South Korea ISMS-P
3.2 Protection when retaining and using personal information – South Korea ISMS-P

South Korea ISMS-P 3.2.4: Use and provision beyond the purpose

What does 3.2.4 require?

Personal information is used or provided only within the consented purpose or legal basis, recipients use it only within the purpose for which it was provided, and use or provision beyond that requires separate consent or a legal basis; recipients of out-of-purpose provision are asked to limit use and apply safeguards; public institutions publish the legal basis and purpose of such use or provision in the gazette or on their website and record it in a register (PIPA Articles 18 and 19).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 3.2 Protection when retaining and using personal information – South Korea ISMS-P

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll South Korea ISMS-P controls