On 18 May 2023, the Korean Personal Information Protection Commission announced it would legislate, from 19 May 2023 until 28 June 2023, to amend the Enforcement Decree of the Personal Information Protection Act. In particular, the amendment would strengthen the principle of consent in order to allow data subjects to exercise their rights regarding their personal information in a substantial manner. In addition, regulations applicable only to online settings will also apply to offline settings in order to provide security measures for new technologies. Finally, the criteria for calculating fines have been revised to be proportional to the severity of violations. The amendment to the Enforcement Decree follows the comprehensive amendment of the Personal Information Protection Act (Law No. 19234) which was promulgated on 14 March 2023.
Original source