No. 16930
Promulgation Date 2020-02-04
Personal Information Protection Commission
ALL
CHAPTER I GENERAL PROVISIONS
Article 1 (Purpose)
Article 2 (Definitions)
Article 3 (Principles for Protecting Personal Information)
Article 4 (Rights of Data Subjects)
Article 5 (Obligations of State, etc.)
Article 6 (Relationship to other Acts)
CHAPTER II ESTABLISHMENT OF PERSONAL INFORMATION PROTECTION POLICIES, ETC.
Article 7 (Personal Information Protection Commission)
Article 7-2 (Composition of the Protection Commission)
Article 7-3 (Chairperson)
Article 7-4 (Term of Office of Commissioners)
Article 7-5 (Status Guarantee for Commissioners)
Article 7-6 (Prohibition on Dual Office Holding)
Article 7-7 (Grounds for Disqualification)
Article 7-8 (Affairs under Jurisdiction of the Protection Commission)
Article 7-9 (Matters to be Deliberated and Resolved on by the Protection Commission)
Article 7-10 (Meetings)
Article 7-11 (Disqualification of, Challenge to, and Refrainment by, Commissioners)
Article 7-12 (Subcommission)
Article 7-13 (Secretariat)
Article 7-14 (Operation)
Article 8 Deleted.
Article 8-2 (Assessment of Data Breach Incident Factors)
Article 9 (Master Plan)
Article 10 (Implementation Plan)
Article 11 (Request for Materials, etc.)
Article 12 (Personal Information Protection Guidelines)
Article 13 (Promotion and Support of Self-Regulation)
Article 14 (International Cooperation)
CHAPTER III PROCESSING OF PERSONAL INFORMATION
SECTION 1 Collection, Use, Provision, etc. of Personal Information
Article 15 (Collection and Use of Personal Information)
Article 16 (Limitation to Collection of Personal Information)
Article 17 (Provision of Personal Information)
Article 18 (Limitation to Out-of-Purpose Use and Provision of Personal Information)
Article 19 (Limitation to Use and Provision of Personal Information on Part of Its Recipients)
Article 20 (Notification on Sources, etc. of Personal Information Collected from Third Parties)
Article 21 (Destruction of Personal Information)
Article 22 (Methods of Obtaining Consent)
SECTION 2 Limitation to Processing of Personal Information
Article 23 (Limitation to Processing of Sensitive Information)
Article 24 (Limitation to Processing of Personally Identifiable Information)
Article 24-2 (Limitation to Processing of Resident Registration Numbers)
Article 25 (Limitation to Installation and Operation of Visual Data Processing Devices)
Article 26 (Limitation to Personal Information Processing Subsequent to Outsourcing of Work)
Article 27 (Limitation to Transfer of Personal Information following Business Transfer, etc.)
Article 28 (Supervision of Personal Information Handlers)
SECTION 3 Special Cases concerning Pseudonymous Data
Article 28-2 (Processing of Pseudonymous Data)
Article 28-3 (Restriction on Combination of Pseudonymous Data)
Article 28-4 (Obligation to Take Safety Measures for Pseudonymous Data)
Article 28-5 (Prohibited Acts for the Processing of the Pseudonymized Information)
Article 28-6 (Imposition of Administrative Surcharges for the Processing of the Pseudonymized Information)
Article 28-7 (Scope of Application)
CHAPTER IV SAFEGUARD OF PERSONAL INFORMATION
Article 29 (Duty of Safeguards)
Article 30 (Establishment and Disclosure of Privacy Policy)
Article 31 (Designation of Privacy Officers)
Article 32 (Registration and Disclosure of Personal Information Files)
Article 32-2 (Certification of Personal Information Protection)
Article 33 (Privacy Impact Assessment)
Article 34 (Data Breach Notification)
Article 34-2 (Imposition, etc. of Penalty Surcharges)
CHAPTER V GUARANTEE OF RIGHTS OF DATA SUBJECTS
