Records / Laws and rulings

PIPA Article 18: no use beyond the collection purpose and no provision to a third party without separate consent (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 18(1) and (2)1)

Licensing support tickets, email or call recordings to a US AI company is a provision to a third party for a purpose the customer was not told about. The holder needs the separate consent of each data subject, or a statute that allows it, unless the data is first made anonymous or is pseudonymised for scientific research.

Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text

In the source's own words
“No personal information controller shall use personal information beyond the scope provided in Article 15 (1) or provide it to any third party beyond the scope provided in Articles 17 (1) and 28-8 (1). ... 1. Where separate consent is obtained from the data subject;”
Also read from the same source
Figures it counts in

It is shown on its own, not counted into a figure.

PIPA Article 18: no use beyond the collection purpose and no provision to a third party… | AIData.Broker