Article 73 – Definitions

For purposes of this Law, the following terms shall have the following meanings:

1. “A personal information handler” refers to an organization or individual that autonomously determines the purposes and means of personal information handling.
2. “automated decision making” refers to the activities of automatically analyzing and evaluating personal behaviors, hobbies, or economic, health, and credit status, among others, through computer programs, and making decisions.
3. “de-identification” refers to handling personal information to make it impossible to identify specific natural persons in the absence of the support of additional information.
4. “anonymization” refers to the process of handling personal information to make it impossible to identify specific natural persons and impossible to restore.

Related provisions:

• “Personal Information” and “Handling” defined
• “Sensitive Personal Information” defined
• Exclusion of anonymized information
• Conditions and rights related to automated decision making
• Impact assessment required for automated decision making
• De-identification as a required security measure