|
Article 20
|
Except for the personal data specified in paragraph 1 of Article 6, non-government agencies shall use personal data only within the necessary scope of the specific purpose of collection; the use of personal data for another purpose shall be only on any of the following bases:<br/>1. where it is expressly required by law;<br/>2. where it is necessary for furthering public interests;<br/>3. where it is to prevent harm to the life, body, freedom, or property of the data subject;<br/>4. where it is to prevent material harm to the rights and interests of others;<br/>5. where it is necessary for statistics gathering or academic research by a government agency or an academic institution for public interests; provided that such data, as provided by the data provider or disclosed by the data collector, may not lead to the identification of a specific data subject;<br/>6. where consent has been given by the data subject; or<br/>7. where it is for the data subject's rights and interests.<br/>When a non-government agency uses personal data for marketing purpose pursuant to the preceding paragraph, upon the data subject's objection to such use, the agency shall cease using the data subject's personal data for marketing.<br/>Non-government agencies, when using the data subject’s personal data for marketing purpose for the first time, shall provide the data subject the ways that he/she can object to such use, and the agency shall pay for the fees therefrom.
|