Korea PIPA Articles 15-22 lawful basis for collection + use of personal information. Article 15 consent + statute + Article 16 minimum collection + Article 17 provision to third parties + Article 18 use beyond original purpose + Article 19 restriction on provision by recipient + Article 20 collection from third party + notification + Article 20-2 notification of use records + Article 21 destruction + Article 22 methods of consent (specific + informed + free + unambiguous + withdrawable). Article 22-2 children under 14 verifiable parental consent. Direct marketing opt-in consent required. Notice to data subject covering categories + purposes + retention + third party recipients + rights. Privacy policy publication mandatory Article 30. Article 30-2 PIPC privacy policy evaluation programme.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.