Korean Law in English
Laws › Enforcement Decree of the Personal Information Protection Act › CHAPTER VIII SUPPLEMENTARY PROVISIONS AND PENALTY PROVISIONS

Enforcement Decree of the Personal Information Protection Act — Article 62-2 (Processing of sensitive information and personally identifiable information)

개인정보 보호법 시행령 제62조의2

This English translation is based on the Korean text effective 2025-03-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

(1) The Protection Commission (including persons entrusted with the authority of the Protection Commission under Article 62 (3)) may process sensitive information and data that contain resident registration numbers, passport numbers, driver’s license numbers, or alien registration numbers referred to in Article 19, if inevitable to perform the following business affairs: <Amended on Aug. 4, 2020; Sep. 12, 2023>

1. Business affairs regarding deliberation and resolution on any matter under Article 7-9 (1) 4 through 6 of the Act;

2. Business affairs regarding preparing for and supporting the establishment of systems providing alternative sign-up tools under Article 24-2 (4) of the Act;

3. Deleted; <Sep. 12, 2023>

4. Business affairs regarding work of the Privacy Call Center established pursuant to Article 62 (3) of the Act;

5. Business affairs regarding submission of materials and inspections under Articles 63 (1) and (2);

6. Business affairs regarding preliminary fact-finding inspections conducted under Article 63-2 of the Act;

7. Business affairs regarding imposing and collecting penalty surcharges under Article 64-2 of the Act.

(2) The Dispute Mediation Committee may process sensitive information and data that contain resident registration numbers, passport numbers, driver’s license numbers, or alien registration numbers referred to in Article 19, if inevitable to perform the business affairs related to personal information dispute mediation under Articles 45, 47, and 49 of the Act. <Amended on Aug. 4, 2020; Sep. 12, 2023>

(3) Where it is unavoidable for the information transmitter or the specialized relay agency to perform the business affairs related to the request for transmission of personal information under Article 35-2 of the Act, it may process data containing a resident registration number, passport number, driver's license number, or alien registration number (limited to the resident registration number held by him or her in the case of an information transmitter) under Article 19 (limited to the case of verifying the identity of the person). <Added on Feb. 25, 2025>[This Article Added on Aug. 6, 2014][Title Amended on Aug. 4, 2020]

‹ Article 62All articlesArticle 62-3 ›

Korean original (law.go.kr) · Get articles as JSON via API

For AI agents and developers — get this article as JSON, with the English and current Korean effective dates and an outdated-translation flag, from the korea-law API or as an MCP tool: https://mcp.apify.com?tools=kr-data/korea-law