“Incident is prescribed by Presidential Decree” in Article 49 (1) of the Act means any incident that satisfies all of the following conditions:

1. The number of data subjects suffering from damage or infringement on their rights shall be not less than 50 persons, except the following:
   • (a) Data subjects who have agreement with the personal information controller on the dispute settlement or compensation for damage;
   • (b) Data subjects whose dispute is based on the same cause and is dealt with by a dispute mediation body established by other statutes or regulations;
   • (c) Data subjects who have filed a lawsuit with a court regarding damages from the relevant personal information breach;
2. Major issues of the incident are common factually or legally.