(1) The Financial Services Commission may designate a corporation or institution specialized in combining data sets pursuant to Article 17-2 and reviewing the appropriateness of anonymization pursuant to Article 40-2 (hereinafter referred to as "data agency").
(2) A data agency shall perform the following duties:
1. Combining data sets held by a credit information company, etc. and those held by a third party and transferring them;
2. Evaluating the appropriateness of anonymization by a credit information company, etc.;
3. Other duties prescribed by Presidential Decree, which are similar to those provided in subparagraphs 1 and 2.
(3) A data agency may establish an appropriateness assessment committee if necessary to conduct the duties specified in paragraph (2)1 and 2 in a specialized manner, as prescribed by Presidential Decree.
(4) A data agency shall formulate a risk management system in any of the following cases:
1. Where it performs duties referred to in paragraph (2)1 and 2, concurrently;
2. Where it performs duties prescribed in the subparagraphs of paragraph (2) as well as duties prescribed in this Act or other statutes or regulations.
(5) Criteria for and revocation of designation under paragraph (1) and matters necessary for the composition and operation of an appropriateness assessment committee shall be prescribed by Presidential Decree.[This Article Added on Feb. 4, 2020]