(1) A credit information company, MyData company, or claims collection agency may perform business affairs incidental to the business affairs it has obtained the relevant permission (hereinafter referred to as "incidental business affairs"). In such cases, a credit information company, MyData company, or claims collection agency shall file a report with the Financial Services Commission no later than seven days before the date it intends to commence its incidental business affairs.
(2) Incidental business affairs of a personal credit rating company shall be as follows:
1. Providing a credit data subject with a newly generated personal credit score or other results of personal credit rating;
2. Providing personal credit information or the information processed therefrom to the credit data subject or a third party;
3. Using or providing pseudonymized or anonymized information;
4. Analyzing data and providing consultations based on personal credit information and other information;
5. Developing and selling computerized processing systems, solutions, and software (including a model for personal credit rating and risk management) related to personal credit information;
6. Other business affairs prescribed by Presidential Decree as being unlikely to undermine the protection of credit data subjects or to disrupt the sound credit order.
(3) Incidental business affairs of a sole proprietor credit rating company shall be as follows:
1. Providing a sole proprietor with the newly-generated results of evaluating the credit standing of the sole proprietor;
2. Providing a sole proprietor or a third party with credit information about the sole proprietor or information processed therefrom;
3. Using or providing pseudonymized or anonymized information;
4. Analyzing data and providing consultations based on credit information and other information regarding sole proprietors;
5. Business affairs of developing and selling computerized processing systems, solutions, and software (including a model for assessing the credit standings, and managing risks, of sole proprietors) in connection with the credit information of sole proprietors.
(4) Incidental business affairs of a corporate credit inquiry company shall be as follows; provided, the incidental business affairs provided in subparagraph 1 shall be limited to corporate credit inquiry companies engaged in the business affairs of providing corporate credit ratings or providing technology credit ratings:
1. Providing the data subject or a third party with credit information on an enterprise or corporation or information processed therefrom;
2. Using or providing pseudonymized or anonymized information;
3. Analyzing data and providing consultations based on credit information and other information about enterprises and corporations;
4. Developing and selling computerized processing systems, solutions, and software (including a model for corporate credit ratings and risk management) related to credit information on enterprises and corporations;
5. Other business affairs prescribed by Presidential Decree as being unlikely to undermine the protection of credit data subjects or to disrupt the sound credit order.
(5) Incidental affairs of a credit investigation company shall be as follows:
1. Business affairs of surveying the current status of lease of real estate and movable properties and values thereof;
2. Business affairs of surveying the current status of enterprises and places of business;
3. Other business affairs prescribed by Presidential Decree as being unlikely to undermine the protection of credit data subjects or to disrupt the sound credit order.
(6) Incidental business affairs of a MyData company shall be as follows:
1. Analyzing data and providing consultations to the credit data subject based on his or her personal credit information provided to him or her;
2. Providing an account to the credit data subject to manage and use his or her personal credit information;
3. Exercising the rights set forth in the subparagraphs of Article 39-3(1) on behalf of the credit data subject;
4. Other business affairs prescribed by Presidential Decree as being unlikely to undermine the protection of credit data subjects or to disrupt the sound credit order.
(7) Incidental business affairs of a claims collection agency shall be as follows:
1. Business affairs of establishing and providing a claims management system for creditors, etc.;
2. Business affairs of issuing debt certificates defined in Article 5 of the Fair Debt Collection Practices Act under entrustment by persons prescribed by Presidential Decree;
3. Other business affairs prescribed by Presidential Decree as being unlikely to undermine the protection of credit data subjects or to disrupt the sound credit order.
(8) Where matters regarding incidental business affairs reported under paragraph (1) fall under any of the following, the Financial Services Commission may order the restriction of such incidental business affairs or the correction thereof:
1. Where they undermine the soundness of business management of a credit information company, MyData company, or claims collection agency;
2. Other cases prescribed by Presidential Decree as necessary for protecting credit data subjects and maintaining the sound credit order.
(9) An order for restriction or correction provided in paragraph (8) shall be issued in a document specifying the details and grounds thereof.[This Article Added on Feb. 4, 2020]