Korean Law in English
Laws › Enforcement Decree of the Personal Information Protection Act › CHAPTER VI GUARANTEE OF RIGHTS OF DATA SUBJECTS

Enforcement Decree of the Personal Information Protection Act — Article 42-3 (Standards for general recipients)

개인정보 보호법 시행령 제42조의3

This English translation is based on the Korean text effective 2025-03-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

(1) “Person who ... meets the standards for facilities and technology prescribed by Presidential Decree” in Article 35-2 (2) 2 of the Act means a person who receives personal information transmitted for the purpose of verifying the authenticity or other aspects of information collected in the course of performing his or her inherent duties, using facilities and technology determined and publicly notified by the Protection Commission regarding the following matters:

1. A system related to transmission requests that conform to the standard transmission procedures and the standards for linkage with transmission systems and transmission security, etc.;

2. A system for recording and keeping transmission history and separate storage of personal information received; dld3. A system for detecting and blocking of unlawful access to personal information and preventing intrusion incidents;

4. A system to manage and control access to personal information.

(2) If a person who has fulfilled his or her obligation to take safety measures under Article 29 of the Act and has facilities and technology under paragraph (1) (hereinafter referred to as "general recipient") intends to suspend or discontinue all or part of the business affairs of receiving transmitted personal information in compliance with a request for transmission under Article 35-2 (2) of the Act (hereinafter referred to as "third-party transmission request"), he or she shall notify a specialized relay agency under Article 42-9 (1) 1 (hereinafter referred to as "specialized relay agency") of such fact in advance and register it in the personal information transmission support platform under Article 35-4 (2) of the Act (hereinafter referred to as "personal information transmission support platform").[This Article Added on Feb. 25, 2025]

‹ Article 42-2All articlesArticle 42-4 ›

Korean original (law.go.kr) · Get articles as JSON via API

For AI agents and developers — get this article as JSON, with the English and current Korean effective dates and an outdated-translation flag, from the korea-law API or as an MCP tool: https://mcp.apify.com?tools=kr-data/korea-law