Section 31

The data subject shall have the right to receive the Personal Data

concerning him or her from the Data Controller. The Data Controller shall arrange such Personal
Data to be in the format which is readable or commonly used by ways of automatic tools or equipment,
and can be used or disclosed by automated means. The data subject is also entitled to:

(1)request the Data Controller to send or transfer the Personal Data in such

formats to other Data Controllers if it can be done by the automatic means;

(2)request to directly obtain the Personal Data in such formats that the Data

Controller sends or transfers to other Data Controllers, unless it is impossible
to do so because of the technical circumstances.

The Personal Data in paragraph one must be the Personal Data that the data subject

has given consent for the collection, use, or disclosure of such Personal Data according
to the rules under this Act, or the Personal Data that is exempted from consent requirements
under section 24 (3), or any other Personal Data referred to under section 24
as prescribed by the Committee.

The exercise of rights of the data subject in paragraph one shall not apply to the sending

or transferring of Personal Data by the Data Controller which is the performance of a task
carried out in the public interest, or for compliance with law, or such exercise of rights
shall not violate the rights and freedoms of others. In the event that the Data Controller
rejects the request by such reasons, the Data Controller shall make a record of such rejection
of the request together with reasons in the record as prescribed in section 39 .