Following are the main points stipulated in a set of personal information protection bills passed Friday:

The state minister in charge of information technology exercises jurisdiction over businesses that handle personal information.

Businesses are obliged to deal appropriately with personal information; if they fail to do so, the relevant minister will advise or order them to halt their improper acts.

At the request of the individual to which the information applies, businesses must disclose the relevant data, correct the data or stop using it.

Media organizations, writers and academic institutions are exempt from obligations pertaining to personal information protection.

The bills define media reports as the provision of objective information to a large number of people.

Employees of administrative entities face imprisonment or fines if they leak files containing personal data, including lists of names; steal personal information or unduly provide it to others; or use their status to collect personal information.