(Attachment)

■ Full Revision Draft: Effective April 1, 2026

[Korea Gas Safety Corporation Main Website]

Korea Gas Safety Corporation Privacy Policy

Korea Gas Safety Corporation (hereinafter "KGS") processes personal information lawfully and securely in accordance with the Personal Information Protection Act and relevant regulations to protect the freedom and rights of information subjects. Pursuant to Article 30 of the Personal Information Protection Act, this Privacy Policy is established and disclosed to inform information subjects of the procedures and standards for handling personal information and to facilitate the swift and smooth resolution of related grievances. Unless otherwise stated, this policy applies to all websites operated or entrusted by KGS.

[Websites Operated by KGS]

KGS Main Website www.kgs.or.kr	Cyber Branch cyber.kgs.or.kr	Excavation Work Info Support www.eocs.or.kr

Key Personal Information Processing Labels

General personal information	One unique identifying information	Purpose of personal information processing	Retention period of Personal Information	Outsourcing of personal information processing	Request for access to personal information
※ Hover over the symbols for detailed information or refer to the full Privacy Policy below.

※ Popup displaying information when hovering the mouse cursor over a labeling item

General Personal Information

The personal information items collected vary by service.

Individual Customer Information(Education): Name, date of birth, resident (foreigner) registration number, etc.

Business Owner: Web administrator name, date of birth, web administrator email, etc.

Cyber Customer Center Information: Name, mobile phone number, etc.

Member of Excavation Work Homepage: Name, mobile phone number, etc.

Personnel Information: Employee number, name, gender, address, etc.

Business Partner: Representative name, phone number, etc.

One Unique Identifying Information

Korea Gas Safety Corporation(KGS) uses one unique identifying information.

Individual Customer Information(Education): Resident (foreigner) registration number

Business Owner: Resident registration number

Personnel Information: Resident registration number

Business Partner : Resident registration number

Purpose of Personal Information Processing

According to Article 32 of the Personal Information Protection Act, the purposes of processing the registered and disclosed personal information files are as follows:

Individual Customer Information(Education):

Management of education completers’ information (providing educational content, viewing education history, certificate inquiry and issuance, etc.)

Business Owner: Management of gas safety inspection targets (inspection, certificate inquiry and issuance, etc.)

Cyber Customer Center Information: Handling civil affairs(Q&A, improvement suggestions, complaints, standing audit hotline, civil complaint reports)

Members of Excavation Work Homepage: Homepage membership management

Personnel Information: Management of employees and executives

Business Partners : Contract execution with the corporation

Retention Period of Personal Information

The processing and retention periods for each type of personal information are as follows :

Individual Customer Information (Education) :

Semi-permanent

Business Owner: Semi-permanent

Cyber Customer Center Information : 5 years

Members of Excavation Work Homepage: Until membership withdrawal

Personnel Information : Semi-permanent

Business Partners : Semi-permanent

Outsourcing of Personal Information Processing

To ensure smooth processing of personal information, the following personal information processing tasks are outsourced as follows:

Cyber Education Center: Kbrain Co., Ltd.

Information(Security) System Maintenance: Euclidsoft Co., Ltd., Jininfra Co., Ltd., Hyosung ITX Co., Ltd., CYD Information Technology Co., Ltd.

Promotion: DS consulting Co., Ltd., Munhwagonggam Co., Ltd.

HR : Saramin Co., Ltd.

Request for Access to Personal Information

Korea Gas Safety Corporation(KGS) will strive to promptly process requests for access to personal information made by data subjects.

