Republic of Korea: Bill amending Personal Information Protection Act (Bill No. 2216765/Act No. 21445)
Progress
Scope
Timeline of events
Mandatory personal information protection certification provisions of Personal Information Protection Act (Act No. 21445) entered into force
On 1 July 2027, the amended Article 32-2(1) proviso and Article 75(2) item 15 of Act No. 21445, amending the Personal Information Protection Act, entered into force. Under the amended Article 32-2(1) proviso, personal information processors meeting …
Personal Information Protection Act (Act No. 21445) entered into force, except mandatory certification provisions
On 11 September 2026, Act No. 21445, amending the Personal Information Protection Act, entered into force, six months after promulgation on 10 March 2026. Under the amended Article 30-3, the business owner or representative of a personal information…
Bill amending Personal Information Protection Act (Bill No. 2216765) was signed into law
On 10 March 2026, the Bill amending the Personal Information Protection Act (Bill No. 2216765) was signed into law. The Act designates the business owner or representative as the ultimate party responsible for processing and safeguarding personal in…
National Assembly adopted Bill amending Personal Information Protection Act (Bill No. 2216765)
On 12 February 2026, the National Assembly adopted Bill No. 2216765, which amends the Personal Information Protection Act by consolidating 14 previously proposed amendments into a single framework. The Bill clarifies responsibilities and establishes…