Personal Information Protection Commission Revises and Enforces "Notice on the Combination and Export of Pseudonymous Information"
[Asia Economy Reporter Eunmo Koo] The Personal Information Protection Commission announced that it held the 16th Commission meeting on the 29th of last month, where it approved partial amendments to the "Notice on Pseudonymized Information Combination and Export" and implemented them starting from the 5th.
This amendment prioritizes tasks that can be improved without revising the Personal Information Protection Act and its enforcement decree, as part of the system improvement measures included in the "Pseudonymized Information Utilization Performance and Expansion Plan" announced on July 28. It reflects opinions gathered from various sectors during a two-week administrative notice period starting August 4.
According to the amendment, the scope and role of the Combination Specialized Institution will be expanded to provide comprehensive support to applicants for combination. Currently limited to combination and export, the role of the Combination Specialized Institution will be extended to include consultation, pseudonymized information processing, and analysis support, enabling the institution to assist in all stages from pseudonymization to analysis.
Unnecessary time and costs in the pseudonymized information combination process will also be minimized. Before pseudonymizing personal information, a combination key can be generated first to check the combination rate in advance, or partial information can be combined and analyzed beforehand to verify the usefulness of the combination before deciding whether to proceed or to change the information subject to combination. Additionally, to improve the inconvenience of applicants having to send large amounts of information to the Combination Specialized Institution, applicants will be able to receive a serial number verified by the Combination Key Management Institution linking the combination keys, extract only the information that can actually be combined, pseudonymize it, and then transmit it.
Furthermore, the requirements for designation as a Combination Specialized Institution have been relaxed to allow corporations, organizations, or institutions with expertise in various fields to be smoothly designated as specialized institutions. Those wishing to be designated as Combination Specialized Institutions can pre-confirm whether designation is possible with just a plan, reducing the burden of investment in facilities and equipment.
Park Sang-hee, Secretary-General of the Personal Information Protection Commission, stated, "Interest and demand for the utilization of pseudonymized information, which is key in the data economy era, are beginning to spread," adding, "The Personal Information Protection Commission will continue to faithfully implement the tasks of the 'Pseudonymized Information Utilization Performance and Expansion Plan' after this notice amendment to ensure the safe expansion of pseudonymized information utilization."
The Personal Information Protection Commission plans to publish the "Pseudonymized Information Processing Guidelines" reflecting the contents of this notice amendment within this month.
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
