Article 2 (Provision of Personal Information to Third Parties) Lawjibsa will provide personal information to third parties only with the consent of the data subject or when required by specific legal provisions under Articles 17 and 18 of the Personal Information Protection Act.

Article 3 (Rights and Obligations of the Data Subject and How to Exercise Them)
① The information subject (or their legal representative if under 14 years old) may exercise the following rights related to personal information at any time:.
1. Request to access personal information
2. Request to correct any inaccuracies
3. Request to delete personal information
4. Request to suspend the processing of personal information
② To exercise the rights under Paragraph 1, the information subject can submit a request for personal information (access, correction, deletion, or suspension of processing) using the form specified in Appendix 8 of the Enforcement Rules of the Personal Information Protection Act. The request can be made in writing, by email, or by fax, and Lawjibsa will take prompt action accordingly.
③ If the information subject requests correction or deletion of personal information due to errors or other issues, the personal information will not be used or shared until the correction or deletion is completed.
④ The rights under Paragraph 1 may be exercised through a legal representative or an authorized agent. In this case, a power of attorney form, as outlined in Appendix 11 of the Enforcement Rules of the Personal Information Protection Act, must be submitted.
⑤ The information subject's request to access personal information or suspend processing may be restricted in accordance with Articles 35(5) and 37(2) of the Personal Information Protection Act.
⑥ Requests for correction or deletion of personal information cannot be made if the information is explicitly required by other laws or regulations.
⑦ When a request is made for access, correction, deletion, or suspension of processing, we verify that the requester is either the information subject or an authorized representative.

Article 4 (Destruction of Personal Information)
① Lawjibsa will, in principle, destroy personal information without delay once the retention period specified in Article 1 has expired or the purpose for processing the information has been fulfilled, and the information is no longer necessary. However, this does not apply if the information needs to be retained under other laws.
② If Lawjibsa is required by applicable laws to retain personal information instead of destroying it, the relevant personal information or files will be stored and managed separately from other personal information.
③ Lawjibsa will identify personal information that is no longer needed for processing and, with approval from the personal information protection officer, will proceed to destroy it.
④ If the personal information to be destroyed is in electronic file format, Lawjibsa will permanently delete it using a method that makes recovery impossible. For other types of records, printed materials, documents, or media, they will be shredded or incinerated.

Article 5 (Measures to Ensure the Security of Personal Information)
Lawjibsa implements the following measures to ensure the security of personal information, as required by Article 29 of the Personal Information Protection Act.
① Administrative Measures: Establishing and implementing internal management plans, minimizing the number of personnel handling personal information, and providing necessary training.
② Technical Measures: Managing access rights to personal information systems, installing access control systems, encrypting sensitive information such as personal identifiers, and using security programs.
③ Physical Measures: Controlling access to areas where personal information is stored, such as data centers and document storage rooms.

Article 6 (The Officer of Personal Information Protection)
Lawjibsa has appointed the following Personal Information Protection Officer, as required by Article 31, Paragraph 1 of the Personal Information Protection Act, to protect personal information and handle any related complaints.

The Officer of Personal Information Protection: Jae-Yoon Choi
Email: jy.choi@lawjibsa.com

The Manager of Personal Information Protection: Ji-Young Lim
Email: jy.choi@lawjibsa.com

Article 7 (Changes to the Privacy Policy)
Lawjibsa will continuously update and disclose any changes to the Privacy Policy, including the effective date and the details of the changes.