[Background and Necessity]
Article 35-2 of the law broadly guarantees the scope of the data subject’s request for data transfer, distinguishing it from third-party data transfer requests.
However, the current enforcement decree aligns both, necessitating an expansion of the scope of the data subject’s request for data transfer in order to ensure the protection of the data subject's rights.
[Regulatory Content]
The scope of the data subject’s data transfer request is expanded to include personal data handlers with a certain level of data processing capabilities, regardless of the industry,
and to include all information about data subjects who meet the legal requirements.