2. Business Model Legality/ Regulatory Approval Investigation

Q13 (Protection of Personal Information)

We are providing a service to distribute online magazines by e-mail. If we provide personal information of our subscribers to mail distribution companies without the subscribers’ consent, would this be a violation of the Act on the Protection of Personal Information?

In principle, offering a person’s personal information to a third party requires the person’s consent. But there are certain exceptions. One exception is when a company subcontracts the handling of the personal information to a third party to the extent necessary to achieve the purpose of use. Subcontracting the distribution of a mail magazine to a mail distribution company, and disclosing personal information to the extent necessary for that purpose, would fall within the exception above, so individual user consent should not be required.

(Posted: January 27, 2012)