This Law shall not be applicable to the processing of personal information by a natural person by virtue of his/her personal or family affairs. Where there are legal provisions on the processing of personal information in the statistical and archive administration organized and implemented by the people’s governments at all levels and the relevant departments thereof, such provisions shall apply.

For the purposes of this Law, the following terms are defined as follows:

• (I) A personal information processor refers to any organization or individual that independently determines the purpose and method of processing in personal information processing activities.
• (II) An automatic decision-making refers to an activity to automatically analyze and evaluate a person’s behavior habits, hobbies or economic, health or credit status through computer programs and make decisions.
• (III) De-identification refers to the process in which personal information is processed so that it is impossible to identify certain natural persons without the use of additional information.
• (IV) Anonymization refers to the process in which the personal information is processed so that it is impossible to identify a certain natural person and unable to be recovered.

This Law shall come into force as of November 1, 2021.