Processing Departments: Digital Innovation Division (Cybersecurity Team), Inspection Support Division (Excavation Work Information Support Center)

Table of Contents
	1. Purpose of Personal Information Processing		2. Items of Personal Information Processed
	3. Matters Regarding the Processing of Personal Information of Children Under the Age of “14”		4. Period of Processing and Retention of Personal Information
	5. Procedures and Methods for the Destruction of Personal Information		6. Provision of Personal Information to Third Parties
	7. Details on Outsourcing of Personal Information Processing		8. Measures to Ensure the Security of Personal Information
	9. Matters Concerning the Processing of Pseudonymized Information		10. Matters Regarding the Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information
	11. Rights, Obligations, and How to Exercise Them for Data Subjects and Their Legal Representatives		12. Personal Information Protection Officer and Department for Handling Inquiries and Complaints
	13. Department Responsible for Receiving and Processing Requests to Access Personal Information		14. Remedies for Infringement of Data Subject’s Rights
	15. Results of Personal Information Impact Assessment		16. Results of Personal Information Management Level Assessment
	17. Changes to the Privacy Policy

	1. Purpose of Personal Information Processing

Korea Gas Safety Corporation(hereinafter referred to as “KGS”) processes personal information for the following purposes and does not use it for any other purpose. If the purpose changes, necessary measures such as obtaining separate consent in accordance with Article 18 of 「the Personal Information Protection Act」 will be taken.

Individual Customer Information (Training)

We process personal information for the purpose of managing the information of individuals who have completed gas safety training. This includes providing training content, allowing users to view their training history, and enabling the inquiry and issuance of certificates.

Business Representatives

We process personal information for the purpose of managing subjects of gas safety inspections. This includes providing services such as inspections, inquiry of certificates, and issuance of certificate.

Cyber Customer Center Information

We process personal information for the purpose of handling civil complaints(Q&A, suggestions, standing audit hotline, and civil complaint report).

Excavation Work Homepage Members

We process personal information for the purpose of website membership registration and management.

HR Information

We process personal information for the purpose of personnel management of employees.

Business Partners

We process personal information for the purpose of Contract execution.

	2. Items of Personal Information Processed

KGS collects and uses the personal information of data subjects based on the following legal grounds under applicable personal information protection laws.

1. Personal Information Items Processed Without the Data Subject’s Consent

KGS processes the following personal information items without obtaining the consent of the data subject:

No.	Name of Personal Information File	Legal Basis	Items of Personal Information
1	Individual Customer Information (Training)	Article 15(1)(2) of the Personal Information Protection Act (Compliance with legal obligations), Article 15(1)(4) (Performance of a contract), Article 25-2 of the Enforcement Decree of the High-Pressure Gas Safety Control Act (Processing of unique identifying information), Article 32-2 of the Enforcement Decree of the Safety Control and Business Act of Liquefied Petroleum Gas (Processing of unique identifying information), Article 26-2 of the Enforcement Decree of the City Gas Business Act (Processing of sensitive and unique identifying information), Article 43 of the Hydrogen Economy Promotion and Hydrogen Safety Management Act (Safety Education)	User ID, Password, Name, Date of Birth, Resident (Foreigner) Registration Number
2	Business Representatives	Article 15(1)(2) of the Personal Information Protection Act (Compliance with legal obligations), Article 15(1)(4) (Performance of a contract), Article 25-2 of the Enforcement Decree of the High-Pressure Gas Safety Control Act, Article 32-2 of the Enforcement Decree of the Safety Control and Business Act of Liquefied Petroleum Gas, Article 26-2 of the Enforcement Decree of the City Gas Business Act, Article 58 of the Enforcement Decree of the Hydrogen Economy Promotion and Hydrogen Safety Management Act	Password, Main Contact Number, Web Administrator’s Name, Date of Birth, Web Administrator’s Email, Web Administrator’s Mobile Phone Number
3	HR Information	Article 15(1)(2) of the Personal Information Protection Act (Compliance with legal obligations), Article 41 of the Labor Standards Act (Employee Register), Article 48 of the Labor Standards Act (Payroll Ledger and Wage Statement), Chapter 5 of the Income Tax Act (Withholding at Source), Chapter 2 of the National Health Insurance Act (Subscribers)	[HR Information]Employee Number, Name, Nationality, Resident Registration Number, Gender, Highest Level of Education, Department, Labor Union Membership Status, Address, Telephone Number, Mobile Phone Number, Email, Academic Background, Performance Evaluation Information [Payroll]Name, Employee Number, Department, Position, Date of Appointment/Retirement, Bank Name, Account Number, Salary [Year-End Tax Settlement]Name, Age, Position, Salary, Resident Registration Number (Family Members), Employee ID, Telephone Number
4	Business Partners	Article 15(1)(4) of the Personal Information Protection Act (Performance of a contract), Article 127 of the Income Tax Act (Withholding Obligations), Article 164 of the Income Tax Act (Submission of Payment Statements), Article 32 of the Value-Added Tax Act (Tax Invoices, etc.)	[Business Entity]Client Name, Representative’s Name, Business Registration Number, Type of Business, Business Category, Telephone Number, Payment Details (Bank Name, Payment Account Number, Account Holder) [External Individual]Name, Residency Status, Resident Registration Number, Telephone Number, Mobile Phone Number, Payment Details (Bank Name, Payment Account Number, Account Holder)

2. Personal Information Items Processed with the Data Subject’s Consent

KGS processes the following personal information items with the data subject’s consent pursuant to Article 15(1)(1) of 「the Personal Information Protection Act」 (Consent).

No.

Name of Personal Information File

Purpose of Collection and Use

Items of Personal Information

1

Individual Customer Information (Training)

Education guidance and issuance of completion certificates

Postal Code, Previous Address (Eup/Myeon/Dong), New Address (Road Name), Detailed Address, Email, Telephone Number, Mobile Phone Number

2

Business Representatives

Inspection and check-up notification service

Business Representative’s Mobile Phone Number, Business Representative’s Email

3

HR Information

Employee welfare services and labor management

[HR Information]Home Ownership Status, Passport Number, Vehicle Number, Foreign Language Proficiency, Military Service/Veteran/Disability Status, Certification Information, Career Information

4

Cyber Customer Center Information

Confirmation and response to inquiries

Telephone Number

5

Excavation Work Website Members

Excavation verification service

Email, Telephone Number

6

Business Partners

Provision of services related to transactions (e.g., issuance of tax invoices)

[Business Entity]Address, Contact Person (Name, Affiliation, Email, Telephone Number)
[External Individual]Customer Email, Address, Workplace Details (Company Name, Business Registration Number, Address, Telephone Number), Customer Type

※ For more detailed information on the personal information files registered by KGS, please visit the Personal Information Protection Commission’s Privacy Portal (www.privacy.go.kr) → “Personal Services” → “Exercising Data Subject Rights” → “Request to Access Personal Information” → “Search for Personal Information Files,” and enter “Korea Gas Safety Corporation” as the organization name to view the details.

Go to Personal Information File Search

	3. Matters Regarding the Processing of Personal Information of Children Under the Age of “14”

① When collecting personal information from children under the age of 14, KGS obtains the consent of their legal guardian and collects only the minimum information necessary to provide the relevant services.
② In addition, when collecting personal information of children in connection with membership registration (gas safety education) or civil service processing on the KGS Cyber Branch website, KGS obtains separate consent from the legal guardian.
③ When collecting personal information from children under the age of 14, KGS may request only the minimum necessary information, such as the name and contact details of the legal guardian. The consent is verified through written documents, fax, or email, and KGS confirms whether the person giving consent is the legitimate legal guardian.

	4. Period of Processing and Retention of Personal Information

① KGS processes personal information within the retention and usage period stipulated by law or agreed upon by the data subject at the time of collection.
② The specific retention and processing periods for each personal information file are as follows:

