Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
South Korea: PIPC publishes personal information leak response manual
On February 19, 2024, the Personal Information Privacy Commission (PIPC) published a personal information leak response manual. The manual provides advice on how to respond promptly to personal information leaks to minimize the spread of damage. The manual also highlights that in the event of loss, theft, or leakage of personal information, rapid response and action should be taken to provide relief for the data subject.
The manual mentions that the application will vary based on the type of personal information being processed, the processing method, the processing environment, and the characteristics of the data subject. The manual highlights specific procedures for the leakage of sensitive or unique personal information, and if information is leaked due to illegal access. Additionally, the manual provides an example overview of the process for handling a leak of personal information to include:
recognition of the accident and emergency action;
notification to the information subject;
reporting the personal information leak;
accident analysis;
complaint response; and
improvement and implementation of improvement measures.
You can read the press release and the guide here, both only available in Korean.