Article 35 (Access to Personal Information)
Article 36 (Rectification or Erasure of Personal Information)
Article 37 (Suspension of Processing of Personal Information)
Article 38 (Methods and Procedures for Exercise of Rights)
Article 39 (Responsibility for Compensation)
Article 39-2 (Claims for Statutory Compensation)
CHAPTER VI SPECIAL CASES CONCERNING PROCESSING OF PERSONAL INFORMATION BY PROVIDERS OF INFORMATION AND COMMUNICATIONS SERVICES OR SIMILAR
Article 39-3 (Special Cases on Consent to the Collection and Use of Personal Information)
Article 39-4 (Special Cases on the Notification and Reporting on the Divulgence of Personal Information)
Article 39-5 (Special Cases on Safeguards for Personal Information)
Article 39-6 (Special Cases on the Destruction of Personal Information)
Article 39-7 (Special Cases on Users’ Rights)
Article 39-8 (Notification of the Use History of Personal Information)
Article 39-9 (Indemnity for Losses)
Article 39-10 (Deletion and Blocking of Exposed Personal Information)
Article 39-11 (Designation of Domestic Agents)
Article 39-12 (Protection of Information Transferred Overseas)
Article 39-13 (Reciprocity)
Article 39-14 (Special Cases for Broadcasting Service Providers)
Article 39-15 (Special Cases for the Imposition of Administrative Surcharges)
CHAPTER VII PERSONAL INFORMATION DISPUTE MEDIATION COMMITTEE
Article 40 (Establishment and Composition)
Article 41 (Guarantee of Members’ Status)
Article 42 (Exclusion, Recusal, and Refrainment of Members)
Article 43 (Application for Mediation)
Article 44 (Time Limitation of Mediation Proceedings)
Article 45 (Request for Materials)
Article 46 (Settlement Advice before Mediation)
Article 47 (Dispute Mediation)
Article 48 (Rejection and Suspension of Mediation)
Article 49 (Collective Dispute Mediation)
Article 50 (Mediation Procedures)
CHAPTER VIII CLASS-ACTION LAWSUIT OVER DATA INFRINGEMENT
Article 51 (Parties to Class Action Lawsuit)
Article 52 (Exclusive Jurisdictions)
Article 53 (Retention of Litigation Attorney)
Article 54 (Application for Permission of Lawsuit)
Article 55 (Requirements for Permission of Lawsuit)
Article 56 (Effect of Conclusive Judgment)
Article 57 (Application of Civil Procedure Act)
CHAPTER IX SUPPLEMENTARY PROVISIONS
Article 58 (Partial Exclusion of Application)
Article 58-2 (Exemption from Application)
Article 59 (Prohibited Activities)
Article 60 (Confidentiality)
Article 61 (Suggestions and Recommendations for Improvements)
Article 62 (Reporting on Infringements)
Article 63 (Requests for Materials and Inspections)
Article 64 (Corrective Measures)
Article 65 (Accusation and Recommendation for Disciplinary Action)
Article 66 (Disclosure of Results)
Article 67 (Annual Reports)
Article 68 (Delegation and Entrustment of Authority)
Article 69 (Persons Deemed to be Public Officials for Purposes of Penalty Provisions)
CHAPTER X PENALTY PROVISIONS
Article 70 (Penalty Provisions)
Article 71 (Penalty Provisions)
Article 72 (Penalty Provisions)
Article 73 (Penalty Provisions)
Article 74 (Joint Penalty Provisions)
Article 74-2 (Confiscation and Collection)
Article 75 (Administrative Fines)
Article 76 (Special Exemption to Application of Provisions on Administrative Fines)
ADDENDA
ADDENDA <Act No. 11690, Mar. 23, 2013>
ADDENDA <Act No. 11990, Aug. 6, 2013>
ADDENDUM <Act No. 12504, Mar. 24, 2014>
ADDENDA <Act No. 12844, Nov. 19, 2014>
ADDENDA <Act No. 13423, Jul. 24, 2015>
ADDENDA <Act No. 14107, Mar. 29, 2016>
ADDENDUM <Act No. 14765, Apr. 18, 2017>
ADDENDA <Act No. 14839, Jul. 26, 2017>
ADDENDA <Act No. 16930, Feb. 4, 2020>