No.	Name of Personal Information File	Retention Period	Personal Information Items
1	Individual Customer Information (Education)	Semi-permanent	(Required):ID, password, name, date of birth, resident (or foreigner) registration number (Optional):Postal code, old address (eup/myeon/dong), new address (road name), detailed address, email, telephone number, mobile number
2	Business Representative Information	Semi-permanent	(Required):Password, representative phone number, website admin name, date of birth, website admin email, website admin mobile number (Optional):Representative mobile number, representative email
3	Cyber Customer Service Information	5 years	(Required):Name, password, email, mobile phone number (Optional):Telephone number
4	Excavation Work Website Members	Until membership withdrawal	(Required):Name, mobile phone number, ID, password (Optional):Email, telephone number
5	HR Information	Semi-permanent	[HR] (Required):Employee ID, name, nationality, resident registration number, gender, highest education level, department, union membership status, address, phone number, mobile number, email, academic background, work performance evaluations (Optional):Home ownership status, passport number, vehicle number, language proficiency, military/veteran/disability status, licenses, work experience [Salary] (Required):Name, employee ID, department, position, date of employment/resignation, bank name, account number, salary [Year-end Tax Adjustment] (Required):Name, age, position, salary, family member registration number, employee number, phone number
6	Vendor Information	Semi-permanent	[Businesses] (Required):Vendor name, representative name, business registration number, business type, item, telephone number, payment details (bank name, account number, account holder) (Optional):Address, contact person (name, affiliation, email, phone number) [Individuals] (Required):Name, residence type, resident registration number, telephone number, mobile phone number, payment details (bank name, account number, account holder) (Optional):Customer email, address, workplace details (name, registration number, address, phone number), customer classification

	5. Procedures and Methods for the Destruction of Personal Information

① KGS promptly destroys personal information without delay when it becomes unnecessary, such as when the retention period has expired or the purpose of processing has been fulfilled.
② If the retention period agreed upon by the data subject has expired or the purpose of processing has been achieved, but the information must still be retained under other applicable laws, KGS will store the personal information in a separate database (DB) or preserve it in a different storage location.
③ The procedures and methods for the destruction of personal information are as follows:

1. Destruction Procedure
KGS selects personal information for destruction once a reason for destruction arises. The destruction is carried out after obtaining approval from the KGS Personal Information Protection Officer.

2. Destruction Methods

Personal information stored in electronic file format is irreversibly deleted using methods that prevent any possibility of recovery or reconstruction.

Personal information stored in paper documents is destroyed by shredding or incineration.

	6. Provision of Personal Information to Third Parties

① In principle, KGS processes personal information within the scope specified for the purpose of collection and use, and does not provide it to third parties or use it beyond the original purpose without the prior consent of the data subject. However, exceptions may be made in the following cases:

Where separate consent has been obtained from the data subject;

Where there are special provisions in other applicable laws;

Where it is clearly necessary to protect the urgent interests of the data subject or a third party concerning life, body, or property;

Where it is impracticable to perform duties prescribed by other laws without the use or provision of personal information beyond its original purpose;

Where it is necessary to provide information to foreign governments or international organizations for the implementation of treaties or other international agreements;

Where it is necessary for criminal investigations, indictment, or prosecution;

Where it is necessary for court proceedings;

Where it is necessary for the execution of criminal penalties, protective custody, or protective measures;

Where it is urgently required for public safety, public health, or the maintenance of public order.

② KGS may provide personal information to the following institutions without the consent of the data subject, in accordance with relevant laws and regulations:

Legal Basis	Recipient	Purpose of Provision	Items Provided
Article 18(2)(2) of the Personal Information Protection Act, Articles 12(6), 27-2, and 29 of the Anti-Corruption and Civil Rights Commission Act	Anti-Corruption and Civil Rights Commission	Public Institution Integrity Evaluation	Name, Phone Number, Email Address
Article 18(2)(2) of the Personal Information Protection Act, Article 215 of the Criminal Procedure Act	Relevant Police Agency, Prosecutor's Office	Upon request via warrant for seizure, search, or inspection	nformation within the scope of the warrant

	7. Details on Outsourcing of Personal Information Processing

① KGS entrusts the processing of personal information as follows in order to ensure the efficient handling of personal information tasks.

Entrusted Party (Trustee)	Entrusted Task
Kbrain Co., Ltd.	Outsourced operation of Cyber Education Center
Euclidsoft Co., Ltd	Maintenance and management of information systems
Jininfra Co., Ltd.	Maintenance and management of information security systems
DS Consulting Co., Ltd.	SNS promotion and operation
Munhwa Gonggam Co., Ltd.	Production of periodicals
Hyosung ITX Co., Ltd.	Operation of Excavation Construction Information Support Call Center
CYD Information Technology Co., Ltd.	“Operation of Excavation Construction Information Support Information System
Saramin Co., Ltd.	Recruitment agency services

② When entering into an outsourcing contract, KGS clearly specifies in writing, in accordance with Article 26 of the Personal Information Protection Act, matters such as prohibition of processing personal information beyond the purpose of the entrusted task, technical and managerial protective measures, restrictions on subcontracting, management and supervision of the entrusted party, and liabilities including compensation for damages. KGS also supervises whether the entrusted party safely handles personal information.

