Republic of Korea: Personal Information Protection Commission adequacy review of face payment service under Personal Information Protection Act
Progress
Current status
under investigation
22 Jan 2025 under investigation
27 Mar 2024 concluded
Scope
Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
digital payment provider (incl. cryptocurrencies)
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Personal Information Protection Commission clarified that Toss’s "Face Pass" service has not undergone preliminary adequacy review
On 22 January 2025, the Personal Information Protection Commission (PIPC) clarified that Toss's “Face Pass” service had not undergone a preliminary adequacy review. This service, which automates ID verification at event venues to prevent scalping, d…
SourceEvent type
investigation
Action type
interim ruling
Government branch
executive
Government body
data protection authority
Personal Information Protection Commission adopted preliminary adequacy decision on face payment service under Personal Information Protection Act
On 27 March 2024, the Personal Information Protection Commission (PIPC) adopted a preliminary adequacy decision approving Toss's "Face Payment" service under the Preliminary Adequacy Review system. The decision pertains to the utilisation of facial …
SourceEvent type
investigation
Action type
closure
Government branch
executive
Government body
data protection authority