3.3 Protection when providing personal information – South Korea ISMS-P
South Korea ISMS-P 3.3.3: Transfer on business transfer or merger
What does 3.3.3 require?
When personal information moves to another party through transfer or merger of all or part of a business, data subjects are informed in advance; the recipient informs them without delay where the legal notice duty applies; and the recipient uses or provides the data only for the original purpose (PIPA Article 27).
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in 3.3 Protection when providing personal information – South Korea ISMS-P