Refusal of unauthorized e-mail collection

Article 22 of the Personal Information Protection Act (consent to collection and use of personal information, etc.) 

• Article 22 of the Personal Information Protection Act (consent to collection and use of personal information, etc.)
• 
  
• When obtaining the consent of the information subject (including the legal representative pursuant to paragraph 5; hereinafter the same shall apply in this Article) for the processing of personal information pursuant to this Act, the personal information processor shall separate each consent and allow the information subject to obtain consent. It must be clearly announced and consent must be obtained from each person.
• 
  
• When the personal information processor obtains the consent of the data subject to the processing of personal information in accordance with Article 15 (1) 1, Article 17 (1) 1, Article 23 (1), and Article 24 (1) 1, the data subject Personal information that can be processed without the consent of the data subject must be distinguished from personal information that requires the consent of the data subject for purposes such as concluding a contract with. In this case, the burden of proving that personal information can be processed without consent is borne by the personal information processor.
• 
  
• When a personal information processor seeks to obtain consent to the processing of personal information in order to promote or recommend sales of goods or services to the information subject, he/she must inform the information subject so that the information subject is clearly aware of this and obtain consent.
• 
  
• The personal information processor may not provide goods or services to the information subject on the grounds that the information subject does not consent to matters to which the information subject can selectively consent pursuant to Paragraph 2 or does not consent pursuant to Paragraph 3 and Article 18 Paragraph 2 Item 1. Provision must not be refused.
• 
  
• When a personal information processor needs to obtain consent pursuant to this Act in order to process the personal information of a child under the age of 14, he or she must obtain the consent of the child's legal representative. In this case, the minimum information required to obtain the consent of the legal representative can be collected directly from the child without the consent of the legal representative.
• 
  
• In addition to the matters stipulated in paragraphs 1 to 5, the detailed method of obtaining the consent of the information subject and the necessary matters regarding the contents of the minimum information pursuant to paragraph 5 shall be determined by Presidential Decree, taking into account the collection medium of personal information, etc.