(1) Where a credit information company, etc. (excluding persons prescribed by Presidential Decree; hereafter in this Article and Article 40-2, the same shall apply) intends to combine data sets it owns with data sets owned by a third party, it shall do so through a data agency designated under Article 26-4.
(2) Where a data agency designated pursuant to Article 26-4 transfers data sets combined pursuant to paragraph (1) to the relevant credit information company, etc. or a third party, it shall transfer them in a pseudonymized or anonymized state.
(3) Except as provided in paragraphs (1) and (2), procedures and methods for combining, providing, and retaining data sets shall be prescribed by Presidential Decree.[This Article Added on Feb. 4, 2020]