Description

Adopted amendment to the Enforcement Decree of the Personal Information Protection Act

On 5 September 2023, the Korean Personal Information Protection Commission adopted the amended Enforcement Decree of the Personal Information Protection Act. In particular, the amendment strengthens the principle of consent in order to allow data subjects to exercise their rights regarding their personal information. In addition, the security measures that previously applied only to online settings now also apply to offline. Finally, the criteria for calculating fines have been revised to be proportional to the severity of violations. The amendment to the Enforcement Decree follows the comprehensive amendment of the Personal Information Protection Act (Law No. 19234), which was promulgated on 14 March 2023 and comes into force on 15 September 2023.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2023-05-18
under deliberation

On 18 May 2023, the Korean Personal Information Protection Commission announced it would legislate,…

2023-09-05
adopted

On 5 September 2023, the Korean Personal Information Protection Commission adopted the amended Enfo…

2023-09-15
in force

On 15 September 2023, the Korean Personal Information Protection Commission amended Enforcement De…

2024-09-15
in force

On 15 September 2024, Article 17(1) of the amended Enforcement Decree of the Personal Information P…

We use cookies and other technologies to perform analytics on our website. By opting in, you consent to the use by us and our third-party partners of cookies and data gathered from your use of our platform. See our Privacy Policy to learn more about the use of data and your rights.