Regulations Governing the Security Assurance Plan and Processing Method for Personal Data of the Engineering Consulting Industry Article 9

The consulting firm shall examine whether its collection or processing of personal information has a specific purpose and legal imperative, and is in compliance with the provisions of Article 19 of the Act. It shall also examine whether its use of personal information is within the scope of the specific purpose of use, and is in compliance with the provisions of Paragraph 1 of Article 20 of the Act. When personal information is used outside the scope of the specific purpose, examination shall determine whether there is a legally prescribed condition for use outside the specific purpose.