Republic of Korea: Implemented Presidential Decree No. 34309 establishing criteria for businesses subject to domestic representative designation under PIPA

On 15 March 2024, the Personal Information Protection Act Enforcement Decree (Presidential Decree No. 34309), establishing criteria for businesses subject to domestic representative designation under the Personal Information Protection Act (PIPA), entered into force. In particular, the decree specifies that oversees businesses are required to appoint a domestic representative if their total sales for the preceding year surpassed KRW 1 trillion, they stored or processed personal data of Korean data subjects averaging over 1 million people during the last three months, or the PIPC has mandated the appointment of a domestic representative.