Provided, the same shall not be true in the event that consent of the relevant user exists
or the subject of gathering the personal information is specified in other Acts.
(2)When gathering user personal information, an information and communications
service provider shall gather the minimum information necessary to deliver information
and communications services. They shall not refuse to provide relevant services on the
grounds that the user does not provide personal information other than the necessary
minimum information.
SECTION 2 Utilization and Provision of Personal Information
Article 24 (Utilization and Provision of Personal Information)
(1)No information and communications service provider shall use personal information
or provide it to any third person or party beyond the scope of notification stipulated in
Article 22 (2) or the specified limit in a standardized contract for information and
communications services usage with the exception of cases where there is expressed
user consent or a case falling under each of the following subparagraphs:
1.Where it is necessary to change fees for information and communications service
provision;
2.Where the personal information is provided after it is processed in such a way as to
render any specific individual unidentifiable if such personal information is necessary to
compile statistics, conduct academic research, or conduct a market survey;
3.Where special provisions exist in other Acts.
(2)Any person who is provided with users’ personal information by any information and
communications service provider shall not use the personal information for a purpose
other than the purpose for which the personal information is provided or provide such
personal information to any third person, with the exception of cases in which there is
expressed user consent or the existence of special provisions of other Acts.
(3)Information and communications service providers (referring to information and
communications service providers and other persons who are given the personal
information of users by the former; hereafter the same shall apply) shall minimize the
number of persons that can handle the users’ personal information.
(4)Any person who handles or handled users’ personal information shall not harm,
infringe upon, or disseminate any users’ personal information that was learned while in
the performance of duties.
Article 25 (Entrusting of Personal Information Processing)
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents