Precautions When Conducting Personal Information Protection Training and Retirement Pension Training Together

When conducting personal information protection training and retirement pension training together, the training targets , Legal basis , Supporting documents , The scope of personal information processing must be managed separately. .

Both educations are HR Although they are often managed together , The educational objectives and target audiences are different. . Personal information protection training is the management of personnel in charge of handling personal information. · Close to supervision and safety measures , Retirement pension education is training designed to guide participants in the retirement pension system to understand the system's operation and eligibility criteria. .

In this article, when operating personal information protection training and retirement pension training together HR Organize the standards and practical checklist that the person in charge must pay attention to. .

short answer

Although personal information protection training and retirement pension training can be conducted at the same time , You should not combine them into the same education. .

The two education programs are managed by the governing body HR It can overlap and , It can also be operated together within the annual mandatory legal education schedule. . However, the target of education , Educational content , Supporting documents , Legal basis , Because the sanctions risks differ, the course name and completion record must be managed separately. .

In particular, personal information protection training is for personal information handlers , Access permissions , Internal management plan , It is linked to safety measures. . On the other hand, retirement pension education is provided annually to subscribers by workplaces operating a retirement pension system. 1 This is training that must be conducted at least once. HR Even if the two trainings are conducted on the same day “ Personal Information Protection Training 1 episode , Retirement Pension Education 1 episode ” It is safe to record by separating them. .

item	HR What to check first
Key Keywords	Personal Information Protection Training Retirement Pension Training
Related keywords	Personal Information Handler , Retirement pension subscriber education , Mandatory legal education , Proof of education
Main targets	HR manager , Management Support Manager , Personal Information Protection Officer , Retirement pension manager
First response principle	Operate together, but separate standards for each training.
Points to note	Do not treat both educations as completed as a single integrated education.
Related topics	Personal Information Protection Training , Retirement Pension Education , Operation of mandatory legal education , EAP

The key to running personal information protection training and retirement pension training together is “ The schedule will be integrated, but , Recording is separating ” no see .

When will it be applied? ?

This article is in the following situations HR The person in charge can refer to this. .

situation	HR Verification points
Cases where annual mandatory legal training is conducted all at once	Separation of participants and completion records by training
When conducting personal information protection training and retirement pension training on the same day	Education Name , Educational materials , Certificate Classification
If you use an online education platform	Check if the process names are separated.
When using external commissioned training	Verification of the scope of outsourcing and the appropriateness of educational materials
If you are operating a retirement pension system	Verify Subscriber Training Participants
Cases where personal information handlers are located in only some departments	Distinction between the scope of all-employee training and handler training
Educational materials as one PDF If you want to group them	Verify legal basis and check for missing essential details
When an internal audit or inspection is scheduled	Organization of supporting documents and participant lists by training

Running two educational programs together is not a problem in itself. . However, if you do not distinguish the purposes and standards for each type of education, later “ What training was conducted for whom ” It may become difficult to explain. .

HR Tasks the person in charge must do

1. Separate the training subjects first.

The target audience for personal information protection training and retirement pension training may differ. . Personal information protection training is for employees who process personal information. , In other words, management must be centered around personal information handlers. . Of course, we can run personal information protection awareness training for all employees together, but , Actual users or customers accessing the personal information processing system · It is recommended to manage the person responsible for handling employee information separately. .

Retirement pension education is intended for subscribers to the retirement pension system. . Whether it is a workplace that operates only a severance pay system , DB Brother or DC Whether it is a workplace operating a retirement pension system , You must first identify who the subscriber scope is. .

Education classification	Main targets	HR Checklist
Personal Information Protection Training	Personal Information Handler , Personal Information Processing Officer , relevant department	Personal information processing tasks and whether access rights are held
Personal Information Protection Notice for All Employees	All employees	Basic security rules , Guide to Preventing Personal Information Leaks
Retirement Pension Education	Retirement pension scheme subscribers	DB brother ·DC Whether or not you are a subscriber , List of trainees
New hires	It depends on the time of hiring.	Personal Information Notice and Confirmation of Retirement Pension Enrollment Date
leave of absence · reinstated employees	Varies depending on the timing of the training	Check for omissions and the need for supplementary education

We can schedule the training together, but , The list of participants must be managed separately for each training session. .

2. We do not mix the educational content into one.

Even if the two training sessions are conducted on the same day, the content must be separated. . Personal Information Protection Education covers personal information processing principles , Personal Information Handler Management · supervision , Access permissions , Prevention of spill accidents , Internal management plan , We cover safety measure standards. .

In retirement pension education, types of retirement pension systems , eligibility requirements , Salary Payment Procedure , levy , Operation method , taxation system , You must cover system operation details that subscribers need to know, such as partial withdrawals or secured loans. .

Education classification	Key contents to include
Personal Information Protection Training	Personal Information Processing Principles , Personal Information Handler Management · supervision , Access permissions , Safety measures , Response to the leak incident
Retirement Pension Education	Types of retirement pension schemes , Subscriber Rights , Salary Payment Procedure , levy , Operation method , cleanser , Early withdrawal criteria
General Information	Training Schedule , Completion criteria , Contact , Standards for Retaining Evidential Documents
Content to be separated	Replace personal information protection training with an explanation of the retirement pension system, or , Do not replace retirement pension education with security education

Even if you include both topics in a single educational material, the table of contents , Training time , Completion criteria , It is recommended to separate supporting documents. .

3. Separate the online education course name.

online education platforms or LMS When using it, the process name must be clear. . “ Integrated Legal Mandatory Education Course ” If you operate under the name alone, it may be difficult to verify later whether personal information protection training and retirement pension training were conducted separately. .

If possible, it is recommended to distinguish course names as follows. .

Operating method	Recommended management methods
Operated on a single platform	Personal Information Protection Training , Create retirement pension education courses for each
Group training conducted on the same day	Separate training names from timetables and training logs
Issuance of one certificate	List all completed course names on the certificate of completion
Use integrated educational materials	Table of contents and pages are organized by course
External commissioned training	Specify the scope of each training session in the contract and results report.

Even if we conduct training together “ How many minutes or hours were spent on which training? ”, “ Who completed what education ” You must be able to explain .

4. We store supporting documents by training.

The most important thing in the operation of mandatory legal education is records that can explain whether the education was conducted. . Even if you conduct personal information protection training and retirement pension training together, it is recommended to keep supporting documents organized into separate folders for each type of training. .

Supporting documents	Personal Information Protection Training	Retirement Pension Education
List of trainees	Personal Information Handler · Centered on relevant departments	Retirement pension scheme subscribers-centered
Educational materials	Personal Information Processing · Safety measures · Leak response	System Operation Status · eligibility requirements · Operation method
Certificate of Completion	Personal Information Protection Training in Course Name	Retirement Pension Education indicated in course name
Training Log	Training Date , instructor , detail , subject	Training Date , instructor , detail , subject
Online course attendance records	Progress rate , Completion status , Evaluation results	Progress rate , Completion status , Evaluation results
Supplementary education records	New handlers , Non-completionists	New subscribers , Non-completionists
Inquiry records	Inquiry regarding personal information processing , Security incident inquiry	retirement pension system · Operation Inquiry

Even if a single certificate of completion is issued, you must check whether the name of the course and the completed subjects are clearly indicated. .

5. We do not collect excessive personal information.

There are cases where a large amount of unnecessary personal information is actually collected while conducting personal information protection training. . Resident registration number to confirm training attendance , Excessive personal contact , There is no need to collect sensitive information. .

Even in retirement pension education, only the minimum information necessary to manage subscriber lists and completion status should be used. . Beyond the purpose of managing education completion, the status of individual retirement pension management , Points , You must be careful not to unnecessarily share investment selection details or include them in training lists. .

division	collection · Management standards
List of trainees	name , department , Focus on minimal information such as employee ID numbers
Completion Confirmation	Completion status , Completion date , Course Name Center
contact	Use only to the extent necessary for educational guidance
Retirement Pension Information	Unnecessary sharing of personal investment history or reward information is prohibited.
Storage period	Stored only for the necessary period according to internal standards
Access permissions	HR· Limited to necessary personnel, such as training managers.

Information collected for the operation of education is also personal information. . Therefore, even in the education management process, minimal collection , Purpose restriction , It is recommended to adhere to access control management principles. .

6. We separate the departments responsible, but collaborate on the schedule.

Personal information protection training is for the Chief Privacy Officer , Information security officer , Ministry of Justice or HR This can be managed together. . Retirement pension education is HR, General Affairs , Finance , It is often connected with retirement pension providers. .

Therefore, when operating the two education programs together HR Handle this all at once. ” see “ After checking the standards for each department HR Manage this schedule and supporting documents in an integrated manner. ” This method is appropriate. .

Area of responsibility	Collaboration Department
Review of Personal Information Protection Training Content	Chief Privacy Officer , Information security , Ministry of Justice , HR
Check the list of personal information handlers	Each department manager , Information security , HR
Review of Retirement Pension Education Content	HR, Finance , Retirement pension provider
Check the list of retirement pension subscribers	HR, Payroll Manager , Retirement pension manager
Training Schedule Management	HR, Training Manager
Storage of supporting documents	HR, Training Manager , relevant department

The training schedule is operated in an integrated manner, but , It is recommended that the person in charge of each relevant area review the content and verify the subjects together. .

Criteria table to distinguish when operating together

division	Personal Information Protection Training	Retirement Pension Education
Educational purposes	Safe handling of personal information and prevention of leakage	Guide to Understanding the Retirement Pension System and Subscriber Rights
Main targets	Personal Information Handler , relevant department	Retirement pension scheme subscribers
Main contents	Personal Information Processing Principles , Access permissions , Safety measures , Leak response	Types of systems , eligibility requirements , Operation method , levy , cleanser
Management Department	Chief Privacy Officer , Information security , HR	HR, salary · Finance , Retirement pension manager
Supporting documents	Educational materials , Handler List , Certificate of Completion , Training Log	Subscriber List , Educational materials , Certificate of Completion , Training Log
Points to note	Prohibition of excessive collection of personal information during educational operations	Personal usage history · Caution regarding exposure of reward point information
Possibility of operating together	Schedule integration possible	Schedule integration possible
Recording method	The course name and completion record are separated.	The course name and completion record are separated.

Practical Checklist

Confirmation items	inspection
The names of the personal information protection training and retirement pension training were separated. .	☐
We checked the personal information handlers and the retirement pension subscriber lists respectively. .	☐
The legal basis and essential content of the two educations were distinguished. .	☐
Even if operated under an integrated schedule, completion records are kept by training session. .	☐
The names of the online education courses are distinguished by each. .	☐
The name of the completed course is clearly indicated on the certificate. .	☐
The educational materials satisfy the requirements for personal information protection and retirement pensions, respectively. .	☐
We do not collect unnecessary personal information for the operation of education. .	☐
Retirement pension personal investment history or accumulated fund information is not unnecessarily exposed. .	☐
The Chief Privacy Officer or Information Security Manager reviewed the content of the personal information protection training. .	☐
The retirement pension manager or retirement pension provider reviewed the training content. .	☐
Educational materials , Certificate of Completion , List of subjects , Keep training logs by training. .	☐
Non-completionists and those subject to supplementary training are managed by training type. .	☐
Post-training inquiry channels and EAP Guided the consultation channel. .	☐

Common mistakes

first , Two educations “ Integrated Legal Mandatory Education Course ” This is a case where it is recorded as only one. .
The schedules can be combined, but , The course name and completion record must be separated. . You must be able to explain whether personal information protection training and retirement pension training were conducted separately when there is a future inspection or internal audit. .

Second , This is a case where the same content is provided to all employees without distinguishing between target recipients. .
Personal information protection training requires management centered on personal information handlers, and , Retirement pension education must be reviewed with the retirement pension system subscribers in mind. . Even if common materials are sent to all employees, legal subjects must be managed separately. .

third , This is a case where personal information protection training is treated solely as general security training. .
Password management or phishing prevention alone may not be enough. . Personal Information Processing Principles , Personal Information Handler Management · supervision , Access permissions , Safety measures , We must address leakage accident response standards together. .

Fourth , This is a case where individual investment details are unnecessarily shared during retirement pension education. .
The purpose of retirement pension education is to provide information about the system. , This is not the time to disclose individual savings or investment choices. . You must be careful to prevent your personal financial information from being exposed. .

Fifth , This is a case where only the certificate of completion is saved and the list of trainees is not retained. .
Even with a certificate of completion, it is difficult to manage training completion if it is impossible to verify who the trainees were. . List of subjects , List of completers , Educational materials , You must keep the training log together. .

