Republic of Korea: Personal Information Protection Commission investigation into enhancing security of auto-login services in web browsers

Progress

Current status
concluded
10 Dec 2025 concluded
12 Feb 2025 under investigation

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
search service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

10 Dec 2025
concluded

Personal Information Protection Commission concluded review of providers' compliance with social login data-deletion recommendations

On 10 December 2025, the Personal Information Protection Commission (PIPC) concluded the review assessing the implementation of improvement recommendations issued to social login providers used by over 500’000 domestic websites in February 2025. The…

Source
Event type investigation
Action type closure
Government branch executive
Government body data protection authority
12 Feb 2025
under investigation

Personal Information Protection Commission published guidelines on enhancing security of auto-login services in web browsers

On 12 February 2025, the Personal Information Protection Commission (PIPC) published a guideline for enhancing the security of auto-login services in web browsers. The guideline requires browser providers to strengthen encryption of stored account c…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority