Activity Tracker
The DPA Activity Tracker provides our latest information on developments in legislatures, judiciaries and the executive branches of G20, EU member states and Switzerland.
25 events advancing 23 policy or regulatory changes:
Graph
Table
Bill amending Network Act including incident response obligations and enforcement measures (Bill No. 2214896/Law No. 21500)
Information Security Level Evaluation obligations in Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force
On 1 April 2027, the Information Security Level Evaluation obligations in the Act on Promotion of Information and Communications Network Utilization and Information Protection (Law No. 21500) enter into force. The Korea Ministry of Science and ICT m…
Consumer protection authority governance in Partial Amendment to Act on Consumer Protection in Electronic Commerce (Act No. 21312)
Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Law No. 21312) including consumer protection authority governance enters into force
On 7 February 2027, the amendment to Article 39(3) of the Act on Consumer Protection in Electronic Commerce (Law No. 21312) enters into force. The Act applies to businesses under investigation or review by the Korea Fair Trade Commission (KFTC) for …
Local operations requirement in Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Act No. 21312)
Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Act No. 21312) including local operations requirement enters into force
On 20 January 2027, the local operations requirement from the Act on Consumer Protection in Electronic Commerce (Law No. 21312) enter into force, 1 year after promulgation on 20 January 2026. The Act applies to overseas mail-order businesses and onl…
Personal Information Protection Commission revised Standards for Measures to Ensure the Safety of Personal Information
Articles 4, 5, 6, and 8 of Personal Information Protection Commission amendment to Standards for Measures to Ensure the Safety of Personal Information enter into force
On 31 October 2026, Articles 4, 5, 6, and 8 of the Personal Information Protection Commission amendment to the Standards for Measures to Ensure the Safety of Personal Information enter into force. Article 4 requires organisations to create and imple…
EU-South Korea equivalence recognition system enabling mutual data transfer framework
European Union-Korea mutual data equivalence recognition agreement for personal data transfers entered into force
On 16 September 2025, the Personal Information Protection Commission of Korea (PIPC) recognised the European Union's (EU) personal data framework as equivalent. The arrangement covers both public authorities and private companies transferring data b…
Bill amending Personal Information Protection Act (Bill No. 2216765/Act No. 21445)
Personal Information Protection Act (Act No. 21445) entered into force, except mandatory certification provisions
On 11 September 2026, Act No. 21445, amending the Personal Information Protection Act, entered into force, six months after promulgation on 10 March 2026. Under the amended Article 30-3, the business owner or representative of a personal information…
Copyright protection regulation in amendment to Copyright Act (Act No. 21336 / Bill No. 2215125)
Amendment to Copyright Act including copyright protection regulation enters into force
On 11 August 2026, the Partial Amendment to the Copyright Act (Act No. 21336) enters into force. The Amendment applies to online service providers and telecommunications business operators. On definitions, the Amendment expands the definition of onl…
Fair marketing and advertising practices in Partial Amendment to the Act on Consumer Protection in Electronic Commerce (Act No. 21312)
Partial Amendment to Act on Consumer Protection in Electronic Commerce (Bill No. 14874) including fair marketing and advertising practices enters into force
On 21 July 2026, the Act on Consumer Protection in Electronic Commerce (Law No. 21312) entered into force, 6 months after promulgation on 20 January 2026. The Act applies to e-commerce operators and mail-order businesses that publish consumer review…
Amendment to Enforcement Decree of Personal Information Protection Act
Personal Information Protection Commission closes consultation on amendment to enforcement decree of Personal Information Protection Act including reporting and certification requirements
On 13 July 2026, the Personal Information Protection Commission (PIPC) closes the consultation on the amendment to the enforcement decree of the Personal Information Protection Act, including breach notification obligations. The amendment applies to…
Data protection authority governance in amendment to Enforcement Decree of Personal Information Protection Act
Personal Information Protection Commission closes consultation on draft amendment to the Enforcement Decree of the Personal Information Protection Act including data protection authority governance
On 13 July 2026, the Personal Information Protection Commission (PIPC) closes the public consultation on a draft amendment to the Enforcement Decree of the Personal Information Protection Act (PIPA), opened on 1 June 2026. The draft amendment define…