Transfer of Personal Information Due to Business Transfer, etc.

When personal information is transferred to another person due to the transfer/merger, etc. of all or part of the business, the following matters must be notified to data subjects in advance.

• Matters to be notified
  1. The fact that the personal information is to be transferred
  2. The name, address, telephone number, and other contact information of the recipient of the personal information
  3. The methods and procedures by which a data subject may take action if the data subject does not wish the personal information to be transferred
• Methods of notification
  1. Any one of the following methods: email/written document/fax/telephone, or a similar method
  2. Where the data subject cannot be notified directly, such as because the data subject's contact information cannot be identified through no fault of the notifier, the information is to be posted on the internet homepage for at least 30 days
  • However, in the case of a transferor, etc. that does not operate an internet homepage, the information is to be posted for at least 30 days in a conspicuous location such as the place of business
  • Alternatively, the method of publishing it in a general daily newspaper/general weekly newspaper or an internet newspaper under Article 2, Subparagraph 1, Item (a)/Item (c) or Subparagraph 2 of the same Article of the "Act on the Promotion of Newspapers, etc.", whose main distribution area is a region at or above the level of the city/province (Si/Do) where the place of business of the business transferor, etc. is located, may be used

The business transferee, etc. must, when it falls under the statutory notification requirements, notify data subjects without delay of necessary matters such as the fact that the personal information has been transferred.

• If the transferor has already notified data subjects of the fact of transfer, the transferee does not need to provide additional notification
• However, if the personal information was received through a business acquisition, etc. but the transferor of the personal information did not notify the fact of transfer, the fact of transfer must be notified to data subjects

The recipient of the personal information must use it or provide it to a third party only for the original purpose that existed at the time of transfer.

• If the recipient of the personal information wishes to use or provide the personal information beyond the scope of the original purpose, separate consent from the data subject must be obtained