(1) “Specialized institutions prescribed by Presidential Decree” in Article 32-2 (5) of the Act means the following:

1. The Korea Internet and Security Agency;
2. A corporation or an organization or institution designated by Notification of the Protection Commission among the corporations, organizations or institutions that satisfy all of the following requirements:
   • (a) To have at least five certification examiners for personal information protection referred to in Article 34-8;
   • (b) To have been qualified by the Protection Commission through an examination of requirements and capacity for performing its work.

(2) Detailed criteria, etc. necessary for designating a corporation, organization or institution referred to in paragraph (1) 2 and revocation of such designation shall be determined by Notification of the Protection Commission.