Credit Information Use and Protection Act

신용정보의 이용 및 보호에 관한 법률

Act · 금융위원회 · English text effective 2026-08-13 · Korean current 2026-09-11

Articles

• CHAPTER I GENERAL PROVISIONS
• Article 1 Purpose
• Article 2 Definitions
• Article 3 Fostering industries related to credit information
• Article 3-2 Relationship to other statutes
• CHAPTER II PERMISSION FOR CREDIT INFORMATION BUSINESS
• Article 4 Permission for credit information business
• Article 5 Persons eligible to obtain permission for credit information business
• Article 6 Requirements for permission
• Article 7 Public announcement on permission
• Article 8 Matters to declare and report
• Article 9 Approval for change in large shareholders
• Article 9-2 Examining qualifications of largest shareholders
• Article 10 Authorization of transfer or acquisition by transfer
• Article 11 Concurrent business affairs
• Article 11-2 Incidental business affairs
• Article 12 Prohibition of use of similar title
• Article 13 Prohibition of concurrent offices by executive officers
• Article 14 Revocation of permission and suspension of business
• CHAPTER III COLLECTION AND PROCESSING OF CREDIT INFORMATION
• Article 15 Principles of collection and processing
• Article 16 null
• Article 17 Entrustment of processing
• Article 17-2 Combination of data sets
• CHAPTER IV DISTRIBUTION AND MANAGEMENT OF CREDIT INFORMATION
• Article 18 Keeping credit information accurate and up-to-date
• Article 19 Security protection of credit information computer system
• Article 20 Clarification of accountability of credit information management and archiving of business processing records
• Article 20-2 Retention period for personal credit information
• Article 21 Disposition of archived information upon closure of business
• CHAPTER V INDUSTRIES RELATED TO CREDIT INFORMATION
• SECTION 1 Credit Information Business
• Article 22 Qualifications of executive officers of credit information companies
• Article 22-2 Reporting on credit information
• Article 22-3 Principles regarding personal credit rating
• Article 22-4 Business conduct standards for personal credit rating companies
• Article 22-5 Code of conduct of sole proprietor credit rating companies
• Article 22-6 Business conduct standards for corporate credit rating inquiry companies
• Article 22-7 Code of conduct for credit inquiry companies
• SECTION 2 MyData Business
• Article 22-8 Qualifications for executive officers of MyData companies
• Article 22-9 Code of conduct for MyData companies
• SECTION 3 Use and Provision of Public Information
• Article 23 Requests for provision of credit information of public institutions
• Article 24 Use of computer data of resident registration
• SECTION 4 Credit Information Collection Agencies and Data Agencies
• Article 25 Credit information collection agency
• Article 25-2 Duties of centralized credit information collection agency
• Article 26 Committee for Intensive Management of Credit Information
• Article 26-2 Composition and operation of Committee for Intensive Management of Credit Information
• Article 26-3 Personal credit rating system verification committee
• Article 26-4 Data agencies
• SECTION 5 Claims Collection Business
• Article 27 Persons engaged in claims collection business and delegated claims collectors
• Article 27-2 Prohibition of entrustment of services to unlicensed claims collection business entity
• Article 28 null
• Article 29 null
• Article 30 null
• CHAPTER VI PROTECTION OF CREDIT DATA SUBJECT
• Article 31 Public notification of credit information utilization status
• Article 32 Consent to provision and use of personal credit information
• Article 33 Use of personal credit information
• Article 33-2 Request for transmission of personal credit information
• Article 34 Collection, use, and provision of personal identification information
• Article 34-2 Principle of consent to use of personal credit information
• Article 34-3 Consent rating for use of information
• Article 35 Fact-finding inquiries into use and provision of credit information
• Article 35-2 Duty to provide explanation about possible decline in personal credit scores
• Article 35-3 Advance notice by credit information providers and users
• Article 36 Notification of credit information giving rise to refusal of commercial transaction
• Article 36-2 Explanation of results of automated evaluation and raising objections thereto
• Article 37 Rights to withdraw consent to provision of personal credit information
• Article 38 Demand for access to and correction of credit information
• Article 38-2 Requests for notification of credit inquiry
• Article 38-3 Request for deletion of personal credit information
• Article 39 Right of access free of charge
• Article 39-2 Access to information on changes in creditors
• Article 39-3 Methods and procedures for credit data subjects to exercise rights
• Article 39-4 Notification of divulgence of personal credit information
• Article 40 Prohibitions for credit information company
• Article 40-2 Rules of conduct regarding pseudonymization and anonymization
• Article 40-3 Exceptions to application for pseudonymized data
• Article 41 Prohibited matters for claims collection agency
• Article 41-2 Verification of recruitment channels of agents of recruitment business
• Article 42 Prohibition of divulgence for non-business purposes
• Article 42-2 Imposition of penalty surcharges
• Article 43 Liability to compensate for damages
• Article 43-2 Claim for statutory damages
• Article 43-3 Guarantee of compensation for damage
• Article 44 Credit information companies association
• CHAPTER VII SPECIAL CASES CONCERNING PROVISION OF CREDIT INFORMATION TO DEBT ADJUSTMENT ORGANIZATIONS
• Article 44-2 Designation and public notice of debt adjustment organizations
• Article 44-3 Special cases concerning provision of credit information to debt adjustment organizations
• Article 44-4 Exclusion from application of other statutes
• Article 44-5 Notification of and special cases concerning provision and collection of credit information
• CHAPTER VIII SUPPLEMENTARY PROVISIONS
• Article 45 Supervision and inspection
• Article 45-2 Financial Services Commission's authority to issue orders to take measures
• Article 45-3 Request for submission of data and investigation by Protection Commission
• Article 45-4 Corrective measures of Protection Commission
• Article 45-5 Regular evaluation of status of utilization and management of personal credit information
• Article 46 Notification of content of measure for retired executive officer
• Article 47 Submission of business report
• Article 48 Hearings
• Article 49 Delegation and entrustment of authority
• Article 50 Penalty provisions
• Article 51 Joint penalty provisions
• Article 52 Administrative fines

Korean original on law.go.kr · Get this law as JSON via API