27 May 2019
(8) to recommend the Cabinet on the enactment of the Royal Decree or
reconsideration the suitability of this Act at least every five years;
(9) to provide advice or consultancy on any operation for the protection of
Personal Data of the government agency and private agency, in acting in compliance with this
Act;
(10) to interpret and render rulings with respect to the issues arising from the
enforcement of this Act;
(11) to promote and support learning skills and understanding on the protection
of Personal Data among the public;
(12) to promote and support research for the development of technology relating
to the protection of Personal Data;
(13) to perform any other acts as prescribed by this Act, or other laws, which
state the duties and power of the Committee.
Section 17
The Chairperson, the Vice-Chairperson, and Committee shall
receive a meeting allowance and other benefits in accordance with the rules prescribed by the
Cabinet.
The Chairperson of the sub-committees, the sub-committees, the Chairperson of
the expert committee and expert committee appointed by the Committee shall receive a meeting
allowance and other benefits in accordance with the rules prescribed by the Committee with
approval of the Ministry of Finance.
Section 18
The Committee shall have the power to appoint sub-committees
for considering or performing any act as prescribed by the Committee.
In the meeting of the sub-committee, the substances of sections 14 and 15 shall
apply mutatis mutandis.
Chapter II
Personal Data Protection
--------------------------Part 1 General Provisions
---------------------------Section 19
The Data Controller shall not collect, use, or disclose Personal
Data, unless the data subject has given consent prior to or at the time of such collection, use, or
disclosure, except the case where it is permitted to do so by the provisions of this Act or any other
laws.
A request for consent shall be explicitly made in a written statement, or via
electronic means, unless it cannot be done by its nature.
In requesting consent from the data subject, the Personal Data Controller shall
also inform the purpose of the collection, use, or disclosure of the Personal Data. Such request
for consent shall be presented in a manner which is clearly distinguishable from the other matters,
in an easily accessible and intelligible form and statements, using clear and plain language, and
7