③ In accordance with Article 26(6) of the Personal Information Protection Act, if the entrusted party subcontracts the personal information processing tasks, prior consent from KGS is obtained. Information about the subcontractors and the scope of subcontracted tasks is disclosed through this Privacy Policy.

④ In the event of any changes to the entrusted tasks or entrusted parties, KGS will promptly disclose the changes through this Privacy Policy.

	8. Measures to Ensure the Security of Personal Information

KGS takes the following measures to ensure the security of personal information:

Administrative Measures : Establishment and implementation of internal management plans, and regular training for employees.

Technical Measures : Management of access rights to personal information processing systems, installation of access control systems and other related protective measures, blocking internet networks, encryption of personal information, storage and inspection of access logs, installation and updating of security programs, and inspection and reinforcement of vulnerabilities in personal information processing systems.

Physical Measures : Access control to computer rooms and data storage areas, storing documents and auxiliary storage media in secure locations with locks, safety measures against disasters and accidents, and control of the removal and entry of auxiliary storage media.

	9. Matters Concerning the Processing of Pseudonymized Information

KGS does not process pseudonymized information pursuant to Article 28-2 of the Personal Information Protection Act.

	10. Matters Regaring the Installation, Operation, and Refusal of Devices that Automatically Collect Personal Information

① KGS uses “cookies” that store user information and retrieve it periodically to provide personalized services to users.
② Cookies are small pieces of information sent by the server (HTTP) operating the website to the user's computer browser and may be stored on the user’s hard drive.
a. Purpose of Using Cookies:Cookies are used to understand which services the user has visited and their usage patterns in order to provide more convenient services.
b. Installation, Operation, and Refusal of Cookies:Users can manage cookie settings such as allowing or blocking cookies through their web browser options:
- Edge:Settings menu at the top right corner > Cookies and site permissions > Manage and delete cookies and site data
- Chrome:Settings menu at the top right corner > Privacy and security > Cookies and other site data
- Whale:Settings menu at the top right corner > Privacy > Cookies and other site data
c. Effect of Refusing Cookies:Refusing to store cookies may result in difficulties using personalized services.

	11. Rights, Obligations, and How to Exercise Them for Data Subjects and Their Legal Representatives

① Data subjects may exercise their rights to request access to, transmission of, correction, deletion, suspension of processing, and withdrawal of consent regarding their personal information held by KGS at any time (hereinafter referred to as "exercise of rights").
※ The rights of children under the age of 14 must be exercised directly by their legal representatives. For data subjects who are minors aged 14 or older, they may exercise their rights themselves or through their legal representatives regarding their personal information.

② The exercise of rights can be made to KGS via written request, telephone, email, fax (FAX), or online methods in accordance with Article 41(1) of the Enforcement Decree of the Personal Information Protection Act, and KGS will take action without delay.

Data subjects may directly view, modify, or delete their personal information anytime through the "Personal Information Inquiry/Modification" section on the website, or request access via the "Q&A" section.
[Attachment] Personal Information Access Request Form (Annex No. 8 of the Guidelines on Personal Information Processing Methods)

Data subjects may withdraw their consent for the collection and use of personal information at any time through "Membership Withdrawal."

Data subjects may request explanation or refusal of automated decision-making anytime via the "Q&A" section on the website.

③ The exercise of rights may also be carried out through a legal representative or an authorized agent. In this case, a power of attorney in the format prescribed in Annex No. 11 of the Guidelines on Personal Information Processing Methods must be submitted.
[Attachment] Power of Attorney Form (Annex No. 11 of the Guidelines on Personal Information Processing Methods)

④ Requests for access to and suspension of personal information processing may be restricted pursuant to Article 35(4) and Article 37(2) of the Personal Information Protection Act.

