APPI Article 43(4): duties when providing anonymised personal information to a third party (Act on the Protection of Personal Information, Art. 43(4))
Anonymised information may be provided to a third party without consent, but the holder must first publish the categories of information in it and the means of providing it, and tell the buyer explicitly that it is anonymised personal information. The buyer then may not try to identify people (Art. 45). Art. 28 does not apply to it because it is not personal data (my reading).
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Businesses handling personal information, before providing anonymized personal information it prepared to a third party, must disclose the categories of information on an individual that is contained in the anonymized personal information the business will provide to the third party, and the means of providing this, and state to the third party explicitly that the information the business will provide is anonymized personal information, pursuant to Order of the Personal Information Protection Commission.”
Where it was read
Also read from the same source
- APPI Article 27: provision of personal data to a third party needs prior consent (Act on the Protection of Personal Information, Art. 27(1) and (5))
- APPI Article 28(1): provision to a third party in a foreign country needs consent unless an exception applies (Act on the Protection of Personal Information, Art. 28(1))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide