Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
South Korea: PIPC publishes guidelines for PIPA Enforcement Decree amendments
On March 12, 2024, the Personal Information Protection Commission (PIPC) published guidelines for amendments to the Personal Information Act (PIPA) and Enforcement Decree. The PIPC stated that the amendments are expected to go into effect on March 15, 2024.
The guidelines cover several amendments to include:
- a new legal basis to ensure the reliability of the results for public institutions;
- increased requirements for Chief Privacy Officers (CPOs) and the establishment of a CPO Council;
- data subjects may request explanations or reviews of completely automated decisions and refuse in cases where it significantly affects the rights or obligations of the data subject;
- all personal information processors are now liable for damages to data subjects; and
- revised standards for sales, personal information retention, and exemption from obligations.
The guidelines also state that regular investigation will take place every three years of inherent identification information management systems and that information relating to the overseas collection and transfer of personal information processing must be disclosed in privacy policies.
You can download the guidelines and read the press release here, both only available in Korean.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
