On 13 July 2026, the Bill amending the Personal Information Protection Act, including provisions on reduced administrative fines for operators that run security vulnerability reward programmes, was introduced to the National Assembly. The Bill would…