Korean Law in English
Laws › Enforcement Decree of the Personal Information Protection Act › CHAPTER IV PROCESSING OF PERSONAL INFORMATION

Enforcement Decree of the Personal Information Protection Act — Article 18 (Scope of sensitive information)

개인정보 보호법 시행령 제18조

This English translation is based on the Korean text effective 2025-03-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

"Information prescribed by Presidential Decree" in the main clause, with the exception of the subparagraphs, of Article 23 (1) of the Act means the following data or information; provided, where the public institutions process any of the following data or information pursuant to Article 18 (2) 5 through 9 of the Act, the said information shall be excluded herefrom: <Amended on Sep. 29, 2016; Aug. 4, 2020>

1. DNA information acquired from genetic testing, etc.;

2. Data that constitute a criminal history record defined in subparagraph 5 of Article 2 of the Act on the Lapse of Criminal Sentences;

3. Personal information resulting from specific technical processing of data relating to the physical, physiological or behavioral characteristics of an individual for the purpose of uniquely identifying that individual;

4. Personal information revealing racial or ethnic origin.

‹ Article 17-2All articlesArticle 19 ›

Korean original (law.go.kr) · Get articles as JSON via API

For AI agents and developers — get this article as JSON, with the English and current Korean effective dates and an outdated-translation flag, from the korea-law API or as an MCP tool: https://mcp.apify.com?tools=kr-data/korea-law