Republic of Korea: Implemented amendment to the Enforcement Decree of the Personal Information Protection Act

On 15 September 2023, the Korean Personal Information Protection Commission amended Enforcement Decree of the Personal Information Protection Act entered into force. In particular, the amendment strengthens the principle of consent in order to allow data subjects to exercise their rights regarding their personal information. In addition, regulations applicable only to online settings also apply to offline settings in order to provide security measures for new technologies. Finally, the criteria for calculating fines have been revised to be proportional to the severity of violations. The amendment to the Enforcement Decree follows the Personal Information Protection Act (Law No. 19234) amendment, which was promulgated on 14 March 2023 and implemented on 15 September 2023.