⑤ Requests for correction or deletion of personal information may not be accepted if the personal information is required to be retained by other laws.

⑥ KGS verifies whether the person exercising the rights is the data subject or a legitimate representative.

⑦ Data subjects may exercise their rights by contacting the following department. KGS will respond within 10 days from the date of receipt of the request (immediately in case of transmission requests).

▶ Department for Handling Personal Information Rights Requests
Department: Digital Innovation Division, AI Digital Policy Team (Cybersecurity Team)
Address: 1390 Wonjung-ro, Maengdong-myeon, Eumseong-gun, Chungcheongbuk-do
Contact: Phone: 043-750-1263 / Email: yjkwon2304@kgs.or.kr/ Fax: 043-750-1915

	12. Personal Information Protection Officer and Department for Handling Inquiries and Complaints

① KGS is fully responsible for overseeing all matters related to the processing of personal information and has appointed the following Personal Information Protection Officer to handle complaints from data subjects and provide remedies for damages related to personal information processing.Department

Role	Department	Name	Phone
Personal Information Protection Officer	Digital Innovation Division	Heo Yoon-Sil	Phone	043-750-1060
			Email	serapiza@kgs.or.kr
			Fax	043-750-1915
Personal Information Protection Departmental Officer	Inspection Support Division	Yoo Bang-hyun	Phone	043-750-1330
			Email	bhyu11@kgs.or.kr
			Fax	043-750-1917
Personal Information Protection Officer (Manager)	Digital Innovation Division (AI Digital Policy Team)	Lim Hyun-chul	Phone	043-750-1260
			Email	hclim@kgs.or.kr
			Fax	043-750-1915
	Inspection Support Division (Excavation Information Support Center)	Ko Hyeong-Jeong	Phone	02-2038-3980
			Email	khj@kgs.or.kr
			Fax	0502-1200-4501
Personal Information Protection Officer (Staff)	Digital Innovation Division AI Digital Policy Team / Cybersecurity Team	Kwon Yong-Jae	Phone	043-750-1263
			Email	yjkwon2304@kgs.or.kr
			Fax	043-750-1915
	Inspection Support Division Excavation Information Support Center)	Lee Ji-Hyeon	Phone	02-2038-3983
			Email	jh.mac@kgs.or.kr
			Fax	0502-1200-4501

② Data subjects may direct any inquiries, complaints, or requests for remedy related to the protection of personal information arising from their use of KGS services (or business) to the Personal Information Protection Officer, Departmental Personal Information Protection Officer, Personal Information Protection Manager, or Personal Information Protection Staff. KGS will respond and handle such inquiries without delay.

	13. Department Responsible for Receiving and Processing Requests to Access Personal Information

① Data subjects may submit requests to access their personal information pursuant to Article 35 of the Personal Information Protection Act to the following department. KGS will strive to process data access requests promptly.

Department	Personal Information Files	Responsible person	Contact
Cybersecurity Team	- Individual Customer Information (Education) - Business Owner Information - Cyber Customer Center Information - Personnel Information - Client Information	Kwon Yong-Jae	▪ Phone : 043-750-1263 ▪ Fax : 043-750-1915 ▪ Email : yjkown2304@kgs.or.kr
Excavation Information Support Center	- Excavation Work Information Support Website Members	Lee Ji-Hyeon	▪ Phone : 02-2038-3983 ▪ Fax : 0502-1200-4501 ▪ Email : jh.mac@kgs.or.kr

② In addition to the department responsible for receiving and processing access requests as described in paragraph 1, data subjects may also submit requests to access their personal information through the Personal Information Protection Commission’s “Personal Information Portal” (www.privacy.go.kr).
▶ Personal Information Protection Commission Personal Information Portal → Personal Services → Exercise of Data Subject Rights → Request for     Access to Personal Information → Access Request (Real-name verification via Public I-PIN or similar is required)
[Link to Access Request]

③ If a data subject is dissatisfied with, or wishes to challenge, the measures taken in response to a request for access or other related requests, the data subject may file an objection in accordance with the procedure set out in the notice of decision, and the outcome will be notified within 10 days of receipt of the objection.

