(1) A credit information company, MyData company, claims collection agency, credit information collection agency, and credit information provider or user (hereinafter referred to as "credit information company, etc.") may collect and process credit information. In such cases, the credit information company, etc. shall clarify the purposes of such collection and processing within the scope of business affairs prescribed by this Act or the articles of incorporation, and shall collect and process credit information by reasonable and fair means to the least extent necessary to serve such purposes pursuant to this Act and Article 3(1) and (2) of the Personal Information Protection Act. <Amended on Feb. 4, 2020>
(2) In collecting personal credit information, a credit information company, etc. shall obtain consent from the relevant credit data subject; provided, this shall not apply in any of the following cases: <Amended on Feb. 4, 2020; Mar. 14, 2023>
1. In cases falling under any of Article 15(1)2 through 7 of the Personal Information Protection Act;
2. In cases of collecting any of the following information:a. Information publicly announced or disclosed under statutes or regulations;b. Information publicly announced or disclosed through publications, broadcasting media, or media on the website, etc. of public institutions defined in subparagraph 3 of Article 2 of the Official Information Disclosure Act;c. Information disclosed by a credit data subject, directly or through a third party, on social network services, etc. In such cases, this shall be limited within the objectively recognized scope where the consent of the credit data subject reached, as prescribed by Presidential Decree;
3. Other cases prescribed by Presidential Decree as equivalent to those provided in subparagraphs 1 and 2;
4. Deleted. <Feb. 4, 2020>[This Article Wholly Amended on Mar. 11, 2015][Title Amended on Feb. 4, 2020]