Prior to the enforcement of the Amended Personal Information Protection Act ("Amended Act") (please see the October 2015 issue for more information) beginning on May 30, 2017, the Personal Information Protection Commission began accepting notifications required for the provision of personal data to a third party by the "opt-out" method on March 1, 2017. The opt-out method is a method of providing personal data to a third party without obtaining the consent of the person concerned on the condition that the provision of information ceases upon the person's request. Under the Amended Act, the filing of a notification in advance with the Personal Information Protection Commission is required for the provision of personal data to a third party by the opt-out method. In addition, some guidelines and policies for certain specific fields (such as finance-related fields) have been published recently in preparation for the enforcement of the Amended Act. Companies should confirm whether they need to file an opt-out notification and should review their internal handling of personal information and relevant internal rules in light of the applicable guidelines.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.