PIPA Article 58-2: information that no longer identifies a person is outside the Act (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 58-2)
Records that are truly anonymous, judged by time, cost and technology, are outside the Act, so no consent and no transfer rule applies to them. The test is whether anyone could identify a person even by combining the data with other information.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“This Act shall not apply to information that no longer identifies a certain individual when combined with other information, reasonably considering time, cost, technology, etc.”
Where it was read
Also read from the same source
- PIPA Article 18: no use beyond the collection purpose and no provision to a third party without separate consent (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 18(1) and (2)1)
- PIPA Article 28-8: cross-border transfer needs separate consent, certification, a recognised country or a statute (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 28-8(1) and (2))
- PIPA Articles 28-2 and 28-7: pseudonymised information for scientific research without consent, but the transfer rules still apply (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Arts. 28-2(1) and 28-7)
- PIPA Articles 28-9 and 28-10: the regulator can suspend a transfer, and reciprocity can restrict transfers to restricting countries (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Arts. 28-9(1) and 28-10)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide