Description

Announced amendment to the Enforcement Decree of the Personal Information Protection Act

On 18 May 2023, the Korean Personal Information Protection Commission announced it would legislate, from 19 May 2023 until 28 June 2023, to amend the Enforcement Decree of the Personal Information Protection Act. In particular, the amendment would strengthen the principle of consent in order to allow data subjects to exercise their rights regarding their personal information in a substantial manner. In addition, regulations applicable only to online settings will also apply to offline settings in order to provide security measures for new technologies. Finally, the criteria for calculating fines have been revised to be proportional to the severity of violations. The amendment to the Enforcement Decree follows the comprehensive amendment of the Personal Information Protection Act (Law No. 19234) which was promulgated on 14 March 2023.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2023-05-18
under deliberation

On 18 May 2023, the Korean Personal Information Protection Commission announced it would legislate,…

2023-09-05
adopted

On 5 September 2023, the Korean Personal Information Protection Commission adopted the amended Enfo…

2023-09-15
in force

On 15 September 2023, the Korean Personal Information Protection Commission amended Enforcement De…

2024-09-15
in force

On 15 September 2024, Article 17(1) of the amended Enforcement Decree of the Personal Information P…

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.