Republic of Korea: Signed Bill amending Personal Information Protection Act including data protection measures

On 14 March 2023, Bill No. 2120089, amending the Personal Information Protection Act (PIPA), was signed into Law by the President of the Republic of Korea, becoming Law No. 19234. The Law amends PIPA to expand the rights of data subjects. In particular, the Bill establishes the right to data portability, allowing individuals to request to transmit information to themselves or a third party. Furthermore, the Law would give individuals the right to refuse automated decision-making using their personal data and request information regarding the system employed. The provisions will be implemented one year after its signing into Law, on 14 March 2024.