Sixth , This is a case where inquiry response channels are not provided after the training. .
After personal information protection training, inquiries regarding personal information processing or reports of suspected leaks may be received, and , After retirement pension education, the system · Questions regarding operations may arise. HR You must clearly guide the inquiry channel. .

EAP If support is needed

Personal information protection training and retirement pension training are administrative · It is close to formal education, but , In the actual operation process, employee stress and the need for counseling may arise. . After a personal information leak, the person in charge feels a heavy burden or , Retirement pension loss · anxiety about old age · There are cases where employee inquiries increase due to financial stress. .

EAP It does not replace personal information protection training or retirement pension training. . However, job stress that occurs after training , Accident response burden , Financial instability , Dispute over responsibility within the organization , It can be utilized as a supplementary system to support the communication burden of administrators. .

situation	EAP Directions for use
The person in charge expressed anxiety after the personal information leak incident.	Job stress counseling , Psychological support after an accident
civil complaint · When the burden of customer service has increased	Emotional labor counseling , Manager Coaching
Cases where employee inquiries have increased due to anxiety about the retirement pension system or retirement preparation	Financial anxiety and stress counseling
Cases where an internal dispute over responsibility arises due to the failure to conduct training	Organizational Communication Support
Cases where managers have difficulty with Q&A after training	Manager Consultation , Organizing guidance text
personal information · In cases where sensitive information related to retirement pensions was exchanged	Guide to Confidentiality and Scope of Information Sharing

The guidance text can be used as follows. .

“ Work burden after personal information protection training or retirement pension training , stress from responding to complaints , Financial instability , If you need counseling due to conflict within the organization EAP You can use the consultation channel. . EAP It does not replace statutory education or explanations of the system. , This is a channel that supports the psychological burden on employees. .”

Frequently Asked Questions

Q1. Can I conduct the Personal Information Protection Training and the Retirement Pension Training on the same day? ?
it's possible . However, the name of the education , subject , Educational materials , Completion records must be separated. . Even if conducted on the same day, when to... , To whom , You must be able to explain the details of how it was conducted. .

Q2. Can I manage it with a single integrated certificate? ?
It might be possible, but , The certificate of completion must clearly indicate that the Personal Information Protection Training and Retirement Pension Training have been completed, respectively. . The course name “ Mandatory legal education ” If it is only like that, it may be difficult to verify what training has been completed. .

Q3. Do I have to conduct personal information protection training for all employees? ?
Basic security for all employees · You may operate a privacy policy notice. . However, the key in practice is the necessary training and management for personal information handlers who process personal information. · It is directing. . Personal Information Processing System Accessors , Customer Information Processor , It is recommended to manage employees and staff personal information handlers separately. .

Q4. Do we have to conduct retirement pension training for all employees? ?
Retirement pension education must be verified for subscribers to the retirement pension system. . Whether it is a workplace that operates only a severance pay system , DB brother ·DC Whether to operate a retirement pension system , It is recommended to first check the scope of the subscriber base. .

Q5. What is the most important supporting documentation when running two training programs together? ?
List of participants by training , Educational materials , List of completers , Certificate of Completion , This is the training log. . In particular, it is important to store the training names and participants separately so that personal information protection training and retirement pension training can be verified as having been conducted separately. .

Next step

When operating personal information protection training and retirement pension training together, separating standards is more important than integrating schedules. . Target audience , Educational content , Completion record , Supporting documents , You must separate the scope of personal information processing for each case so that you can provide explanations during future inspections or internal audits. .

Instead of ending personal information protection training and retirement pension training with mere completion management , Response to employee inquiries , Protection of sensitive information , Financial anxiety counseling , EAP If you want to operate counseling referrals as well, Nudge EAP Review the support system suitable for your organization through an implementation consultation. .

👉 Go to Nudge EAP Implementation Consultation →

Source and Information

This content is intended to provide general information for corporate practitioners to refer to. . Specific laws , Labor , employment , Personal Information Protection , retirement pension , Finance , As matters requiring psychological counseling may vary depending on the workplace situation and the latest laws, a review by a relevant expert may be necessary. .

Personal Information Protection & Retirement Pension Training