Article 81(Processing of sensitive information and personally identifiable information) #
(1) Where unavoidable to perform the following business affairs, the NHIS (including those entrusted with the business affairs of the NHIS under Article 112 of the Act) may process information on health under Article 23 of the Personal Information Protection Act, data that constitutes a criminal history under subparagraph 2 of Article 18 of the Enforcement Decree of that Act, and data containing resident registration numbers, passport numbers, driver's license numbers, or alien registration numbers under the subparagraphs of Article 19 of that Decree: <Amended on Sep. 26, 2013; Nov. 20, 2014; Jun. 30, 2022; Jun. 20, 2023>
1. Affairs related to reporting on a workplace under Article 7 of the Act;
2. Affairs related to the services set forth in Article 14 (1) of the Act;
3. Affairs related to the payment of costs of health care benefits to soldiers, etc. in active service under Article 60 of the Act;
4. Affairs related to the settlement of costs of health care benefits under Article 61 of the Act;
4-2. Affairs related to the provision of financial information, etc. under Articles 72 and 96-2 of the Act;
4-3. Affairs related to the provision of data under Article 81-3 of the Act;
5. Affairs related to the disclosure of personal details, etc. of persons in arrears under Article 83 of the Act;
6. Affairs related to the filing of objections and administrative proceedings under Articles 87 and 90 of the Act;
7. Affairs related to reporting, etc. under Article 94 of the Act;
8. Affairs related to the forwarding of data on the reduction or omission of incomes under Article 95 of the Act;
8-2. Affairs related to a request for provision of data under Article 96 of the Act;
9. Affairs related to the payment of monetary awards under Article 104 of the Act;
10. Affairs related to the entrustment of services under Article 112 of the Act.
(2) Where unavoidable to perform the following business affairs, the Review and Assessment Service may process information on health under Article 23 of the Personal Information Protection Act and data containing resident registration numbers, passport numbers, driver's license numbers, or alien registration numbers under Article 19 of the Enforcement Decree of that Act: <Amended on Sep. 26, 2013; Nov. 20, 2014; Mar. 27, 2017>
1. Affairs related to reporting on the current status of facilities, equipment, human resources, etc. of health care institutions under Article 43 of the Act;
1-2. Affairs related to the verification of entitlement to health care benefits, etc. under Article 48 of the Act;
2. Affairs related to the services set forth in Article 63 (1) of the Act;
3. Affairs related to the filing of objections and administrative litigations under Articles 87 and 90 of the Act;
4. Affairs related to a request for provision of data under Article 96 of the Act.
(3) Where unavoidable to perform the following business affairs, health care institutions (including organizations authorized by health care institutions to act on their behalf pursuant to Article 47 (7) of the Act, in the case of subparagraph 2) may process information on health under Article 23 of the Personal Information Protection Act and data containing resident registration numbers, passport numbers, driver's license numbers, or alien registration numbers under Article 19 of the Enforcement Decree of that Act: <Added on Mar. 27, 2017; Jun. 20, 2023>
1. Affairs related to the provision of health care benefits referred to in Article 41 (1) of the Act;
2. Affairs related to claims for costs of health care benefits referred to in Article 47 (1) or (2) of the Act.
(4) Where unavoidable to perform business affairs regarding claims for the payment of health care costs under Article 49 (3) of the Act, a quasi-health care institution under Article 49 (1) of the Act (hereinafter referred to as "quasi-health care institution") may process information on health under Article 23 of the Personal Information Protection Act or data containing resident registration numbers, passport numbers, driver's license numbers, or alien registration numbers under Article 19 of the Enforcement Decree of that Act. <Added on Jun. 29, 2021; Jun. 20, 2023>
(5) Where unavoidable to perform business affairs regarding claims for the payment of insurance benefits under the former part of Article 51 (2) of the Act, a person who sells assistive devices under Article 51 (2) of the Act (hereinafter referred to as "assistive device seller") may process information on health under Article 23 of the Personal Information Protection Act or data containing resident registration numbers, passport numbers, driver's license numbers, or alien registration numbers under Article 19 of the Enforcement Decree of that Act. <Added on Jun. 29, 2021; Jun. 20, 2023>
(6) The Minister of Health and Welfare (including those delegated or entrusted with the authority of the Minister of Health and Welfare under Article 111 of the Act) may process data referred to in paragraph (1) where unavoidable to perform the following: <Amended on Mar. 27, 2017; Jun. 29, 2021>
1. Affairs related to approval for delinquency disposition under Article 81 (3) of the Act;
2. Affairs related to a request for a trial under Article 88 of the Act;
3. Affairs related to reports and inspections, etc. under Article 97 of the Act;
4. Affairs related to the disposition of suspension of operation under Article 98 of the Act;
5. Affairs related to the imposition and collection of penalty surcharges under Article 99 of the Act;
6. Affairs related to the publication of the fact of violation under Article 100 of the Act.