후원로펌 뉴스레터

본문 바로가기

HOME > 후원로펌 현황 > 후원로펌 뉴스레터

후원로펌 현황

[법무법인 광장] Major Amendments to the Credit Information Act Passed by National Assembly

페이지 정보

작성일20-01-20 16:19

본문


상단 이미지

Major Amendments to the Credit Information Act
Passed by National Assembly

On January 9, 2020, amendments to the Credit Information Use and Protection Act (“Credit Information Act”) were passed during a plenary session of the National Assembly.  These amendments to the Credit Information Act (“Amendments”) were passed in tandem with respective amendments to the Personal Information Protection Act (PIPA”) and the Act on Promotion of Information and Communications Network Utilization and Information (“Network Act”).  The PIPA, the Network Act, and the Credit Information Act are collectively referred to as Korea’s 3 major data privacy laws (“Three Data Laws”).  The main objectives behind the Amendments are (1) promotion of the data economy in the financial sector by, inter alia, establishing the statutory basis for the analysis and utilization of big data, (2) reform of the legal framework for the regulation of industries related to credit information by, inter alia, introducing the concept of credit information self-management (“MyData”) and revamping the existing system for regulating credit bureaus (“CBs”) that carry out credit evaluations of individuals, and (3) reinforcement of data protection in the financial sector by, inter alia, introducing the right to request transmission of personal credit information and the right to challenge decisions based on profiling.

The Amendments are expected to serve as a catalyst for the increased utilization of big data and convergence of data in the financial sector, and lead to the emergence of innovative services (e.g., customized financial services catering to the needs of individual customers) and new industries related to data (e.g., MyData services, non-financial CBs).  In addition, the Amendments have been designed to enhance interoperability with the European Union’s General Data Protection Regulation (“GDPR”) as well as the data protection regulations of other countries and thus, are expected to facilitate the processing of data by Korean companies when they conduct business abroad.

The Amendments are expected to go into effect in late July or early August of this year (which will be 6 months from their promulgation date).  Key provisions of the Amendments are summarized below.

 1.Key Provisions of the Amendments
 기호 이미지In line with the aforementioned amendments to the PIPA, the Amendments also introduce the concepts of “pseudonymized information”, “pseudonymization”, and “anonymization”. Please refer to our newsletter dated January 14, 2020 (“Major Amendment to the Personal Information Protection Act Passed by National Assembly”) for more information on these concepts.
 기호 이미지The Amendments permit credit information handlers to provide personal credit information to third parties without the consent of personal credit information subjects to the extent such provision is not inconsistent with the original purpose of collection after considering factors such as the circumstances surrounding the collection of personal credit information, the potential impact to personal credit information subjects, and whether necessary safeguards have been implemented to ensure the security of personal credit information.
 기호 이미지The Amendments breakdown CBs into subcategories (whereas under the current Credit Information Act, CBs are defined rather broadly without such distinction) such as “CBs for individuals,” “CBs for sole proprietorships, ” and “CBs for corporations” while relaxing regulatory entry barriers for each subcategory.  In addition, CBs are no longer prohibited from engaging in other types of commercial enterprise so long as there is no risk of harming credit information subjects or undermining the soundness of credit transactions due to such commercial endeavors.
 기호 이미지The concept of MyData services will be introduced which will allow individuals to, among other things, conduct integrated searches of their own credit information as well as carry out credit and asset self-management.
 기호 이미지The consent system will be streamlined (simplified and visualized) to enable credit information subjects to provide their “informed consent” and a rating system will be introduced for the use of information, such that different ratings will be assigned to the use of information depending on the risk(s) and benefit(s) associated with such use so that credit information subjects can make informed decisions when providing their consent (taking effect within 1 year from the promulgation date of the Amendments).
 기호 이미지Credit information subjects will be granted the right to challenge (i.e., request explanations and raise objections) decisions based on profiling (i.e., automated processing of data to evaluate certain things about an individual).
 기호 이미지Credit information subjects will be granted the right to request financial companies and public institutions to transmit their personal credit information (i.e., right to data portability of personal credit information) to other financial companies (taking effect within 1 year from the promulgation date of the Amendments).
 기호 이미지The maximum amount of punitive damages that may be imposed on financial companies and other credit information handlers in connection with the leakage of personal credit information has been increased to 5 times (from the current 3 times) the amount of proven damages.
 2.Implications for companies likely to be affected by the Amendments
 기호 이미지With the introduction of the concepts of pseudonymized information and anonymized information, companies are advised to review the scope of data processing that will be permitted under the amended Credit Information Act without the need to obtain consent as well as the methods to utilize pseudonymized information, safeguards to prevent the combination of data, and ex post facto control measures.
 기호 이미지In light of the expected changes in the legal framework for the regulation of CBs, companies planning to expand into the CB business are advised to carefully consider the conditions for entry into this business segment, potential synergies with their existing business, and growth opportunities as well as constraining factors.
 기호 이미지With the introduction of MyData services, the Amendments will serve to minimize entry barriers for Fintech companies.  Accordingly, companies planning to provide MyData services are advised to begin preparations in advance to obtain necessary licenses and approvals.
 기호 이미지Companies are advised to pay special attention to the changes to the legal provisions governing consent and the newly created rights that will be granted to credit information subjects under the amended Credit Information Act.  In particular, financial regulatory authorities are expected to establish and announce corresponding amendments to consent forms and other detailed measures prior to the effective date of the amended Credit Information Act and thus, companies are advised to continue monitoring related developments on this front.
 기호 이미지Given that the Financial Services Commission has announced its intention to hold future discussions to canvass public opinion for corresponding amendments to the implementing rules (e.g., the Enforcement Decree of the Credit Information Act) of the Credit Information Act, companies are advised to closely monitor the amendment process and to provide their input as necessary to promote their business interests.
 기호 이미지Companies are also advised to closely review the amendments to the PIPA and the Network Act that were passed by the National Assembly along with the Amendments, and make the necessary preparations to their practices in light of the changes that are expected to occur once these amendments take effect.
─ CONTACT ─
Kwang Bae PARK
Kwang Bae PARK
T: +82.2.772.4343
E: kwangbae.park
@leeko.com
Profile >
Jongsoo (Jay) YOON
Jongsoo (Jay) YOON
T: +82.2.6386.6601
E: jay.yoon
@leeko.com
Profile>
Hyun Koo KANG
Hyun Koo KANG
T: +82.2.772.4429
E: hyunkoo.kang
@leeko.com
Profile>
Hwan Kyoung KO
Hwan Kyoung KO
T: +82.2.2191.3057
E: hwankyoung.ko
@leeko.com
Profile>
For more information pertaining to this newsletter, please contact the attorneys identified on the right.
The Lee&Ko Legal Newsletter is provided for general information purposes only and should not be considered as the rendering of legal advice for any specific matter. If you no longer wish to receive our newsletter service, please click here or reply to this email stating UNSUBSCRIBE in the subject line. The contects and opinions expressed in the Lee&Ko Legal Newsletter are protected by law against any unauthorized use.
후원로펌 뉴스레터 목록
번호 제목 날짜
2625 [법무법인(유한) 대륙아주] 주간입법동향_vol.157 2024-03-27
2624 [법무법인(유) 광장] EU 공급망 실사지침(EU CSDDD) 관련 최근 입법 동향 2024-03-27
2623 [법무법인(유한) 태평양] 공급망 실사지침의 EU 이사회 통과 2024-03-25
2622 [법무법인(유한) 태평양] 보건복지부, ‘지출보고서’ 공개 운영 지침 발표 및 시사점 2024-03-25
2621 [법무법인(유) 율촌] 돌관공사비 클레임 프로세스 및 준비사항 2024-03-25
2620 [법무법인(유) 율촌] 對미국 에너지, 친환경 전기차 산업 투자 관련 대선 리스크 관리 전략 2024-03-25
2619 [법무법인(유) 율촌][율촌 입법 위클리 2024-09호] 22대 총선 주요 정당 정책 비교 등 첨부파일 2024-03-25
2618 [법무법인(유) 화우] 개인정보보호, 24년 주요이슈 분석 2024-03-22
2617 [법무법인(유) 화우] 게임유저 소송특례 게임산업법 개정안 발의 2024-03-22
2616 [법무법인(유) 화우] EU 의회, AI 법 가결 2024-03-22
2615 [법무법인(유) 화우] 여유자금 투자 방법을 정한 자산유동화계획에 따르지 않고 체결된 계약이 사법상 무효임을 확인한 최초의 대법원 판결(대법원2023다259262) 2024-03-22
2614 [법무법인(유) 화우] 美 SEC, 기후공시 의무화 규정 확정 2024-03-22
2613 [법무법인(유) 화우] 상장사 M&A 제도개선을 위한 1 공시강화, 2 외부평가제도 개선, 3 합병가액 산정규제 개선 2024-03-22
2612 [법무법인(유한) 태평양] 근로자파견 관련 최신 대법원판결의 시사점 2024-03-21
2611 [법무법인(유한) 태평양] 코리아 디스카운트 해소를 위한 일반주주 이익 보호 제도개선 동향 2024-03-21
게시물 검색

사단법인 인하우스카운슬포럼 In-House Counsel Forum

주소 : 서울시 강남구 테헤란로 625, 17층 | 고유번호 : 107-82-14795| 대표자 : 박철영| 대표전화 : 02-6091-1998

E-mail : reps@ihcf.co.kr

Copyright(C) IHCF KOREA. ALL RIGHTS RESERVED.

모바일 버전으로 보기