Article 12 The State will actively participate in the development of international rules for personal information protection, promote international exchange and cooperation in personal information protection, and promote the mutual recognition of the rules and standards of personal information protection with other countries, regions, and international organizations. Chapter II Rules of Processing of Personal Information Section 1 General Rules Article 13 A personal information processor may process personal information of an individual only under any of the following circumstances: 1. Where consent is obtained from the individual; 2. Where it is necessary for the conclusion or performance of a contract to which the individual is a contracting party, or where it is necessary for carrying out human resources management under an employment policy legally established or a collective contract legally concluded; 3. Where it is necessary for performing a statutory responsibility or statutory obligation; 4. Where it is necessary for responding to a public health emergency, or for protecting the life, health or property safety of the natural person in the case of an emergency; 5. Where the personal information is processed within a reasonable scope to carry out any news reporting, supervision by public opinions or any other activity for public interest purposes; 6. Where the personal information, which has already been disclosed by the individual or otherwise legally disclosed, is processed within a reasonable scope and in accordance with this Law; or 7. Any other circumstance as provided by law or administrative regulations. Personal consent shall be obtained for the processing of personal information as required by the other provisions of this Law, but where any of the preceding Items 2 to 7 is applicable, personal consent is not required. Article 14 Where personal information is to be processed based on consent of an individual, such consent shall be a voluntary and explicit indication of intent given by such individual on a fully informed basis. Where specific consent or written consent shall be obtained from individuals for the processing of their personal information as provided by any law or administrative regulations, such provision shall prevail. In the event of any change of the purpose or method of processing or the type of personal information to be processed, personal consent shall be obtained anew. Article 15 Individuals shall have the right to withdraw their consent to the processing of their personal information carried out based on their consent. Personal information processors shall provide an easy way to withdraw consent. A withdrawal of consent by individuals shall not affect the validity of any activity of processing of their personal information already carried out before the withdrawal based on their consent. Article 16 Personal information processors shall not refuse to provide a product or service to individuals on the grounds that they do not consent to the processing of their personal information or they withdraw their consent, unless the processing of personal information is necessary for providing the product or service. Article 17 Prior to the processing of personal information of an individual, a personal information processor shall inform the individual of the following matters in a conspicuous way, in clear and easy-to-understand language, and in a truthful, accurate and complete manner: 1. The organizational or personal name and contact information of the personal information processor; 2. The purpose and method of processing personal information, the type of personal information to be processed and its retention period; 3