2. Business Model Legality/ Regulatory Approval Investigation

Q14 (Personal Information to Third Parties)

We are planning to provide personal information we received from our users to a third party. We plan to obtain the consent of the users when we receive the personal information, but are we required to disclose the third party’s purpose of use of the personal information?

There is no obligation for you to disclose the third party’s purpose of use of personal information. It may be necessary for you to communicate with the user from a business standpoint, but there is no obligation under the [Personal Information Protection Act]. However, the third party who receives the personal information must post its purpose of use or otherwise notify the user. And since the third party’s failure to do so could result in trouble for you, as a matter between you and the third party, you should probably make sure that the third party will post its purpose of use.

(Posted: January 27, 2012)