(1) Any head of the Protection Commission or related central administrative agency who has designated an Expert Data Combination Agency shall manage and supervise, among others, whether the Expert Data Combination Agency has maintained the work performance capacity, technologies and facilities required.
(2) An Expert Data Combination Agency shall submit the following documents to the Protection Commission or the head of the relevant central administrative agency for the management and supervision under paragraph (1), as determined and publicly notified by the Protection Commission: <Amended on Feb. 25, 2025>
1. Report on the combination and release of pseudonymized information;
2. Documents supporting that the agency continues to meet the standards for designation as an Expert Data Combination Agency;
3. Documents determined and publicly notified by the Protection Commission supporting that the agency has taken measures to secure the safety of pseudonymized information.
(3) The Protection Commission shall manage/supervise the following matters:
1. The Expert Data Combination Agency’s violation of law in the process of approving the combination and release of pseudonymized information;
2. The Applicant’s processing status with respect to pseudonymized information;
3. Other necessary matters required for the safe processing of pseudonymized information determined and publicly notified by the Protection Commission.[This Article Added on Aug. 4, 2020]