No. 28355
Promulgation Date 2017-10-17
Ministry of the Interior and Safety
ALL
CHAPTER I GENERAL PROVISIONS
Article 1 (Purpose)
Article 2 (Scope of Public Institutions)
Article 3 (Scope of Visual Data Processing Devices)
CHAPTER II PERSONAL INFORMATION PROTECTION COMMISSION
Article 4 (Exclusion, Challenge, and Refrainment of Commissioner)
Article 5 (Expert Committees)
Article 6 (Disclosure of Proceedings)
Article 7 (Dispatch of Public Officials, etc.)
Article 8 (Organizational Structure, Number of Staff Members, etc.)
Article 9 (Allowances for Attendance, etc.)
Article 9-2 (Procedures, etc. for Advising Improvement of Policies, Systems, and Statues)
Article 9-3 (Procedures, etc. for Assessment of Data Breach Incident Factors)
Article 10 (Operational Rule of Protection Commission, etc.)
CHAPTER III PROCEDURES TO ESTABLISH MASTER PLANS AND IMPLEMENTATION PLANS
Article 11 (Procedures, etc. to Establish Master Plans)
Article 12 (Procedures, etc. to Establish Implementation Plans)
Article 13 (Scope of Materials Requested and Methods of Request)
Article 14 (Promotion and Support of Self-Regulation)
CHAPTER IV PROCESSING OF PERSONAL INFORMATION
Article 15 (Control of Out-of-Purpose Use of Personal Information or Provision of Information to Third Parties)
Article 15-2 (Matters subject to Notification, such as Sources of Personal Information Collected, and Methods of and Procedures for Notification)
Article 16 (Methods of Destroying Personal Information)
Article 17 (Methods of Obtaining Consent)
Article 18 (Scope of Sensitive Information)
Article 19 (Scope of Personally Identifiable Information)
Article 20 Deleted.
Article 21 (Measures to Ensure Safety of Personally Identifiable Information)
Article 21-2 (Persons who must Encrypt Resident Registration Numbers)
Article 22 (Exception to Limitation to Installation and Operation of Visual Data Processing Devices)
Article 23 (Gathering Opinions on Installation of Visual Data Processing Devices)
Article 24 (Posting of Notice, etc. on Signboard)
Article 25 (Policy on Operation and Management of Visual Data Processing Devices)
Article 26 (Outsourcing of Installation and Operation of Visual Data Processing Devices by Public Institutions)
Article 27 (Guidelines for Installing and Operating Visual Data Processing Devices)
Article 28 (Measures to be Taken when Outsourcing Personal Information Processing)
Article 29 (Notification of Transfer of Personal Information Following Business Transfer, etc.)
CHAPTER V SAFEGUARD OF PERSONAL INFORMATION
Article 30 (Measures to Ensure Safety of Personal Information)
Article 31 (Details of Privacy Policy and Methods for Disclosure thereof, etc.)
Article 32 (Functions of Privacy Officer and Requirements for Designation, etc.)
Article 33 (Registered Items of Personal Information Files)
Article 34 (Registration, Disclosure, etc. of Personal Information Files)
Article 34-2 (Criteria, Method, Procedure, etc. for Certification of Personal Information Protection)
Article 34-3 (Fees for Certification of Personal Information Protection)
Article 34-4 (Revocation of Certification)
Article 34-5 (Follow-up Management of Certification)
Article 34-6 (Institutions Specializing in Certifying Personal Information Protection)
Article 34-7 (Certification Mark and Promotion)
Article 34-8 (Qualifications for Certification Examiners for Personal Information Protection and Grounds for Disqualification)
Article 35 (Object of Privacy Impact Assessment)
Article 36 (Consideration at the time of Privacy Impact Assessment)
Article 37 (Designation of PIA Institutions and Revocation of Designation)
Article 38 (Criteria, etc. for Privacy Impact Assessment)
Article 39 (Scope of Data Breach Notification and Where to Report)
Article 40 (Method and Procedure for Data Breach Notification)
Article 40-2 (Criteria, etc. for Imposition of Penalty Surcharges)
CHAPTER VI GUARANTEE OF RIGHTS OF DATA SUBJECTS
Article 41 (Procedures, etc. for Access to Personal Information)
Article 42 (Limitation to, and Postponement and Denial of, Access to Personal Information)
Article 43 (Correction, Erasure, etc. of Personal Information)
Article 44 (Suspension, etc. of Processing Personal Information)
Article 45 (Scope, etc. of Representative)
Article 46 (Confirmation of Data Subjects or Representatives)
Article 47 (Amounts of Fees, etc.)
Article 48 (Establishing, etc. Access Request Support System)
CHAPTER VII PERSONAL INFORMATION DISPUTE MEDIATION
Article 48-2 (Ex Officio Members)
Article 49 (Composition and Operation of Mediation Panels)
Article 50 (Secretariat)
Article 51 (Operation of Dispute Mediation Committee, etc.)
Article 52 (Incidents Eligible for Collective Dispute Mediation)
Article 53 (Commencement of Collective Dispute Mediation Proceedings)
Article 54 (Applications for Participation in Collective Dispute Mediation Proceedings)
Article 55 (Collective Dispute Mediation Proceedings)
Article 56 (Allowances and Travel Expenses)
Article 57 (Dispute Mediation Rule)
CHAPTER VIII SUPPLEMENTARY PROVISIONS AND PENALTY PROVISIONS
Article 58 (Advices for Improvements and Disciplinary Action)
Article 59 (Reporting on Infringements, etc.)
Article 60 (Requests for Materials and Inspections)
Article 61 (Disclosure of Results)
Article 62 (Entrustment of Authority)
Article 62-2 (Processing of Personally Identifiable Information)
Article 62-3 (Review of Regulation)
Article 63 (Criteria for Imposition of Administrative Fines)
ADDENDA
ADDENDA <Presidential Decree No. 24425, Mar. 23, 2013>
ADDENDUM <Presidential Decree No. 25531, Aug. 6, 2014>
ADDENDA <Presidential Decree No. 25751, Nov. 19, 2014>
ADDENDA <Presidential Decree No. 25840, Dec. 9, 2014>
ADDENDA <Presidential Decree No. 26140, Mar. 11, 2015>
ADDENDA <Presidential Decree No. 26728, Dec. 22, 2015>
ADDENDUM <Presidential Decree No. 26776, Dec. 30, 2015>
ADDENDA <Presidential Decree No. 27370, Jul. 22, 2016>
ADDENDUM <Presidential Decree No. 27522, Sep. 29, 2016>
ADDENDA <Presidential Decree No. 28074, May 29, 2017>
ADDENDA <Presidential Decree No. 28150, Jun. 27, 2017>
ADDENDA <Presidential Decree No. 28211, Jul. 26, 2017>
ADDENDA <Presidential Decree No. 28355, Oct. 17, 2017>