(1) Any person who violates Article 42(1) or (3) shall be punished by imprisonment for not more than 10 years or by a fine not exceeding 100 million won:(2) Any of the following persons shall be punished by imprisonment for not more than five years or by a fine not exceeding 50 million won: <Amended on Nov. 28, 2017; Feb. 4, 2020>
1. Any person who engages in a credit information business, MyData business, or claims collection business without obtaining permission therefor, in violation of Article 4(1);
2. Any person who obtains permission or authorization under Article 4(2) or 10(1) by fraud or other improper means;
3. Deleted. <Feb. 4, 2020>
4. Any person who violates Article 17(6);4-2. A person who combines data sets, in violation of Article 17-2(1);
5. Any person who, without authorization, changes or deletes any information in a credit information computer system under Article 19(1) or make it otherwise unusable, or a person who, without authorization, retrieves, duplicates or uses in other ways such credit information;5-2. A person who provides the services of a credit information collection agency, without obtaining permission for a credit information collection agency, in violation of Article 25(1);5-3. A person who entrusts claims collection service to a person other than a claims collection agency, in violation of Article 27-2;
6. Any person who violates Article 32(1) or (2) (including cases applied mutatis mutandis under Article 34) and a person who is provided with or uses personal credit information while knowing the circumstance;
7. Any person who violates Article 33 (including cases applied mutatis mutandis under Article 34);7-2. A person who processes pseudonymized information for the purpose of uniquely identifying an individual for profit-making or improper purposes, in violation of Article 40-2(6);
8. Any person who violates Article 42(4).
(3) Any of the following persons shall be punished by imprisonment for not more than three years or by a fine not exceeding 30 million won: <Amended on Feb. 4, 2020>
1. Any person who conducts business during a period of business suspension under Article 14(2);1-2. A person who provides a client with false information, in violation of Article 22-7(1)1;1-3. A person who forces a request for investigation of credit information, in violation of Article 22-7(1)2;1-4. A person who forces a person subject to investigation of credit information to provide investigation data and answers, in violation of Article 22-7(1)3;1-5. A person who investigates privacy or the like, other than commercial transaction relationships including financial transactions, in violation of Article 22-7(1)4;
2. A person, not being a credit information collection agency, who establishes the Common Computer Network under Article 25(6);
3. A person who finds out a certain person's whereabouts, etc., in violation of the main clause of Article 40(1)4;3-2. A person who uses titles, including "intelligence service agent", "detective", or other titles similar thereto, in violation of Article 40(1)5;
4. Any person who violates Article 41(1);
5. Any person who has failed to verify whether an agent of recruitment business has used illegally acquired credit information in the recruitment business, etc., in violation of Article 41-2(1).
(4) Any of the following persons shall be punished by imprisonment for not more than one year or by a fine not exceeding 10 million won: <Amended on Feb. 4, 2020>
1. A person who becomes the largest shareholder through the acquisition, etc. of shares in a credit information company, MyData company, or claims collection agency, without obtaining approval from the Financial Services Commission, in violation of Article 9(1);1-2. Any person who fails to apply for approval, in violation of Article 9(2);
2. Any person who fails to dispose of stocks obtained without approval, in violation of an order under Article 9(3);
3. Deleted. <Feb. 4, 2020>
4. Any person who violates Article 18(2);
5. Any person who violates Article 20(2);
6. Any person who renders claims collection service without registering with the Financial Services Commission as a delegated claims collector, in violation of Article 27(3);
7. Any person who violates Article 27(4).
8. Any person who, in violation of Article 27(5), collects claims that are not the object of collection, or who renders claims collection service through a delegated claims collector who is not registered, or who has been registered with another claims collection agency, or who is suspended from his or her business;
9. Any person who renders claims collection service during a period of business suspension under Article 27(7).[This Article Wholly Amended on Mar. 11, 2015]