금융분야 개인신용정보보호 가이드라인 — English Edition
A foreign bank's Seoul branch wants to send customer data to head office. A fund manager collects a counterparty's resident registration number on a lease. A MyData operator is asked to transmit information it generated itself. Korea answers all three through two statutes that overlap — the Credit Information Use and Protection Act and the Personal Information Protection Act — and through this guideline, in which the Financial Services Commission and the Financial Supervisory Service set out how the two fit together in practice. It has never been published in English. This is the complete text.
| Chapter | Subject |
|---|---|
| I – II | Purpose, and the basic principles: which Act applies, the key defined terms, and the general principles of protection |
| III | Measures at each stage of processing — collection and use, consent, provision, inquiry and notification, outsourcing, business transfer, unique identifying and sensitive information, destruction |
| IV | Safe management — security measures, the credit information utilization policy, the protection officer, leakage response |
| V | The rights of credit information subjects, how they are exercised, and liability for damages |
| VI | The supervisory framework: FSC and FSS, and the Personal Information Protection Commission |
| VII – VIII | 92 questions and answers, and worked examples by sector |
The Korean original is translated in full — every bullet, every statutory extract, every table and all 92 questions and answers. The form of attribution the regulators prescribe for use of the guideline is reproduced verbatim, in Korean, at the front of the document.
Terminology follows the official English translations of the Credit Information Use and Protection Act and the Personal Information Protection Act wherever they exist. In three places this edition departs from the official English deliberately, because the official form misleads an English reader, and a note at the front explains each departure. The most important: 고유식별정보 is rendered unique identifying information, not “personally identifiable information” — in Korean law it is a closed list of four identifiers, not personal data at large.
These guidelines are explanatory. They are not a statute and they impose no obligations of their own; where they differ from the Acts, the Enforcement Decrees or the supervisory regulations, those instruments govern. Guidance of this kind is revised as the underlying law changes.
Tell us who you are and the complete PDF is yours — 140 pages, A4 PDF.
Thank you — your download is ready.
Prepared by H&S Partners, a licensed Korean law office.
Download the PDFIf the download does not begin, right-click the button and choose “Save link as”.
Advisory
H&S Partners is a licensed Korean law office. If you need advice on how these rules apply to your business, transaction or fund — or a professional translation of a Korean document you cannot find here — we would be glad to hear from you.
Request advice →A lawyer replies personally, usually within one business day. Sending an enquiry does not create a lawyer–client relationship.