Article 1(Purpose) #
The purpose of these rules is to set forth the matters necessary for the matters entrusted by the Personal Information Protection Act and the enforcement decrees thereto and for the implementation thereof.
Article 2(Notice on use of personal information by public agency for other purposes or provision to third parties) #
In the event public agency uses personal information for uses other than the purpose or provides them to third parties (“Uses for Other Purposes, etc.”), it shall post the following in the agency gazzette or its Internet homepage within 30 days from placing personal information to Uses for Other Purposes, etc. pursuant to Article 18(4) of the Personal Information Protection Act (“Act”). If they are posted in the Internet homepage, it shall be posted continuously for 10 or more days, provided that the date of commencement of posting shall be no later than 30 days from the date it was put to Uses for Other Purposes, etc.
1. Date of Uses for Other Purposes, etc.
2. Legal grounds for Uses for Other Purposes, etc.
3. Goals of Uses for Other Purposes, etc.
4. Items of personal information put to Uses for Other Purposes, etc.
Article 3(Forms for ledger and documents related to personal information protection) #
① Ledger for use of personal information for uses other than purpose and provision of third parties pursuant to Article 18(2) of the Act and Article 15 of the Enforcement Decree to Personal Information Protection Act (“Decree”) shall be as set forth in attachment 1.
② Application for registration and amended registration of personal information file pursuant to Article 32(1) of the Act and Article 34(1) of the Decrees shall be in accordance with the application for registration and amended registration of personal information file set forth in attachment 2.
③ Anyone who seeks to apply for the designation as personal information impact evaluation agency pursuant to Article 37(2) of the Decrees shall attach the following documents (including electronic documents) to the application for designation as personal information impact evaluation agency in attachment 3 and submit them to the Ministry of Security and Public Administration. <Amended 2013.3.23>
1. Documents pursuant to Article 37(2)(1) to (3) of the Decrees
2. Each of the following documents pursuant to Article 37(2)(4) of the Decrees
a. Employees who are capable of implementing personal information impact evaluation under attachment 4
b. Offices and equipment related to implementing personal information impact evaluation under attachment 5
c. Documents designated by the Ministry of Security and Public Administration including documents proving the facts under Article 37(1)(1) of the Decrees
3. Proof of foreigner registration pursuant to Article 88(2) of the Immigration Act (shall be attached only when the parts under Article 37(3) of the Decrees applies)
④ The designation statement for personal information impact evaluation agency pursuant to Article 33(1) of the Act and Article 37(4) of the Decrees is as set forth in attachment 6.
⑤ Report pursuant to Article 33(6) o the Act and Article 37(6) of the Decrees shall be in accordance with report statement for amendments to personal information impact evaluation agency under attachment 7.
⑥ Request for access to personal information pursuant to Article 35(1) and (2) of the Act and Article 41(1) of the Decrees, request for correction/deletion pursuant to Article 36(1) of the Act and Article 43(1) of the Decrees and request for suspension of processing of personal information pursuant to Article 37(1) of the Act and Article 44(1) of the Decrees shall be in accordance with the application for access to personal information, correction, deletion and suspension of processing asset forth in attachment 8.
⑦ Notice of access to and partial access to personal information pursuant to Article 35(5) of the Act and Article 41(4) of the Decrees, notice of postponement of access to personal information pursuant to Article 35(3) of the Act and Article 42(2) of the Decrees and notice of refusal to access pursuant to Article 35(4) of the Act and Article 42(2) of the Decrees shall be in accordance with application for notice for results of requests for access, partial access, postponed access, and refusal of access to personal information to attachment 9.
⑧ Notice on the results of requests for correction/deletion of personal information pursuant to Article 36(6) of the Act and Article 43(3) of the Decrees and notice on the results of request for suspension of processing of personal information pursuant to Article 37(5) of the Act and Article 44(2) of the Decrees shall be in accordance with the notice for results of request for correction/deletion and suspension of processing set forth in attachment 10.
⑨ The power of attorney for the information holder pursuant to Article 45(2) shall be as set forth in attachment 11.