Laws › Enforcement Decree of the Personal Information Protection Act › CHAPTER V SAFEGUARD OF PERSONAL INFORMATION

Enforcement Decree of the Personal Information Protection Act — Article 37 (Consideration at the time of privacy impact assessment)

개인정보 보호법 시행령 제37조

This English translation is based on the Korean text effective 2025-03-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

"Matters prescribed by Presidential Decree" in Article 33 (3) 4 of the Act means the following: <Amended on Sep. 12, 2023>

1. Whether sensitive information or personally identifiable information will be processed;

2. The retention period of personal information.[Moved from Article 36; previous Article 37 moved to Article 36 <Sep. 12, 2023>]

Korean original (law.go.kr) · Get articles as JSON via API

For AI agents and developers — get this article as JSON, with the English and current Korean effective dates and an outdated-translation flag, from the korea-law API or as an MCP tool: https://mcp.apify.com?tools=kr-data/korea-law