	14. Remedies for Infringement of Data Subject’s Rights

① Data subjects may seek remedies for personal information infringements by applying for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency (KISA) Personal Information Infringement Report Center, and other related organizations. For other reports or consultations regarding personal information infringements, please contact the following institutions:

1. Personal Information Dispute Mediation: 1833-6972 (without area code) Website: www.kopico.go.kr

2. Personal Information Infringement Report Center: 118 (without area code) Website: privacy.kisa.or.kr

3. Supreme Prosecutors’ Office: 1301 (without area code) Website: www.spo.go.kr

4. National Police Agency: 182 (without area code) Website: ecrm.cyber.go.kr

② Persons who suffer infringement of their rights or interests due to disposition or inaction by the head of a public institution regarding requests under Articles 35 (Access to Personal Information), 36 (Correction or Deletion of Personal Information), and 37 (Suspension of Personal Information Processing) of 「the Personal Information Protection Act」 may file an administrative appeal in accordance with the Administrative Appeals Act.

▶ Central Administrative Appeals Commission: 110 (without area code) Website: www.simpan.go.kr

	15. Results of Personal Information Impact Assessment

① KGS conducts a “Personal Information Impact Assessment” in accordance with Article 33 of the Personal Information Protection Act to investigate, analyze, and evaluate the impact of its personal information processing systems on the personal information files of data subjects.

② KGS has performed impact assessments on the following personal information files.

Name of Personal Information File	Items of Personal Information Recorded in the File	Year of Impact Assessment
Individual Customer Information	ID, password, name, date of birth, resident (foreigner) registration number, postal code, old address (eup/myeon/dong), new address (street name), detailed address, email, phone number, mobile phone number	2022년
Business Owner	Password, main phone number, web administrator name, date of birth, web administrator email, web administrator mobile phone, business owner mobile phone, business owner email	2022년
Cyber Customer Center Information	Name, password, email, mobile phone number, phone number	2022년

	16. Results of Personal Information Management Level Assessment

① KGS conducts an annual “Personal Information Protection Level Assessment” carried out by the Personal Information Protection Commission in accordance with Article 11-2 of the Personal Information Protection Act to securely manage data subjects' personal information.

② In the 2024 Personal Information Management Level Diagnosis, KGS received a grade of ‘B’.

③ Based on the results of the 2024 Personal Information Protection Level Assessment, KGS is strengthening its management system, including revising the internal management plan, to prevent personal information leaks.

	17. Changes to the Privacy Policy

① This Privacy Policy applies from April 1, 2026.

② Previous versions of the Privacy Policy can be found below:

☞ Applied from September 15, 2025 to March 31, 2026

☞ Applied from August 1, 2024 to September 14, 2025

☞ Applied from March 1, 2024 to July 31, 2025

☞ Applied from August 1, 2024 to February 28, 2025

☞ Applied from March 1, 2024 to July 31, 2024

☞ Applied from November 10, 2023 to February 29, 2024

☞ Applied from August 1, 2022 to November 9, 2023

☞ Applied from March 1, 2022 to July 31, 2023

☞ Applied from August 1, 2022 to February 28, 2023

☞ Applied from March 1, 2021 to July 31, 2022

☞ Applied from February 1, 2021 to February 28, 2022

☞ Applied from August 1, 2019 to January 31, 2021

☞ Applied from February 11, 2019 to July 31, 2019

☞ Applied from October 18, 2018 to February 10, 2019

☞ Applied from July 31, 2018 to October 17, 2018

☞ Applied from July 18, 2017 to July 31, 2018

☞ Applied from March 13, 2017 to July 17, 2017

☞ Applied from April 1, 2015 to March 12, 2017

☞ Applied from March 20, 2013 to March 31, 2015

☞ Applied from January 1, 2008 to March 19, 2013

※ Excavation Work Information Support Center: Applied from April 1, 2015 to November 9, 2023