PIPA Articles 28-2 and 28-7: pseudonymised information for scientific research without consent, but the transfer rules still apply (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Arts. 28-2(1) and 28-7)
A holder may process pseudonymised information without consent for scientific research, and provide it to a third party if it holds back anything that could identify a person. Article 28-7 lists the articles that do not apply to pseudonymised information and Article 28-8 (transfer abroad) is not among them.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“A personal information controller may process pseudonymized information without the consent of data subjects for statistical purposes, scientific research purposes, and archiving purposes in the public interest, etc. ... A personal information controller shall not include information that may be used to uniquely identify an individual when providing pseudonymized information to a third party according to paragraph (1). ... 20, 20-2, 27, 34 (1), 35, 35-2, 36, and 37 shall not apply to pseudonymized information processed under Article 28-2 or 28-3.”
Where it was read
Also read from the same source
- PIPA Article 18: no use beyond the collection purpose and no provision to a third party without separate consent (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 18(1) and (2)1)
- PIPA Article 28-8: cross-border transfer needs separate consent, certification, a recognised country or a statute (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 28-8(1) and (2))
- PIPA Article 58-2: information that no longer identifies a person is outside the Act (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Art. 58-2)
- PIPA Articles 28-9 and 28-10: the regulator can suspend a transfer, and reciprocity can restrict transfers to restricting countries (Personal Information Protection Act (Korea), Act No. 20897, 1 Apr. 2025 (English translation by the Korea Legislation Research Institute), Arts. 28-9(1) and 28-10)
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide