Korean Law in English
Laws › Credit Information Use and Protection Act › CHAPTER VI PROTECTION OF CREDIT DATA SUBJECT

Credit Information Use and Protection Act — Article 36-2 (Explanation of results of automated evaluation and raising objections thereto)

신용정보의 이용 및 보호에 관한 법률 제36조의2

This English translation is based on the Korean text effective 2026-08-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

(1) A credit data subject may request a personal credit rating company and a credit information provider or user prescribed by Presidential Decree (hereafter in this Article, referred to as "personal credit rating company, etc.") to explain the following:

1. Whether the following act is done by automated evaluation:a. Personal credit rating;b. Determination on whether to create and maintain financial transactions prescribed by Presidential Decree (limited to credit information providers and users prescribed by Presidential Decree);c. Other acts prescribed by Presidential Decree, which are likely to undermine the protection of personal credit information if handled only with a computer or other information processing device;

2. The following matters in cases of automated evaluation:a. Results of automation evaluation;b. Major criteria for automated evaluation;c. Outline of the underlying information used in automated evaluation (hereafter in this Article referred to as "underlying information");d. Other matters prescribed by Presidential Decree, which are similar to those referred to in items a through c.

(2) An individual credit data subject may perform the following acts with respect to a private credit rating company, etc.:

1. Submission of information that is deemed advantageous to the relevant credit data subject in automated evaluation;

2. Any of the following activities, where the details of underlying information used in the automated evaluation are deemed incorrect or not up-to-date:a. Requesting correction or deletion of underlying information;b. Requesting for re-calculation of the results of automation evaluation.

(3) In any of the following cases, a personal credit rating company, etc. may reject a request from a credit data subject under paragraphs (1) and (2):

1. Where special provisions exist in this Act or other statues or it is unavoidable for performing any obligation under statutes or regulations;

2. Where complying with a request by the relevant credit data subject makes it impracticable to establish, maintain, etc. a commercial transaction relationship, including financial transactions;

3. Other cases prescribed by Presidential Decree, which are similar to those provided in subparagraphs 1 and 2.

(4) The procedures and methods for requests under paragraphs (1) and (2) and notice of rejection and other necessary matters shall be prescribed by Presidential Decree.[This Article Added on Feb. 4, 2020]

‹ Article 36All articlesArticle 37 ›

Korean original (law.go.kr) · Get articles as JSON via API