Korean Law in English
Laws › Enforcement Decree of the Personal Information Protection Act › CHAPTER VIII SUPPLEMENTARY PROVISIONS AND PENALTY PROVISIONS

Enforcement Decree of the Personal Information Protection Act — Article 62 (Entrustment of work)

개인정보 보호법 시행령 제62조

This English translation is based on the Korean text effective 2025-03-13. The Korean law has since been amended (current version effective 2026-09-11) — check the Korean original.

(1) Deleted. <Dec. 30, 2015>

(2) The Protection Commission may entrust the work to support the provision of alternative sign-up tool subject to Article 24-2 (4) of the Act to the following institutions under Article 68 (1) of the Act: <Amended on Mar. 23, 2013; Nov. 19, 2014; Dec. 30, 2015; Jul. 26, 2017; Aug. 4, 2020; Jul. 19, 2022>

1. The Korea Local Information Research and Development Institute established under Article 72 (1) of the Electronic Government Act;

2. The Korea Internet and Security Agency;

3. A corporation, institution, or organization determined and publicly notified by the Protection Commission after being recognized as having technical and financial capacity and facilities to develop, provide, and manage the alternative sign-up tool safely.

(3) The Protection Commission (including a designating authority other than the Protection Commission in cases falling under subparagraph 10; hereafter the same shall apply in the provisions, with the exception of the subparagraphs, of paragraph (4) and paragraph (5)) may entrust the following business affairs to an institution provided in paragraph (4), under Article 68 (1) of the Act: <Amended on Mar. 23, 2013; Nov. 19, 2014; Dec. 30, 2015; Jul. 26, 2017; Aug. 4, 2020; Jul. 19, 2022; Sep. 12, 2023; Feb. 25, 2025>

1. Exchange and cooperation with international organizations and foreign personal information protection agencies for the protection of personal information under subparagraph 5 of Article 7-8 of the Act;

2. Surveys and research on statutes and regulations, policies, systems, actual conditions, etc. related to the protection of personal information under subparagraph 6 of Article 7-8 of the Act;

3. Support for and dissemination of technology development for the protection of personal information under subparagraph 7 of Article 7-8 of the Act;

4. Education and public relations regarding the protection of personal information under subparagraph 1 of Article 13 of the Act;

5. Promotion of and support for agencies and organizations related to the protection of personal information under subparagraph 2 of Article 13 of the Act;

6. Training of relevant specialists and development of criteria for privacy impact assessments under Article 33 (6) of the Act;

7. Receipt and processing of access requests under Article 35 (2) of the Act;

8. Requests for materials and inspections under Article 63 of the Act that are related to the following matters:(a) Technical assistance for reporting under the former part of Article 34 (3) of the Act;(b) Receipt and processing of, and counseling on, reports received by the Privacy Call Center pursuant to Article 62 of the Act;

9. Receipt of applications for designating an assessment institution under Article 36 (2) and receipt of reports under paragraph (6) of that Article.

10. The following matters regarding the designation of an institution specializing in managing personal information under Article 35-3 of the Act:a. Receipt of an application for designation as an institution specializing in managing personal information under Article 42-10 (1) and verification of the details of such application;b. Preliminary examination on the designation of an institution specializing in managing personal information under Article 42-10 (4);c. Verification as to whether the conditions for designation under the latter part of Article 42-12 (1) are fulfilled;

11. Operation of a personal information transmission support platform under Article 35-4 (2) of the Act.

(4) The institutions to which the Protection Commission may entrust its work regarding the matters specified in the subparagraphs of paragraph (3) shall be as follows: <Added on Jul. 19, 2022>

1. The Korea Internet and Security Agency;

2. A corporation, institution, or organization determined and publicly notified by the Protection Commission as having expertise in the field of personal information protection.

(5) Where the Protection Commission entrusts its work pursuant to paragraphs (2) through (4), it shall publicly announce the institutions to be entrusted with the affairs and details of the entrusted affairs in the Official Gazette or on its website. <Amended on Jul. 19, 2022>[Title Amended on Jul. 19, 2022]

‹ Article 61All articlesArticle 62-2 ›

Korean original (law.go.kr) · Get articles as JSON via API

For AI agents and developers — get this article as JSON, with the English and current Korean effective dates and an outdated-translation flag, from the korea-law API or as an MCP tool: https://mcp.apify.com?tools=kr-data/korea-law