Regulations Governing Security Protection Plans for and Processing of Personal Information Files by Tourist Amusement Enterprises Article 6
A tourist amusement enterprise shall examine whether its collection and processing of personal information complies with the provisions of Article 19 of the Act, having a specific purpose and meeting a need prescribed by law; and shall also examine whether its use of personal information complies with the provisions of Article 20 Paragraph 1 of the Act as necessary use within the scope of the specific purpose of collection. Where the use of personal information is outside the scope of the specific purpose, the tourist amusement enterprise shall examine whether it meets the conditions for use outside the specific purpose as prescribed by law.