(1) A personal credit rating company, a sole proprietor credit rating agency, a personal credit rating company, a credit information collection agency, and a credit information provider or user prescribed by Presidential Decree shall publicly notify the following, as prescribed by Presidential Decree:
1. A master plan for the protection and management of personal credit information (limited to persons prescribed by Presidential Decree in consideration of total assets, number of employees, etc.);
2. The type and purpose of use of credit information under its management;
3. Persons provided with credit information;
4. Types of the rights of credit data subjects and the methods of exercising such rights;
5. Types, percentages, and periods of credit information to be reflected in credit rating (limited to a personal credit rating company, a sole proprietor credit rating company, and a corporate credit inquiry company engaged in the business affairs of providing corporate credit ratings and technology credit ratings);
6. Matters provided in Article 30(1)6 and 7 of the Personal Information Protection Act;
7. Other matters prescribed by Presidential Decree in relation to the processing of credit information.
(2) Where any matters publicly notified under the subparagraphs of paragraph (1) are changed, the methods referred to in Article 30(2) of the Personal Information Protection Act shall apply mutatis mutandis thereto.[This Article Wholly Amended on Feb. 4, 2020]